Privacy Policy

Our VR application is designed to operate on supported Meta Quest devices and may provide interactive virtual experiences, exercises, training activities, rehabilitation sessions, or assessments.
When you use our VR application, we may process the following information, depending on the features enabled:

• User account identifiers used to associate sessions with the appropriate user.
• VR session records, including session dates, duration, activities, and completion status.
• Responses and results entered or generated during assessments or exercises.
• Device and application diagnostic information needed to troubleshoot errors and improve performance.
• Motion, controller interaction, or other sensor-related information only when required by specific application features and actually collected by the application.

Headset privacy: We do not intentionally store personal health information or clinical records directly on the Meta Quest headset. Where applicable, session records are transmitted to and stored on our authorized backend systems. Temporary processing or caching on the device may occur as necessary for the application to function.
We do not collect eye-tracking, facial-expression, voice, hand-tracking, or other biometric data for identification unless a specific feature requires such collection and the relevant practices are disclosed to users.
The VR application may rely on Meta's platform services to operate. Meta may independently process certain information in accordance with its own privacy policy and platform settings.

We process personal information securely and confidentially in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR), where applicable, and other relevant privacy legislation.
We implement appropriate technical and organizational security measures designed to protect information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or unauthorized access.
These measures may include access controls, authentication, encrypted communication, secure server configurations, restricted administrative access, and appropriate monitoring and backup procedures.
Access to personal information is restricted to authorized personnel and service providers who require it to perform their assigned responsibilities.

We use collected information for the following purposes:

• To create and manage user accounts and authenticate users.
• To provide website, software, and Meta Quest VR application functionality.
• To record VR sessions, activities, exercise completion, and assessment results where applicable.
• To support rehabilitation, pain-management, training, educational, or other services offered through the application.
• To maintain service quality, troubleshoot technical problems, and improve application performance.
• To protect the security and integrity of our systems.
• To communicate with users regarding their accounts, requested services, and relevant support matters.
• To comply with applicable legal and regulatory obligations.

We do not use personal information for purposes incompatible with those described in this policy without an appropriate legal basis.

Personal information is retained only for as long as necessary to fulfil the purposes for which it was collected, meet applicable legal obligations, resolve disputes, and enforce agreements.
Retention periods depend on the type of information, the nature of the service, applicable legal requirements, and the purpose of processing.
VR session records, exercise results, and assessment data may be retained for the period required to provide the service or maintain relevant clinical, training, or operational records.
When information is no longer required, it will be securely deleted or anonymized, subject to applicable legal retention requirements.

Information about your use of our website, software, and VR application may be shared with authorized service providers when necessary to operate, secure, maintain, or improve our services.
These service providers may include cloud hosting providers, database providers, technical support providers, and application platform providers. They are permitted to process personal information only as authorized and subject to applicable contractual and legal obligations.
We do not sell personal information to third parties.
Personal information may be disclosed when you provide appropriate consent, when necessary to provide a service you have requested, or when disclosure is required or permitted by applicable law.
Meta may process device, platform, and usage information independently when you use Meta Quest services. Such processing is governed by Meta's applicable privacy policy and settings.
Where personal information is transferred internationally, we will implement appropriate safeguards when required by applicable law.

Our VR application may use Meta Quest platform services and other third-party technologies to support application functionality, authentication, device compatibility, analytics, or technical diagnostics.
The information processed by these providers depends on the features integrated into the application and the permissions granted.
Please review the privacy policies of relevant third-party providers, including Meta, to understand how they independently collect and process information.

Subject to applicable law, you may have the right to:

• Request access to personal information we hold about you.
• Request a copy of your personal information in a commonly used, portable format where applicable.
• Request correction of inaccurate or incomplete information.
• Request deletion of personal information when legally permissible.
• Object to certain processing activities or request restrictions on processing.
• Withdraw consent where processing is based on consent.
• Request information about how your personal information is collected, used, and shared.
• Lodge a complaint with the relevant data protection authority.

To exercise these rights, submit a request to:
Email: info@bauddhartha.io
We may need to verify your identity before processing a request. Some information may need to be retained where required by law or where another lawful basis for retention applies.

Our website, software, and VR application are not intended for children where their use would violate applicable age restrictions or laws. Where services are intended for children, appropriate consent and safeguards will be implemented as required by applicable law and Meta platform requirements.
If we learn that personal information has been collected unlawfully from a child, we will take appropriate steps to address the situation.

We may update this Privacy Policy from time to time to reflect changes to our services, Meta Quest VR application features, data processing practices, or legal requirements.
The updated version will be published with a revised "Last Updated" date. We encourage users to review this policy periodically.

If you have questions, concerns, or requests regarding this Privacy Policy or the processing of your personal information, please contact us:
Email: info@bauddhartha.io
Organization: Bauddhartha
Website and VR application users may contact us through this email address for privacy-related inquiries, access requests, correction requests, or complaints.