No account, no phone number, no name. Your messages stay on the server for 24 hours, encrypted, so they can be played back and read as transcripts, then they're deleted. Nothing leaves the server. Approximate location only.
What goes through
| Data | Why | How long |
|---|---|---|
| Your voice | It is the message. It is relayed to radios listening on the same channel, within your range. For one hour, a radio arriving on that channel within the same range can also play it back and read its transcript. | 24 h. Kept encrypted (AES-256) on the server's disk, so that a restart doesn't erase it early; a copy of the disk doesn't give away the voices. Deleted from disk and memory 24 h after it was spoken, or as soon as moderation removes it. |
| Its transcript | To read a message you couldn't listen to. Made on the server, by a local engine: the audio never leaves the machine. Approximate, and presented as such. Translated only on request, on the same server, by a local engine as well. | With the message: 24 h. |
| A device identifier | Drawn at random on first launch, signed by the server. It lets you find your missed messages and, if needed, keep out a radio that abuses the service. | As long as the app is installed. It says neither who you are nor what phone you have. |
| Your call sign | The name you choose to show to others. Free, editable, not verified. | As long as you keep it. |
| An approximate location | A hexagonal cell of about 5 km² (2.5 to 3 km across), to know who is “around”. Neither your precise location nor your route, unless you accept tracking by an event (next row). | The radio's latest cell, replaced at each update: never a history of your movements. Each message keeps the cell it was spoken from, and is deleted with it after 24 h. |
| A precise location, on an event only | If an event you join tracks its participants (for a rally's safety, for example), and only if you agree: your precise location goes to its organisers, and to them alone, as long as you're on the event. An indicator shows it on screen at all times, and you can stop it at any moment. | Only the latest point, in memory: never on disk, never a track, each point replaces the previous one. Deleted as soon as you withdraw your consent or leave the event. |
| A report | When you report a message, we keep the reported message, its transcript, its author's call sign and the reason, so that a person can review it. The person reported doesn't know who reported them. | 30 days at most. |
| The radios you block | Their device identifier and call sign, so that you no longer hear what they say on public and private channels. | Until you unblock them, in Settings. |
| A notification token | To wake the radio when someone talks and the app is asleep. Provided by Apple or Google, it contains nothing personal. | Replaced at each connection; forgotten as soon as it's rejected. |
On an event channel, the organiser can show their own privacy notice before you enter. On their Emergency channel, your location is sent to the organisers, and the screen says so. Outside that channel, the organisers only receive your location if you've accepted event tracking.
What the app doesn't do
- No account. Nothing to create, nothing to remember, no email address or phone number asked for.
- No recording. The microphone only opens while you hold the Talk button. Nothing is recorded on your phone.
- No tracking. No analytics in the app, no advertising, no sharing with third parties. The server is ours.
- No address book, no photos, no files. The camera is only used to read an event's QR code, when you ask it to.
- Keywords stay on the phone. If you turn on the listening assistant, speech recognition happens on the device, never at Apple's or ours.
- Bluetooth is only used for the Talk button you pair, and the watch (Apple Watch, Wear OS) only talks to your phone.
Private channels
A private channel is joined with a code. The server keeps the list of its members, by device identifier and call sign, to show the group and let it survive a restart. Leaving the channel removes you from it; closing it erases the list.
Test versions
The app keeps a local technical log (connection timestamps, link quality, sound levels), which it doesn't send on its own: you choose to export it, from the settings, to send it to us. It contains no voice and no transcript.
Only the test versions (TestFlight, Google Play internal testing), installed by our testers, also send us technical readings: battery, network, crashes, and what the radio did with each message received. None of this leaves an app installed from the App Store or Google Play.
This website
To know which pages are read and how many visitors go on to download, this site counts its visits with GoatCounter, an open-source tool installed on our own server, in France. It sets no cookie, doesn't keep your IP address and doesn't follow you from site to site: it records the page viewed, the site you came from, the country, the browser type and the screen size, with nothing that identifies you. These figures are for us only, are neither sold nor shared, and are never matched with the app. The organiser console pages and invitation links are not counted. The only cookie on this site remembers the language you chose, if you choose one.
Your rights, and whom to contact
Since nothing identifies you, there's nothing to correct or export: uninstalling the app removes the device identifier, and your messages delete themselves within 24 hours. For any question: contact@solobisoft.com.
Publisher: Solobisoft, Paris. Server hosted in France. Last updated: 7 October 2026.