Privacy

🇫🇷 Version française

Privacy

SatMe has no account, no advertising and no tracking. Everything is computed on the phone; what leaves it, and where to, is listed here.

What stays on the phone

• Your position and locator, followed satellites, settings.
• Pass recordings (MP3), SSTV pictures, APRS frames (kept 7 days), the contact log.
• Passwords and API keys (QRZ.com, LoTW, Wavelog / Cloudlog, hams.at): stored on the phone and sent only to the service they belong to.

What SatMe sends, and to whom

To	When	What
SatMe GP server (gp.f4ioz.fr by default) or the sources (AMSAT, CelesTrak, SatNOGS)	Refreshing orbital elements	The request, with the header User-Agent: SatMe/<version> (Android <n>). No callsign, no identifier.
SatNOGS, AMSAT status page, hams.at	Transponders, satellite status, skeds	Plain requests naming SatMe in the User-Agent, no identifier
Map tile servers (OpenStreetMap, Topo, Dark)	Showing a map	The tiles being displayed
AMSAT	Only when you send a "heard / not heard" report	Your callsign, locator and the satellite, as the report form asks
Your Wavelog / Cloudlog	Only if you set it up	Your contacts, and SatMe as a radio
Your QRZ.com, LoTW, hams.at accounts	Only if you set them up	Lookups with your own credentials
Your own network	Only while you use them	The PC control desk and the live demonstration are served by the phone on your local network

Over the air, APRS transmits your callsign and your position (exact, or shifted by less than 500 m with Approximate position) — that is what APRS is.

What the SatMe GP server sees

Like any web server, it sees the address a request comes from and its User-Agent (SatMe and Android versions).

• Client addresses are kept 7 days (default), then erased. The server derives the country from them (free DB-IP database).
• To count how many SatMe use it, it tells phones apart within one day only, with a fingerprint salted by a secret drawn each day and erased the next: two days cannot be linked and an address cannot be found back. Only the totals are kept (per day, SatMe version, Android version, country).

To avoid it altogether, empty its address in Settings › Orbital sources: SatMe then asks the sources directly. See SatMe GP server.

Permissions

Permission	Why
Location	Passes over your position, your locator
Microphone	Recording a pass (MP3, SSTV and APRS decoding)
Notifications	Pass alerts, recording in progress, APRS cheers
USB devices	Rig (CAT), rotator, KISS radio, SDR dongle, asked when plugged in
Bluetooth	Bluetooth hands-free audio and external compass

The full policy: privacy-policy.html.