Deutsch

Privacy: HamTalk Logbuch

This notice applies to the HamTalk Logbuch app on iPhone, iPad and Mac. You do not need an account with us.

Our principle

Your data belongs to you. Your log is on your device and, if your device is signed in to iCloud, in your own iCloud area. You can export and delete it at any time.

This does not mean that nothing ever leaves your device. If you use the AI assistant, the watcher with notifications, iCloud or another service, the data needed for it goes there, in part also to Anthropic and Apple. Our server also keeps an access log with your IP address, which is deleted after at most seven days, or after about five weeks if it is blocked for abuse. Details are below.

In short

Controller

The controller is Christoph Kopetzky (DO1RTH), Homburger Straße 59, 66424 Homburg (Saar), Germany. Contact for all privacy questions: [email protected]. Where this notice says "we", "us" or "our server", it refers to Christoph Kopetzky.

What stays on your device

Your log is kept in a database in the app's protected area on your device, along with automatic local backups. For each contact it holds, for example, the callsign, date and time, band, frequency, mode, reports, the other station's name, QTH and locator, your station, notes, references (POTA, SOTA, WWFF, IOTA, DOK) and QSL status.

Your credentials for third-party services are stored only in your device's keychain. Caches of callsign lookups, the country file and reference lists also stay on the device. We cannot access any of this.

iCloud

If your device is signed in to iCloud, the app automatically syncs your log between your devices through your own private iCloud area (CloudKit). There is no separate switch for this in the app, but you can turn iCloud off for HamTalk Logbuch in your device's iCloud settings. The provider is Apple, and Apple's privacy policy applies. We have no access to it.

Good to know: The content of each contact is stored encrypted. So that entries can be sorted, however, these fields are stored unencrypted in your iCloud area: the other station's callsign, the start of the contact, the time of the last change, the deletion time and a technical version number.

Settings are synced through iCloud key-value storage. Our other HamTalk apps can also read this area so that they know the "log per app" switch. From version 1.4.1, the HamTalk (DMR) app also writes its log entries to this private database. You can turn this off.

Services you set up yourself

Using your own credentials, you can use these services:

Your device talks to the service directly, not through our server. What is sent is the relevant contact data including the locator, so also your own locator if it is in the entry, and the callsign you search for in a lookup. When fetching confirmations, your credentials and the query go to the service. Images from a callsign lookup are loaded from the provider concerned, which sees your IP address.

These services decide on their own processing and are responsible for it. Their terms and privacy policies apply. Some are based outside the EU, for example in the USA, and some make data publicly visible. Please check before setting up a service. You can remove the setup at any time.

DX cluster. The app only connects to a cluster node once you turn the cluster on. After that it connects by itself at each start until you turn it off. It sends your callsign to the node. The default is db0sue.de, you can enter another. The connection uses Telnet and is not encrypted. The node's operator decides on its own processing. The legal basis is Art. 6(1)(b) GDPR, because you turn the cluster on yourself.

Public data sources

For the country file and reference lists, the app fetches public sources: country-files.com, storage.sota.org.uk, pota.app and darc.de. The providers see your IP address and what is fetched, but no log data. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is providing you with up-to-date data for the app's features.

AI assistant

The AI assistant is optional. The log works without it. It is software, not a person, and its answers can be wrong.

When data is sent. Only if you have consented and ask a question. The assistant only reads and does not change your log.

Which data. - your question and the earlier course of this conversation, meaning everything you type there - the extracts from your log needed for the answer: the other station's callsign, band, mode, time, reports, the other station's locator, the other station's references, your own references (POTA, SOTA, WWFF, IOTA, DOK, SIG), confirmations, upload status, paper QSL, QSL manager, contest exchange, an internal entry ID, plus statistics, award status and bearings with the most distant callsign per direction. Each tool call is limited to 12,000 characters of text. - your device's language, time zone and offset from UTC

The other station's name and QTH, your notes and your own locator are not sent from the log. For bearings, your locator is used only on the device. Your own references can, however, reveal your location.

Please do not put anything into your questions that you do not want to share, especially health data or passwords.

The route. Your device sends the data encrypted to our relay server at Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen) in Germany. Hetzner works on our behalf (contract under Art. 28 GDPR). The server forwards the request to Anthropic and returns the answer to you. We do not pass your IP address or your purchase receipt to Anthropic.

What our server stores. The content of questions and answers is not stored. What is stored: - a checksum (SHA-256) of Apple's purchase ID. This is not encryption and remains a personal identifier, but it does not tell us your name. - monthly counters and costs linked to this checksum for your quota. They are deleted automatically once they are older than three months, counting the current month. - for the trial, the counters linked to this checksum. They are deleted automatically after the month of the trial purchase and the following month, so after about two months at most. - in the server's access log, your IP address, time, method, host, path, status, size, duration and your app's identifier (user agent). It contains no content and is deleted automatically after at most seven days. - in case of abuse: If your IP address stands out through attacks or many failed requests, the server blocks it for 1 to 24 hours. It then stays in the log of these blocks for up to about five weeks.

We also store monthly totals of overall usage with no link to any person. Apple's purchase receipt is checked and not kept. It shows whether you may use the assistant.

Anthropic. The Claude model comes from Anthropic (Anthropic PBC, 548 Market Street, San Francisco, USA). We use Claude through an API key. Anthropic's commercial terms (Commercial Terms) apply to this. Because we are based in the European Economic Area, Anthropic Ireland, Limited is our contracting partner under those terms. Under the Data Processing Addendum incorporated there, Anthropic processes the data as our processor and uses further sub-processors for this (anthropic.com/subprocessors).

Legal bases. - Use of the AI: your consent, Art. 6(1)(a) GDPR. You can withdraw it at any time in Settings under "AI assistant". After that, nothing more is sent. Earlier processing remains lawful. Anthropic deletes data already sent according to the periods above. - Purchase check and quota: Art. 6(1)(b) GDPR. - Access log and blocks: Art. 6(1)(f) GDPR. Our legitimate interest is finding faults and fending off abuse and attacks. - Details about other radio amateurs in your log (such as their callsign and locator): Art. 6(1)(f) GDPR. The legitimate interest is answering your question. Such details are exchanged in radio operation anyway, and sharing is limited to what is needed.

You may use the AI assistant only from the age of 18.

Callsign watcher

The watcher tells you when a callsign on your list appears on the DX cluster.

On the Mac it runs only on your Mac. Your list does not go to us.

On iPhone and iPad the app does not keep running while the screen is locked. If you turn on the callsign watcher with notifications, our server at Hetzner Online GmbH in Germany does the watching. This is part of the trial or purchase. For this the app sends to it: - your watch list (callsigns and search patterns) - an identifier issued by Apple for notifications to your device (push token) and the technical environment - quiet hours, the interval between two alerts and your time zone - your purchase receipt from Apple. It shows whether there is a purchase or a running trial. It is checked and not stored.

Your own callsign, your contacts, your log, names and your location do not go there. The server reads the cluster with our own callsign, not yours. The cluster operator does not learn your list.

On a match our server sends a message to your device through Apple's notification service (APNs). It contains the spotted callsign, frequency, mode, the spotter and the spot's comment. For this, Apple receives the message and the identifier. Apple runs the service under its own terms, and Apple's privacy policy applies. The data may also be processed in the USA, which is outside the EU. The level of protection there may be lower, and authorities may be able to access it under certain circumstances. Apple states that it uses Standard Contractual Clauses for transfers from the European Economic Area. You can get a copy from Apple (apple.com/legal/privacy/contact).

Storage period. The data stays stored for as long as the watcher with notifications is on. If you turn it off, we delete the registration. The same applies if Apple reports the identifier as invalid. If the app has not checked in for 90 days, we delete the registration automatically. If your trial ends or a purchase is revoked, we delete the registration the next time the app checks in. Matches are not stored. To avoid repeat alerts, the server keeps them briefly in working memory. The AI assistant section applies to the access log.

Legal bases. Art. 6(1)(b) GDPR for the feature you turned on. For other radio amateurs' callsigns on your list, Art. 6(1)(f) GDPR. The legitimate interest is sending you the alert you asked for. Access to the identifier on your device is based on Section 25(2) no. 2 TDDDG.

The watcher is optional. Everything else in the app works without it.

Location

The app only asks for your location when you tap "Use location". It works out your locator and looks for parks and summits nearby. The exact position is neither stored nor sent.

The locator does stay in your entries, though. It goes along when you upload entries to a service, and it syncs through iCloud. Your own locator is not sent to the AI assistant. What is sent there are other stations' locators, your own references and anything you write into your question yourself. A locator shows an area, not an exact address. If you operate from home, however, it can reveal your neighbourhood, and many services display it publicly. You can change or delete it in any entry. The legal basis is your use of the feature, Art. 6(1)(b) GDPR. You can withdraw permission in your system settings.

Microphone and speech recognition

The microphone only runs when you spell out a callsign. The recording is not stored. Recognition runs on the device where possible. Otherwise Apple handles it, and Apple's privacy policy applies.

Local network

For WSJT-X, rig control (CAT) and rotator, the app only connects to addresses you enter yourself. On the Mac there is also a local interface for assistants (127.0.0.1). It is off by default and protected by a key. If you turn it on and connect another program, that program gets access to your log. Where it sends the data is then up to you and its provider.

Purchases

The full version and trial run through Apple's in-app purchase. We receive no payment details from Apple. Our server checks the purchase receipt only for the AI assistant and the watcher with notifications. Apple's terms and privacy policy apply to purchases and the App Store. The app contains no statistics of its own. If you have agreed to share with app developers in your device settings, Apple may provide us with its own app analytics.

Contact by email

If you write to us, we process your message and address to reply (Art. 6(1)(b) and (f) GDPR). We delete them once the matter is closed and no retention duty applies.

Obligation to provide data, automated decisions

You do not have to give us any data. Without consent, you only cannot use the AI assistant; without a purchase or trial, you only cannot use the features tied to them. No automated decision with legal effect under Art. 22 GDPR takes place.

Deleting

If you delete the app, the data disappears from the device. If the server is backed up for technical reasons, deleted data may still be present until that backup is overwritten. A callsign watcher registration initially stays on our server and is deleted automatically after at most 90 days without the app checking in. If you turn the watcher off first, we delete it immediately. You remove iCloud data in your device's iCloud settings. Data held by third-party services is deleted there. We can only match the counters to your purchase if you give us the purchase ID.

Your rights

You have the right to access, rectification, erasure, restriction of processing and data portability. You can also complain to a data protection authority, for example the Unabhängiges Datenschutzzentrum Saarland.

Objection. You can object at any time, on grounds relating to your particular situation, to processing under Art. 6(1)(f) GDPR: [email protected].

As of: 7 November 2026

This notice is available in German and English. In case of differences, the German version applies.