uControl Privacy Policy

Effective date: July 7, 2026

This policy covers the ATAK Plugin: μControl Android app (package com.spicycorp.controller.plugin), published by Spicy Corp (“we,” “us”). μControl is a plugin that runs inside the ATAK (Android Team Awareness Kit) app. It bridges a USB-connected microcontroller and lets ATAK team members trigger commands to one another. This policy describes, in plain terms, what the plugin does with data.

The short version

• μControl has no user accounts and no login.
• It contains no analytics, crash-reporting, advertising, or billing SDKs, and talks to no Spicy Corp server. We never receive your data.
• It requests no Android permissions at all. USB access is granted by you, per device, when you plug something in.
• We do not sell your information, and we do not share it with any third party.

Google Play Data safety summary

This maps our practices to Google Play’s Data safety categories, so this policy and the store form say the same thing:

“Collected” means the data leaves your device: your position and identifiers travel inside ATAK’s messages to the TAK network you configure. “Not shared” means it is never transferred to a third party. Nothing is sent to Spicy Corp, to any advertising or analytics company, or to any data broker, and nothing is sold. The only destination is the TAK network you set up and control inside ATAK.

What the plugin collects, and why

Messages over your TAK network. While connected to a microcontroller with remote control enabled, μControl uses ATAK to send messages over your TAK network so teammates can see the device is available and trigger commands. These messages contain your position (read from your ATAK self-marker), your ATAK callsign and identifier, basic information about the connected USB device, and your command list. This goes only to your own TAK network and the team on it. It does not come to Spicy Corp, and we cannot see it.

USB device data. μControl talks to a microcontroller over a USB cable. Data read from that device is shown to you on screen and stays on your device. The raw serial data never leaves your device; only the basic device-identifier string and your command list travel over your TAK network, as described above.

Location. μControl reads your position only from your ATAK self-marker, while you are actively using ATAK. It does not use Android’s location system, requests no location permission, and never stores your location.

What the plugin does NOT do

No accounts. No analytics or usage tracking. No crash reporting. No advertising or advertising identifiers. No connection to any Spicy Corp server. It declares no Android permissions, and it does not touch your contacts, messages, photos, microphone, camera, or any hardware identifier such as IMEI. The only thing it stores on your device is your list of commands.

Who we share information with

Spicy Corp shares your information with no one, because we never receive it. The only place your information travels is the TAK network you yourself configure inside ATAK, which is under your control, not ours. We do not use advertisers, analytics companies, or data brokers, and we do not sell data.

Data retention

Spicy Corp retains none of your data, because we never receive it. The only thing the plugin stores is your command list, which lives on your device and remains until you delete it or uninstall the app.

Deletion and your choices

Uninstalling the plugin removes its local data (your saved command list) from your device. For any question or request, email hello@spicycorp.com.

Children

μControl is a tactical tool for ATAK users and is not directed at children.

Changes to this policy

We’ll post updates here with a new effective date, and reflect any material change in the app’s store data disclosures.

Contact

Spicy Corp, United States, privacy contact: hello@spicycorp.com