{"title":"Privacy Policy","version":"1.0","updated":"2025-06-01","format":"markdown","content":"# Privacy Policy — HolyLand Award\n\n_Last updated: June 2025_\n\nHolyLand Award (“the App”) is a non-commercial logging tool for the\nIsraeli Amateur Radio Club Holyland Award. We respect your privacy and\nthis document explains what data we collect, how we use it, and the\nchoices you have.\n\n## 1. Who we are\nThe App is operated by the HolyLand Award maintainers (the “Operator”).\nContact: support@holylandaward.com\n\n## 2. Data we collect\n\n### a) Account data (only if you sign in)\n- Email address (login & password reset)\n- Display name and amateur-radio callsign (shown on the global leaderboard)\n- Hashed password (bcrypt, never the plaintext)\n- Google profile id, name, picture, email (only if you sign in with Google)\n\n### b) Activation log\n- Square code, district code, timestamp\n- Optional QSO fields you choose to enter: correspondent callsign, band,\n  frequency, mode, RST sent / received, free-form notes\n- The latitude and longitude reported by your device at the moment of\n  GPS check-in, **only if** you press the “Check-in” button. We do **not**\n  track your location in the background.\n\n### c) Live chat / spot messages\n- Free-form text you send to the chat, your callsign, and the moment in time.\n\n### d) Technical data\n- IP address (visible to our hosting provider in standard server logs).\n- We do **not** use third-party analytics, ad networks, or trackers.\n\n## 3. How we use the data\n- Save and synchronise your activation log between your devices.\n- Compute the global leaderboard and award category progress.\n- Show real-time chat messages and “on-air” spot notifications to other operators.\n- Detect which 10×10 km square you stand in (server-side reverse projection).\n- Generate ADIF / Cabrillo export files on demand.\n\nWe **never** sell your data and **never** share it with advertisers.\n\n## 4. Location data — GPS\nThe App requests location permission for **one purpose only**:\nto detect the Holyland Award 10×10 km square you stand in when you tap\n“Check-in”. Location data is sent to our backend once and the resulting\nsquare code is stored. The raw coordinates are stored alongside the\nactivation only if you don’t turn off that option in the future. We do\nnot run background location tracking; you can revoke the permission in\nthe OS settings at any time.\n\n## 5. Data retention & deletion\n- Account data is kept until you delete your account.\n- Activation log is kept until you delete each entry (or your account).\n- Chat messages are kept for 30 days for moderation, then auto-deleted.\n- To delete your account and all associated data, email\n  **delete@holylandaward.com** from the address you registered with.\n  Your data will be removed within 14 days.\n\n## 6. Security\nPasswords are hashed with bcrypt. All API traffic uses HTTPS. The\nbackend runs in a managed container service with isolated database\naccess.\n\n## 7. Children\nThe App is intended for licensed amateur radio operators. It is not\ntargeted at children under 13 and we do not knowingly collect data\nfrom them.\n\n## 8. Your rights (GDPR / CCPA)\nYou may at any time:\n- Request a copy of all data we hold about you (right of access).\n- Request correction or deletion (right to be forgotten).\n- Withdraw consent and stop using the App.\n\nEmail **privacy@holylandaward.com** for any of the above.\n\n## 9. Changes to this policy\nWe will publish any material change at this URL and inside the App. The\n\"Last updated\" date at the top reflects the most recent revision.\n\n## 10. Third-party services\n- **OpenStreetMap** tiles — used to render the map. OSM does not receive\n  any user identifiers from us.\n- **geoBoundaries** — used to render administrative district outlines.\n- **Google Sign-In** — if you choose to use it, Google may collect data\n  per Google’s own privacy policy.\n\n## 11. Contact\nFor any privacy-related question, write to:\n**privacy@holylandaward.com**\n\n_73, and good DX!_\n"}