Privacy Policy

Effective and Last Updated: September 8, 2026

Universal ATC Companion is operated by Simon Azano Williams , trading as Universal ATC , in Nigeria ("Universal ATC", "we", "us" or "our"). This Privacy Policy applies to the Universal ATC Companion mobile application, beta builds, account services, support channels and related legal website (collectively, the "Service").

This Policy explains what information is processed, why it is processed, where processing may occur, how long information may be retained and the choices available to you. Universal ATC does not sell personal information and does not currently use advertising SDKs or personal information for targeted advertising.

1. Information We Process

1.1 Optional account and profile information

The core flight-simulation experience can be used without an account. If you create an account, we may process:

• Email address and Supabase user identifier;
• Display name and pilot callsign;
• Profile information you choose to provide;
• Trial, promotional, free or Premium entitlement status;
• Cloud-synchronised settings when settings sync is enabled; and
• Account security and authentication events.

Supabase provides authentication and account storage. Universal ATC does not store your plaintext password. Password credentials are handled by Supabase's authentication service. Native account session tokens are stored using protected device storage. Browser builds keep sessions in memory instead of persistent browser storage. If you enable authenticator verification, Supabase processes the enrolment and verification data. Never share your setup key or one-time codes with support. We also record the legal-document versions accepted for your account and the server time of acceptance.

1.2 Microphone, speech and audio processing

Universal ATC requests microphone access only to provide features that you deliberately start, such as Push-to-Talk, Tap-to-Talk or another speech-recognition session. Universal ATC is not designed to continuously record ordinary conversations.

• Clear and Global offline recognition: microphone audio is processed locally on your device to produce a transcript. Universal ATC does not upload these microphone recordings to its backend.
• Phone Recognition: audio is handled by the speech-recognition service selected or provided by your device or operating system. Depending on that service and your device settings, audio may be transmitted to that provider for recognition under its own privacy terms.
• Text-to-speech: downloaded voices generate speech on your device. If the device's own speech service is used, processing follows that provider's settings and privacy terms and may involve its online service. Development builds can use a deliberately configured local-network speech service, sending response text for that request. The retired Universal ATC cloud speech fallback is not used by this version.

Temporary microphone files created for local recognition are intended only for the active recognition request and should be removed after processing. Universal ATC does not use ordinary user microphone transmissions to train speech models, create voice clones or build advertising profiles.

1.3 Local application data and downloaded resources

The application may store information locally on your device, including:

• Application preferences, selected airport, callsign, volume and audio-effect settings;
• Downloaded Clear and Global recognition packs;
• Downloaded Realistic Voice Engine models and regional voice packs;
• Temporary audio, generated speech and media cache files; and
• Flight-session and conversation state required to operate the simulation.

Local data generally remains on the device unless a cloud-sync, support, payment-verification or device-provider processing feature is used. Uninstalling the application normally removes local application data but does not automatically delete an online Universal ATC account.

1.4 Payment and entitlement information

When Google Play subscriptions become available, Google Play will process Android in-app payments. Universal ATC may receive and store information required to verify and maintain an entitlement, including:

• Product or subscription identifier;
• Google Play purchase token;
• Purchase, renewal, cancellation and expiration status;
• Transaction or order reference where provided;
• Verification and acknowledgement result; and
• The Universal ATC user ID to which the entitlement is assigned.

Universal ATC does not receive or intentionally store complete payment-card details. If website purchases are later offered through Paystack, Paystack will process payment information under its own privacy terms, while Universal ATC may retain the transaction reference and resulting entitlement.

1.5 Device, network and diagnostic information

Requests made to Supabase, download hosts and selected device speech services may expose standard network information such as IP address, request time and user agent to those providers. Universal ATC may also process the app version, device model, operating-system version and error details that you voluntarily provide to support.

Automated crash reporting is optional and disabled by default. If you enable Anonymous Crash Reporting in Privacy & Diagnostics settings, Firebase Crashlytics may process crash stack traces, app version, device model, operating-system version, app or installation identifiers and related technical diagnostics so we can investigate stability problems. Universal ATC does not intentionally add your account email, callsign, microphone audio, speech transcript, generated voice audio or precise location to crash reports. You may disable this feature at any time. Reports already transmitted are handled under Google's applicable Firebase terms and privacy practices.

1.6 Beta-testing and support information

For beta testing and support, we may process:

• Tester email address and invitation or participation status;
• App version, device model and Android version;
• Feedback, survey responses and issue descriptions;
• Logs, screenshots, screen recordings or other files you voluntarily submit; and
• Communications with support or community moderators.

Please review logs and media before submitting them and do not include passwords, payment details, private messages or another person's personal information unless strictly necessary and lawfully provided.

2. Device Permissions

Depending on the platform and features selected, Universal ATC may request:

• Microphone: to capture a transmission that you initiate;
• Display over other apps: to show the optional floating microphone controls over a flight simulator;
• Foreground service and notifications: to keep user-requested overlay or audio functionality visible and controllable while another application is in front;
• Internet/network: for accounts, downloads, weather, payment verification and selected device services and development LAN services; and
• Device storage: to store downloaded models, regional voice packs and temporary application files.

You may control supported permissions through the application or your device settings. Disabling a permission may disable the related feature.

3. How We Use Information

We use information only as reasonably necessary to:

• Create, authenticate, secure and delete accounts;
• Operate ATC simulation, speech recognition, text-to-speech, voice-pack and overlay features;
• Save or synchronise settings selected by the user;
• Activate, verify, restore and prevent abuse of trials, promotions and Premium entitlements;
• Distribute beta builds, respond to support requests and investigate defects;
• Protect users, infrastructure and the Service from fraud, misuse or security threats;
• Maintain, debug and improve reliability; and
• Comply with legal, tax, accounting and regulatory obligations.

4. Legal Bases for Processing

Where applicable law requires a legal basis, we rely on:

• Contractual necessity: to provide an account, requested feature, subscription or support service;
• Consent: for optional permissions or processing where consent is required and can be withdrawn;
• Legitimate interests: to secure, maintain, troubleshoot and improve the Service without overriding your rights;
• Legal obligations: for transaction records, lawful requests and regulatory compliance; and
• Protection of rights and safety: where processing is necessary to prevent fraud, abuse or security incidents.

5. How Information Is Shared

We may share limited information with:

• Supabase: authentication, profiles, database records, settings and entitlements;
• Google Play: app distribution, subscription billing, purchase verification and subscription management;
• Firebase App Distribution: invited beta distribution and tester access;
• Firebase Crashlytics: optional crash and stability diagnostics when Anonymous Crash Reporting is enabled;
• Device speech-recognition providers: when Phone Recognition is selected;
• GitHub or another disclosed download host: model, voice-pack, application or documentation downloads;
• Paystack and Selar: when you choose an optional support payment or an available website checkout. The chosen payment provider handles that payment under its own privacy terms;
• Professional advisers and authorities: where reasonably necessary for legal compliance, safety, fraud prevention or the defence of legal rights; and
• A successor operator: as part of a merger, acquisition, financing or transfer of the Service, subject to appropriate confidentiality and notice where required.

We may also share information when you direct us to do so or provide valid consent. We do not sell personal information.

6. International Processing

Universal ATC is operated from Nigeria and is intended for users in multiple countries. Our Supabase project is currently hosted in the West Europe (London) region. Other providers may process information in additional countries. Where required, we will use appropriate contractual, technical or legal safeguards for international transfers.

7. Retention

• Account, profile and cloud-setting information is retained while the account remains active and until deletion is completed.
• Trial and entitlement records may be retained as needed to enforce one-time trials, prevent abuse and resolve access disputes.
• Purchase and transaction records may be retained for subscription verification, refunds, fraud prevention and legally required financial or tax records.
• Universal ATC does not retain Clear or Global microphone recordings on its backend.
• Firebase Crashlytics retains crash stack traces and associated identifiers for 90 days before beginning removal from live and backup systems, according to Firebase's published retention information.
• Beta feedback and support records are retained while needed to resolve the issue, improve the Service or maintain a reasonable record of the beta programme.
• Information in provider backups may remain for a limited backup rotation after deletion before being overwritten, subject to security and legal restrictions.

We will not retain personal information longer than reasonably necessary for the stated purpose unless retention is required or permitted by law.

8. Security

We use reasonable technical and organisational safeguards, including authenticated access, database access controls, row-level security where applicable and encrypted network connections to supported HTTPS services. No system or transmission method can be guaranteed to be completely secure.

9. Your Choices and Privacy Rights

Depending on your location and applicable law, you may have the right to:

• Access or obtain a copy of your personal information;
• Correct inaccurate or incomplete information;
• Delete your account and associated personal information;
• Object to or restrict certain processing;
• Withdraw consent without affecting earlier lawful processing;
• Request portability where applicable; and
• Complain to the Nigeria Data Protection Commission or another competent local authority.

We may need to verify your identity before completing a request.

10. Account and Data Deletion

You may request account deletion through the following route:

• On the web: Universal ATC Account Deletion .Universal ATC Account Deletion

In current builds, open Settings → Account & Subscription → Delete account. Verify your identity and confirm the deletion. If you cannot sign in, use the verified email request route on the Account Deletion page.

Deletion removes the Supabase authentication account and associated Universal ATC profile, cloud settings and entitlement data, except limited records that must be retained for legal, payment, tax, fraud-prevention, security or dispute-resolution purposes. Retained records will be restricted to those purposes and removed or anonymised when no longer required.

Deleting a Universal ATC account does not automatically cancel a Google Play subscription. Subscriptions must be cancelled separately through Google Play. Uninstalling the app also does not delete an online account.

11. Children's Privacy

Universal ATC is not directed to children under 13. We do not knowingly collect personal information from a child under 13. A user who is under the age of legal majority in their country must have permission and appropriate involvement from a parent or legal guardian where required. Contact us if you believe a child has provided personal information contrary to this section.

12. AI, Speech and Simulation Outputs

Speech recognition, generated speech and simulated ATC output may be inaccurate or unexpected. These features are provided for flight simulation and entertainment. They must never be treated as real-world air traffic control instructions or used for real aviation safety decisions.

13. Third-Party Links and Services

Independent providers have their own privacy terms. Universal ATC does not control information that a provider collects directly from you outside our Service. Review the provider's current privacy information before using an optional service or completing a payment.

14. Changes to This Policy

We may update this Policy when the Service, providers, legal requirements or data practices change. The effective date will be revised, and material changes may also be announced in the application or through another appropriate channel. We will request consent when required by law rather than treating continued use as consent to new optional processing.

15. Contact

Data Controller: Simon Azano Williams, trading as Universal ATC

Country: Nigeria

Email: universalatcapp@gmail.comuniversalatcapp@gmail.com

16. Aviation Disclaimer

Universal ATC Companion is an aviation simulation companion for entertainment and informational purposes. It is not an official air traffic control authority, certified aviation communications system, approved navigation source or substitute for real-world procedures, regulations, professional training or qualified aviation personnel.