Privacy Policy

1. Who we are

2. What we collect

We aim to collect the minimum information necessary to operate and improve the App and the Site.

A. Information you provide

Support communications: when you contact us, we receive the information you choose to provide (e.g., name, email, message content, attachments).

B. Information from platform providers (Meta Quest)

• Entitlement / purchase status, to verify ownership.
• Non-personal device / profile identifiers used to deliver updates and manage ownership.
• We do not receive your real name or email from Meta unless you share it with us (e.g., via support).

C. Automatically collected information (App)

• Device and performance data: device model, OS version, GPU/CPU, region/language, runtime logs.
• Diagnostics and crash reports: anonymized or pseudonymized error/performance data.
• Basic interaction data: non-identifying events used to understand stability and performance.
• We do not collect precise location, microphone audio, or camera video.

D. Hand, body, and eye tracking

• On-device processing is used to interpret your hand, body, and eye movements for interaction with the virtual world.
• In single-user experiences, this data remains fully local to your device.
• In multiplayer or shared experiences, limited tracking data may be transmitted in real time between connected users solely to enable synchronized interaction. This data is never stored or used for profiling.
• We do not record, permanently retain, or analyze raw tracking data beyond the moment of interaction.

E. Information collected on the Site

• Cookies: we may use strictly necessary cookies. If we add analytics/marketing cookies, we will update this policy and, where required, ask for consent.
• Server logs: IP address, browser type, and basic request data for security and performance.

3. How we use information

• Operate, secure, and improve the App and the Site
• Diagnose, prevent, and correct errors, crashes, or abuse
• Provide user support and respond to requests
• Comply with legal obligations and platform requirements
• Produce aggregated, non-identifying statistics

We do not use your information for targeted advertising and we do not sell personal information.

4. Legal bases (EEA / UK users)

In addition to the universal rights described in Section 8, for users in the EEA and UK we rely on the following legal bases under the GDPR / UK GDPR:

• Performance of a contract to provide the App / Site you request
• Legitimate interests (security, fraud prevention, debugging, improving stability)
• Consent (only where we rely on it, e.g., non-essential cookies)

5. Sharing and disclosures

• Service providers under confidentiality obligations
• Platform providers (e.g., Meta) as required
• Legal / safety compliance
• Business changes (merger, acquisition), subject to protections

We do not sell personal information.

6. International transfers

Your data may be processed in countries other than where you live. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses).

7. Data retention

• Diagnostics / logs: kept only as long as needed, then deleted or anonymized.
• Support communications: retained as long as necessary, then deleted or anonymized.

8. Your rights — available to all users, worldwide, at no cost

Every user, regardless of geographic location, and free of charge, has the right to:

• Access their personal information
• Request correction of inaccurate information
• Request deletion of their personal data
• Request restriction or object to certain processing
• Request data portability (where applicable)
• Withdraw any consent previously given
• Lodge a complaint with a relevant data protection authority

These rights apply universally and are not restricted to users in any specific country, region, or jurisdiction. We never charge a fee to exercise them.

How to make a request

To exercise any of these rights, email us at hello@dilucious.com with "Privacy Request" (or "Data Deletion Request") in the subject line. We will respond within 30 days and confirm in writing when the request has been completed.

Cases where a deletion request cannot be fulfilled

In rare cases, we may not be able to fulfill a deletion request when:

• The data is already fully anonymized and can no longer be linked back to you, making targeted deletion technically impossible.
• We are required by law to retain certain records (for example, financial or tax records related to subscription payments processed by Meta on our behalf).
• Retention is strictly necessary to defend a legal claim, comply with a legal obligation, or protect the security of the App or other users.

In any such case, we will explain the specific reason in our written response.

Deleting data held by Meta

For data Meta holds about your use of the App (which we cannot access or delete on your behalf), please use Meta's account and data deletion tools at https://www.meta.com/help/account/

9. Children's privacy

The App and Site are not directed to children under 13. We do not knowingly collect children's data. If you believe a child provided information, contact us at hello@dilucious.com and we will delete it.

10. Security

We use administrative, technical, and organizational measures appropriate to the data we process. No system is 100% secure.

11. Third-party services and links

The App relies on platform services from Meta (Quest) and may link to third-party pages. Their practices are governed by their own privacy policies. Meta's policy is available at https://www.meta.com/privacy/policy/

12. Changes to this policy

We may update this policy. If changes are material, we will provide appropriate notice (e.g., on the Site or in-app) and update the "Last updated" date above.

13. Contact us

For any privacy inquiries or data requests, please contact us at hello@dilucious.com.