Comms App

1. Information We Collect

• Account Information: Email address and password (managed by Supabase Auth).
• Profile Information: Callsign and experience level you provide in profiles.
• Usage/Progress Data: Completed situation IDs, timestamps, and optional transcripts of your radio exchanges saved to completed_situations.
• Speech Recognition Data: We access your device microphone for speech recognition. We do not save raw audio; we process speech to text for in‑app feedback and, if you proceed, store text transcripts with your completion record.
• Device/Technical Data: Limited technical data inherent to app operation (e.g., device OS, in-app error logs). We do not run third‑party analytics or advertising SDKs.
• In‑App Purchases: Purchase tokens/receipts handled by Apple App Store or Google Play. We do not receive your full payment card details.

2. How We Use Your Information

• Provide and improve the service: Authenticate you, load situations, drive simulations, and show progress.
• Speech feedback: Convert speech to text and validate phraseology during simulations.
• Progress tracking: Mark situations completed and optionally save transcripts for review.
• Support and safety: Troubleshoot, secure accounts, and prevent abuse.
• Transactions: Enable and validate in‑app purchases.

3. Legal Bases (EEA/UK users)

• Contract: To provide the app and its features you request.
• Legitimate interests: Improve safety, performance, and user experience.
• Consent: Microphone/speech recognition permissions and optional transcript storage where applicable.
• Legal obligations: Compliance with applicable laws and store policies.

4. Sharing and Disclosure

Service providers (processors):

• Supabase (managed Postgres, authentication, storage) hosts account, profile, completion, and transcript data. See Supabase's privacy commitments at https://supabase.com/privacy.
• Speech recognition is provided by platform vendors (Apple/Google) via system frameworks and may transmit audio for recognition per platform settings/policies.
• App stores (Apple/Google) handle purchases and receipts.

• Legal/Compliance: We may disclose information if required by law or to protect rights, safety, and security.
• No selling of personal information: We do not sell your personal data or share it for targeted advertising.

5. Data Retention

• Account and profile: Retained while your account is active.
• Progress and transcripts: Retained until you reset progress in Settings or request deletion.
• Purchase records: Retained as required for transaction validation and compliance.

We may anonymize or aggregate data for longer retention.

6. Your Choices and Controls

• Permissions: You can revoke microphone/speech permissions in your device settings; this may limit speech features.
• Reset progress: Use Settings → "Reset All Progress" to delete your completion/transcript records.
• Access/Correction/Deletion: Contact us to access, correct, or delete your data (including account deletion). See Contact section.
• Opt‑out of marketing: We do not send marketing within the app; community links (e.g., Discord) are optional.

7. Security

• Safeguards: We use reasonable administrative, technical, and organizational measures. We rely on Supabase's managed infrastructure (including encryption in transit; encryption at rest provided by the provider).
• No method is 100%: We cannot guarantee absolute security.

8. Children's Privacy

The app is not directed to children under 13 (or under 16 where applicable). If you believe a child provided personal data, contact us to remove it.

9. International Data Transfers

Your information may be processed in countries where our providers operate (including Supabase's hosting regions and platform speech services). We implement measures consistent with applicable law.

10. Third‑Party Services

• Supabase: Authentication, database, and storage.
• Speech Recognition: iOS/Android system services (Apple/Google). Your device may transmit limited audio/speech data for recognition in accordance with platform policies.
• App Stores: Apple App Store/Google Play for purchases.
• External Links: The app may open external links (e.g., Discord). Third‑party sites have their own privacy policies.

11. Cookies and Tracking

We do not use third‑party cookies or advertising trackers. We use local device storage (AsyncStorage) to persist your session securely on your device.

12. Data Subject Rights (EEA/UK/Similar Jurisdictions)

Subject to local law, you may have rights to access, correct, delete, or port your data; restrict or object to processing; and withdraw consent. Contact us to exercise these rights.

13. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated in‑app or by other reasonable means. Continued use constitutes acceptance of the updated policy.

14. Contact Us

15. Summary of Permissions

• Microphone: To capture your voice for speech recognition during simulations.
• Speech Recognition: To convert speech to text and provide feedback.
• Network: To authenticate, load/save situations and progress, and validate purchases.