Privacy Policy

Your account

• Your email address, display name and handle (your @name).
• Your password, stored only as a one-way hash that can’t be turned back into the password.
• If you use Sign in with Apple: an identifier for your Apple account, plus the name and email Apple shares with us the first time. If you choose to hide your email, Apple gives us a private address that forwards to you. We also keep, encrypted, the tokens Apple gives us, so we can disconnect FieVol from your Apple account when you delete yours.
• A profile picture, if you add one.
• Which version of these documents you accepted, when, and whether in the app or on the website.
• Your plan (Free or Pro), how you got it (bought through Apple, or given by us) and when it ends.
• If you buy Pro in the app: what Apple sends us about each purchase and renewal. That is Apple’s numbers for the purchase (its transaction IDs), what you bought, when, its price and currency, your App Store’s country (storefront), when it renews or ends, whether it will renew, whether Apple is still trying to charge for it, and any refund. To match a purchase to your account, the app gives Apple a random number we make for your account, and Apple sends it back with the purchase. Apple takes the payment: we never see your card or your Apple Account.
• When you were last active.

Groups and teams

• The groups and teams you create or join, your role in each, any mute or listen-only setting, and when you joined.
• The group and team names and briefings you write.
• Invite links you make, and the link you joined with: which link, who made it and when you used it.
• Whether you agreed to share your location in each group.

Reports and blocks

• If you report a person or a group: who reported, who or what was reported, the reason you chose, any details you add, when, and a copy of the names, profile picture and briefing as they were then.
• The people you block. They aren’t told.

Your location, if you share it

• Only in a group where you agreed to share it, whose owner has Pro, and only while you’re connected to one of its channels: your iPhone’s position and how accurate it is, your speed and direction, your battery level, whether you’re moving, and the time.
• This carries on with your phone locked. The app asks iOS to allow your location “Always” so it can do that without hiding the walkie-talkie’s lock screen button; it still uses your location only as described here, and works with “While Using” too.
• We keep only your latest position, never a trail of where you’ve been.
• If your group uses zones, the last zone you came into there, for at most 12 hours.

When you talk

• For each transmission, we record who talked, on which channel, when and for how long. We don’t record what was said (section 2).
• While you’re connected, FieVol knows that you’re online, on how many devices, and which channel you’re tuned to.

Sign-ins and security

• For each sign-in: when it started, when it was last used and when it expires, the kind of device and browser (its user agent), and a shortened, hashed form of your IP address.
• For each iPhone you’re signed in on: an identifier the app makes up for it, its model, its iOS version, the app’s version, and when the app last started on it. If you turn on Talk with phone locked, also the token Apple gives the app for waking it, which channel should wake it, and the channel a group manager moved you to while it was offline, until it catches up.
• A record of sign-in attempts and of administrators’ changes to accounts and groups, with a hashed IP address.
• A keyed hash of your IP address, kept for up to a day to limit repeated sign-in attempts, and in service logs when the voice service refuses a connection.
• Service logs from the voice service: your handle and account number, when you connected and disconnected, your app version, the channels you joined, and when you talked.

On your iPhone

• Your sign-in, and the identifier the app makes up for your iPhone, are kept in the iPhone’s Keychain. The app also keeps a copy of your profile, which briefings you’ve read and the last channel you used, in its own storage on your phone.

• Your voice. We don’t record it or write it to disk. The voice service holds a transmission in its memory only while it’s live, which is at most 60 seconds, so someone who tunes in partway through hears it from the start. If it woke iPhones with Talk with phone locked, it’s held for up to 30 seconds after it ends, so those phones can play it. Echo Test plays your own transmission back to you, and to no one else. Then it’s discarded.
• Your contacts or photos, or your location unless you choose to share it.
• Anything from the camera. FieVol uses the camera only to scan invite QR codes, and nothing it sees is saved or sent.
• Advertising identifiers, or data for third-party analytics, tracking or crash reporting. FieVol uses none of these tools.
• Cookies beyond one: __Host-fievol_session, which keeps you signed in on the website for up to 30 days.

• To run FieVol: sign you in, connect you to your groups’ channels, show members to each other, carry voice, wake your iPhone when someone talks, and show your position to your team if you share it.
• To give you the Pro you bought, and to check your purchases and their renewals and refunds with Apple.
• To keep FieVol safe: limit sign-in attempts, refuse offensive names and briefings, carry out your blocks, review reports of abuse and enforce the Terms.
• To find and fix problems.
• To send account emails, such as confirming your email address and resetting your password. We don’t send marketing email.
• To meet our legal obligations.

We don’t sell your information, use it for advertising, or share it with anyone for their advertising.

• Anyone with an invite link sees the group’s name, how many members it has, and the name of the person who made the link.
• Members of your groups see your name, handle, profile picture, role, mutes and when you joined; whether you’re online, on how many devices and on which channel; and hear your voice live when you talk on a channel they’re on.
• If you share your location in a group, the members tuned to the same channel as you, and the group’s owner, admin and dispatchers, see your last position with its accuracy, speed, direction, battery level and time, while the group’s owner has Pro.
• If your group uses zones (areas its dispatchers draw on the team map), coming into one while you share your location moves you onto that zone’s team, so the group’s members can tell from your team roughly where you are.
• Group managers (owners, admins, dispatchers, and leads for their own teams) also see which invite link you joined with and who made it. Dispatchers and above can listen to the group’s channels.
• If you block someone, you don’t hear them or see their profile picture, and neither of you sees the other’s location. They aren’t told you blocked them.
• FieVol’s administrators (today, Brett Berry) see account details (handle, name, email, role, plan, sign-up date and last activity), every group with its owner, and reports of abuse with who made them, to give support and enforce the Terms. Their changes are recorded.
• The authorities, when we must disclose information to comply with a valid legal request, or when we believe it’s needed to protect someone’s safety.
• A company that takes over FieVol, for example one formed to run it. This policy would still apply to your information.

• Microsoft Azure hosts FieVol in the United States (its Central US region): the servers, the database, storage for profile pictures, and service logs. Azure Communication Services sends our account emails, and sends each report to our support address.
• Apple provides Sign in with Apple, the App Store, in-app purchases, the map on the Map tab and the website’s dispatch console, and the links that open the app. Apple takes payment for Pro and tells us about each purchase, renewal and refund. If you turn on Talk with phone locked, Apple’s push service wakes your iPhone when someone talks: each push says who is talking, on which channel.
• Cloudflare runs fievol.com’s domain names, and forwards email sent to support@fievol.com, including reports, to us.

They process information only to provide these services to us.

• Your account, groups and memberships: until you or a group’s managers delete them.
• Sign-ins: until they expire or you sign out (web sign-ins last 30 days; the app’s last 90 days and renew while you use it), then deleted within 30 days. The record of the iPhone a sign-in is on is deleted when you sign out, or soon after the sign-in expires.
• Your last position, if you share it: deleted when you stop sharing, and at most 12 hours after it was taken.
• Links we email you to confirm your address or reset your password, with the address each went to: deleted 7 days after they’re used or expire.
• Transmission records: 90 days.
• Records of sign-in attempts and administrators’ changes: 1 year.
• Records of purchases through Apple: as long as your account exists. Apple’s notices about them: 90 days.
• Reports of abuse: 1 year. Blocks: until you unblock someone, or either of you deletes your account.
• Service logs: 30 days.
• Invite history: as long as the group exists. When you delete your account, your name is removed from it.
• Backups: up to 7 days, then overwritten.

You can delete your account in the app or on the website. When you do:

• We delete your account, sign-ins and the devices they’re on, group memberships, any position you shared, plan, records of your purchases, blocks and profile picture, and disconnect FieVol from Sign in with Apple.
• Each group you own passes to its admin, who becomes its owner. A group with no admin is deleted, with its teams, channels, invites and transmission records.
• Records other people rely on, such as a group’s invite history and transmission records until they expire, stay without your name.
• Deleting your account doesn’t cancel a subscription you bought through Apple: cancel it in your iPhone’s Settings. We keep Apple’s number for the purchase, what it is and whether it’s still running, without your account, so you can restore it to a new one.
• Copies in backups are gone within 7 days.

To choose who takes over a group you own, make that person its admin before you delete your account.

• Connections to FieVol are encrypted, including voice.
• Passwords are stored only as bcrypt hashes.
• The database accepts connections only from FieVol’s own servers in Azure, over verified encrypted connections.
• On your iPhone, your sign-in is kept in the Keychain and stays on that device.

No system is perfectly secure. If a breach affects your information, we’ll tell you as the law requires.

FieVol is only for adults: you must be 18 or older to use it. If we learn that someone under 18 has an account, we delete it. If you believe someone under 18 has given us information, tell us at support@fievol.com.

• See and correct: your name, handle and email are in your profile, in the app and on the website.
• Delete: delete your account at any time (section 7).
• Block: block anyone, in the app.
• Location: stop sharing at any time, in the app. Your position leaves the map at once and is deleted.
• Get a copy: email us, and we’ll send a copy of your information within 30 days.

Depending on where you live, for example California, the European Union or the United Kingdom, you may have further rights: to know what we hold about you, to correct or delete it, to object to or limit how we use it, and to receive it in a portable form. We honor these requests, and we won’t treat you differently for making them. If you’re in the EU or UK, we rely on our agreement with you to provide FieVol, and on our legitimate interest in keeping it safe and working; you can also complain to your data protection authority.

In the United States. If you use FieVol from another country, your information is transferred to and processed in the U.S.

We may update this policy. We’ll post each new version with its effective date. For changes that matter, we’ll tell you in the app or by email before they take effect.

Contact: Brett Berry, FieVol · support@fievol.com. See also the Terms of Service.