The following is stored only on your device. Ordinary preferences use the standard platform store (SharedPreferences on Android, NSUserDefaults on iOS); secrets such as network passwords, tokens and API keys are kept in the platform secure store (Keychain on iOS, encrypted preferences backed by the Keystore on Android). On the rare device whose keystore is broken and refuses those calls, the app saves them in its own private storage with basic protection instead — a real downgrade, so the app says so plainly in the Networks panel of Settings rather than claim protection it did not apply. None of this is sent to any Unixeer server.
Callsign lookup (optional, on by default). P25, DMR and NXDN carry only a numeric radio ID on the air, with no callsign, so a station appears as 3183458. When “Show callsigns” is on, the app asks radioid.net for the callsign belonging to an ID it has just heard, and shows that instead. The only thing sent about a station is that number, which arrived on the air in public and is not yours — never your callsign, your grid, your email, your logins, and never your own radio ID. Only the number and the callsign that comes back are stored, on your device, so the same station is never looked up twice; nothing else from the reply is kept. There is no search: the app can only resolve an ID it has actually heard. It fails silently back to the number when offline, and you can switch it off in Settings. If you choose to enter your own RadioID API key in Settings — optional, and the lookup works without one — that key is sent with the request as an identifying header, because it is yours and it is what identifies you to RadioID. It is held in the platform secure store like any other secret, it is never bundled with the app, and it goes nowhere but radioid.net. RadioID approved this use in writing on 8 September 2026. The country flag beside a callsign is worked out from the ID itself and needs no lookup at all.
Ham Voicing uses your device microphone to capture your voice when you press push-to-talk (PTT). Audio is captured only while you are transmitting.
Here is every permission the app itself requests in the shipping build, and what each one is for. Nothing in this list is used to gather information about you — each entry exists because a part of the app cannot work without it.
The app's Android permission list includes BLUETOOTH. Ham Voicing does not ask for it and does not use it. It is merged in by the open-source audio library the app is built on (flutter_sound), which supports Bluetooth audio routing. We would rather tell you that plainly than leave you to find an unexplained permission.
Because it is not something the app needs, its hardware feature is explicitly marked not required — so a device with no Bluetooth radio still installs and runs Ham Voicing normally.
As of 14 September 2026 it is also capped to Android 11 and earlier. On Android 12 and later the permission is never granted at all — Android replaced it with a different one, which this app does not request — so it is now declared only for the older versions where the audio library could conceivably route to a headset.
Two permissions were removed on 14 September 2026. The app used to declare VIBRATE and ACCESS_LOCAL_NETWORK. Neither did anything. The short haptic taps come from a system call that needs no permission, so vibration kept working when VIBRATE was taken out; and ACCESS_LOCAL_NETWORK is not a permission Android actually defines, so it granted nothing on any version. If you have an older build installed you may still see them listed in App info, and they do nothing there either.
For the same reason, all three hardware features the app declares — microphone, bluetooth and bluetooth_le — are marked as not required. None of them blocks installation on a device that lacks the hardware.
iOS asks for microphone and local network access with a system prompt the first time each is needed. You can change either at any time in Settings → Privacy, or in the Ham Voicing entry in the iOS Settings app.
When you connect and key up, the app transmits your voice and your callsign over the internet to the amateur-radio voice network, reflector or node that you choose — M17, EchoLink, AllStarLink, DMR, D-STAR, System Fusion, P25 or NXDN. On the networks that use one, the identity you supply (your DMR-ID, P25 radio ID or NXDN RID) is transmitted with your voice, because that is what identifies you on those networks.
A valid amateur radio licence is required to transmit. Before your first transmission the app asks you to accept its House Rules, starting with a confirmation that you hold a licence and transmit only under a callsign and radio ID you are entitled to use. You are solely responsible for operating within your licence class, privileges and local regulations, and for the content of your transmissions.
Ham Voicing is intended for licensed amateur radio operators. The app shows no advertising, has no in-app purchases, and sends no personal data to Unixeer. Use of the amateur radio voice networks requires a valid licence. The app is designed to comply with COPPA, GDPR-K and equivalent child-privacy frameworks.
All settings and credentials are stored only on your device. The surest way to delete them is from inside the app: Delete network credentials in the Networks panel wipes every saved network login, and Reset all settings to defaults clears the rest, including your callsign, grid and email. Two records deliberately survive a reset: the stations you muted (unmute them from the flag beside “Recent talkers”) and the fact that you accepted the House Rules. Clearing the app's data on Android does the same, and removes those two as well. Uninstalling removes the app's own storage, but on iOS an entry already written to the Keychain can outlive the app and reappear if you reinstall — so clear your credentials in Settings first if you want them gone for good. There is no Unixeer account or server data to request deletion of. Any record of your activity held by a network you used is governed by that network's own policy.
By design, Ham Voicing makes the network connections needed to join and talk on the voice networks you select. One request goes somewhere you did not choose. The app ships a complete, dated copy of the reflector and master lists for DMR, D-STAR, System Fusion, P25 and NXDN so the pickers work with no internet at all, and it refreshes the D-STAR, System Fusion, P25 and NXDN lists from the DVRef directory API at dvref.com — at most once every 24 hours, in the background, and again when you tap Refresh now in Settings. The DMR list — BrandMeister’s masters — is not refreshed: it is the copy that came with the app. Nothing about you is sent. The request carries three headers and no more: the app name and version, the developer’s callsign (A41UX) and the project’s support address, which is what DVRef ask for so they can see which software is polling and reach us if it ever became a nuisance. Your own callsign is never sent — nothing about looking up a public directory needs to know who you are. If it fails, nothing is lost: the complete copy already on your device keeps being used. You can switch the automatic refresh off entirely — Settings → On the air Defaults → “Refresh reflector lists automatically”. With it off the app makes no unprompted request at all; the lists you already have keep working, and Refresh now still fetches on demand when you ask it to. The data is published by DVRef under the Creative Commons Attribution 4.0 licence, and the attribution DVRef send with each response is stored alongside the data rather than being restated by us. Until 14 September 2026 this refresh went to pistar.uk instead; it moved at the request of Andy Taylor MW0MWZ, who publishes those host files and who pointed us to DVRef as their source. It also opens your mail app when you tap "Send email" on the Support page; if no mail app is set up, the address is copied to your clipboard instead so the support channel never dead-ends.
The app is built on standard open-source packages, including shared_preferences and flutter_secure_storage (local and secure storage), url_launcher, permission_handler, flutter_sound and audio_session (microphone capture, playback and audio routing), flutter_foreground_task (the ongoing notification while receiving in the background), and the Codec2 and GSM 06.10 voice codecs compiled into the app. The full licence text for every component is in the app under About → Licences & Notices; the voice-codec licences are also reproduced on the Licences & Notices page here. Unixeer integrates no advertising, analytics or tracking SDKs.
This policy is revised whenever the app changes in a way that affects it — for example if a permission is added or removed. The current version always appears at this URL and ships with the app.
Questions about privacy? Email unixeer@gmail.com. We typically reply within a few days.