Privacy Policy

1. Scope & Commitment to Privacy

At S21AMF International Amateur Radio Academy, we respect your fundamental right to privacy and are committed to safeguarding personal information collected from students, examination candidates, amateur radio operators, and visitors.

This Privacy Policy governs both our official web learning portal (s21amf.com) and our official Android mobile application (Ham Radio Academy, package: com.s21amf.s21amf_mobile).

2. Information We Collect

We collect only the minimum necessary data required to deliver educational courses, administer licensing mock exams, and generate verifiable certificates:

• Account Credentials: Full name, email address, student callsign (optional), and securely hashed password (bcrypt).
• Academic & Examination Records: Enrolled course modules, quiz answers, exam scores, completion dates, and unique verifiable certificate verification IDs.
• Cadet Operational Data: Amateur radio QSO logging entries and custom QSL card designs generated locally or stored within the student workbench.
• Technical Session Information: Strictly necessary HTTP session cookies, CSRF defense tokens, and anonymized diagnostic data to maintain platform reliability.

3. Mobile Application & Advertising Disclosures (Google AdMob)

To maintain free, open-access educational tools (such as the CW Morse Audio Lab, Solar Space Weather Dashboard, and Antenna Calculators), our Android mobile application utilizes the official Google Mobile Ads SDK (Google AdMob).

• Ad Types: Non-intrusive banner advertisements and strictly voluntary, opt-in rewarded bonus ads.
• Advertising Identifiers: Google AdMob may collect and process pseudonymous identifiers, such as the Android Advertising ID (AAID), IP address, and app telemetry in compliance with Google's Privacy Policy to detect ad fraud and deliver relevant advertisements.
• User Control: You can reset or opt out of personalized ads at any time via your Android device: Settings → Google → Ads → Reset or Delete Advertising ID.
• Third-Party Privacy Policy: For details on how Google handles advertising data, review the Google Privacy & Terms for Advertising.

4. Financial Data & Merchant of Record (Paddle)

For paid course enrollments conducted via our web portal, all financial transactions and payment processing are handled externally by our global Merchant of Record, Paddle.com Inc.

We never receive, process, or store credit card numbers, CVVs, or bank credentials on our servers. Paddle processes all checkouts under strict PCI-DSS Level 1 security standards. For details, consult Paddle's Privacy Policy.

5. Data Security & Encryption

We enforce strict security safeguards to prevent unauthorized data access:

• All network transmission between your device and our servers is secured via end-to-end 256-Bit SSL / TLS 1.3 encryption.
• Passwords are cryptographically salted and hashed using the robust bcrypt algorithm.
• Continuous firewalling, rate-limiting, and reCAPTCHA protections shield our database from automated credential stuffing.

6. Account Deletion & Data Rights (GDPR & Google Play)

In accordance with GDPR and Google Play User Data policies, students and app users maintain complete authority over their personal data:

7. Children's Privacy (COPPA Compliance)

Our platform and mobile applications are intended for high school students, university scholars, and adult amateur radio candidates (aged 13 and above). We do not knowingly solicit or collect personal information from children under the age of 13. If you believe a child under 13 has registered without parental consent, please contact us immediately for prompt record removal.