================================================================================
DEXTEROUSLY FOR META QUEST - PRIVACY POLICY
================================================================================
Last updated: August 31, 2026
--------------------------------------------------------------------------------
IN SHORT
--------------------------------------------------------------------------------
Your work stays on your headset. Projects, CAD models and everything else you
create or open are never uploaded to us.
Two things do go over the internet:
1. Licence checks. To verify your licence, the Application sends your
licence key and a device identifier to our licensing provider, and
re-checks periodically while you use it. This is not optional.
2. Multi-user sessions, if you use them.
We run no analytics, no advertising and no crash reporting. This version of the
Application does not use the microphone or the camera, and does not access your
Meta account.
--------------------------------------------------------------------------------
1. WHO IS RESPONSIBLE
--------------------------------------------------------------------------------
The Dexterously application for Meta Quest (the "Application") is published by
Jetecon Oy, which is the data controller under the EU General Data Protection
Regulation (GDPR) for the licence and session data described below:
Jetecon Oy
Länsikatu 15, 80110 JOENSUU
Business ID: 2803420-2
Finland
support@dexterously.io
--------------------------------------------------------------------------------
2. WHAT WE PROCESS, WHY, AND ON WHAT BASIS
--------------------------------------------------------------------------------
2.1 Licence activation and validation (always active)
The Application is licensed software and uses Cryptlex for licence management.
When you activate a licence, and periodically thereafter while you use the
Application, the following is sent to Cryptlex servers:
* your licence key;
* a device identifier derived from your headset's hardware, which we attach
to the activation record so activations can be tied to a specific device.
It is also shown to you on the licence panel in the Application;
* technical information about the device and your IP address.
Cryptlex therefore holds a record of activations, deactivations and periodic
licence checks linked to your licence key and device. This is a persistent
identifier and a limited record of when the Application is in use. If you hold
a floating licence, the activation is released automatically when you close
the Application.
Your licence key and an activation token are also stored locally on the
headset so you do not have to re-enter the key.
Why: to confirm you hold a valid licence, enforce the permitted number of
devices, and enable the features you are entitled to.
Legal basis: performance of our contract with you (Art. 6(1)(b)) and our
legitimate interest in preventing unlicensed use (Art. 6(1)(f)).
2.2 Multi-user sessions (only if you use them)
Nothing here happens unless you host or join a session.
By default, sessions are routed through Unity's Relay servers. The Application
signs in anonymously to Unity's services - no name, email or Meta account is
involved - and Unity issues a room code that the host shares. Unity processes
your IP address and connection data in order to route the traffic, which is
encrypted in transit.
The host may protect a session with an optional password. When you join, the
Application sends only a cryptographic hash of that password for comparison -
the password itself never leaves your device.
Shared with the other participants during a session: the display name you
type, the movement of your head and hands (used only to animate your avatar in
real time), and the state of objects in the shared scene. Movement data is not
recorded, stored or analysed by us.
You may instead connect directly to a host on your local network. In that case
your IP address is visible to that host.
Project files and CAD geometry are never transmitted between participants;
everyone must already have the same project file locally.
Why: to provide the collaboration feature you asked for.
Legal basis: performance of our contract with you (Art. 6(1)(b)).
2.3 On your device only
The Application uses Meta's hand-tracking and controller features; this
tracking is processed on the headset and is not transmitted, except as avatar
movement in a session (see 2.2). Passthrough is used for display comfort only
- the Application has no access to camera images.
Project files, settings and diagnostic messages stay on the headset. To let
you keep projects in a folder of your choosing, the
Application asks for access to that folder through Android's Storage
Access Framework; you can revoke it in the system settings at any time.
--------------------------------------------------------------------------------
3. WHAT WE DO NOT COLLECT
--------------------------------------------------------------------------------
This section describes the version of the Application to which this policy
applies, as identified by the date above.
The Application contains no analytics, telemetry, crash reporting or
advertising code. We do not collect your name, email address or payment
details (activation needs only a licence key), your Meta account or profile,
microphone or camera input, eye, face or body tracking, spatial or room-scan
data, or any of your project files or CAD models. This version has no voice
chat and requests no microphone permission. CAD conversion runs entirely on
your device.
If a future version adds a feature that processes new categories of data, we
will update this policy before that version is released.
--------------------------------------------------------------------------------
4. WHO RECEIVES DATA
--------------------------------------------------------------------------------
* Cryptlex LLP - licence activation and validation, acting as our processor
https://cryptlex.com/legal/privacy-policy
* Unity Technologies - engine, anonymous sign-in and relay networking
(only when you use multi-user sessions)
https://unity.com/legal/privacy-policy
* Meta Platforms - headset operating system, store and XR SDK
https://www.meta.com/legal/privacy-policy/
Each acts under its own privacy policy, which we do not control.
--------------------------------------------------------------------------------
5. TRANSFERS OUTSIDE THE EEA
--------------------------------------------------------------------------------
Some of these providers are established outside the European Economic Area or
use infrastructure outside it. In particular, licence activation data is stored
by our licensing provider on cloud infrastructure in the United States.
Such transfers rely on the safeguards offered by the provider concerned, being
the adequacy decision for the EU-US Data Privacy Framework or, where that does
not apply, the EU Standard Contractual Clauses. That provider handles licence
data on our behalf and for licence verification only. Contact us for details of
a specific transfer or of the safeguards that apply to it.
--------------------------------------------------------------------------------
6. HOW LONG WE KEEP IT
--------------------------------------------------------------------------------
Licence activation records are kept for as long as the licence exists, and
afterwards as required for contractual and accounting purposes. Session data is
transient and exists only while the session is running. Files you create stay
on your device until you delete them; locally cached licence data and settings
are removed when you uninstall the Application, though a device activation may
need to be released separately.
--------------------------------------------------------------------------------
7. YOUR RIGHTS
--------------------------------------------------------------------------------
If you are in the EEA or the UK you may ask us to give you access to your
personal data, correct or erase it, restrict or object to its processing, or
provide it in a portable form, and you may withdraw any consent you have given.
Write to support@dexterously.io.
In practice the personal data we hold is limited to licence activation records
(licence key, device identifier, activation times and IP address as logged by
our licensing provider) and any correspondence you send us.
If you think we have handled your data unlawfully you may complain to the
Office of the Data Protection Ombudsman in Finland (tietosuoja.fi) or to the
authority in your own country. You can stop all use of the Application at any
time by uninstalling it.
--------------------------------------------------------------------------------
8. SECURITY
--------------------------------------------------------------------------------
Multi-user sessions using the default relay connection are encrypted in transit.
If you instead connect directly to a host by IP address, that connection is not
encrypted, and the data described in 2.2 - including display names and movement
- travels in the clear over your local network. Use direct connections only on
networks you trust. Licence activation is carried out by our licensing provider
over its own secured connection.
We take reasonable technical and organisational measures to protect data, but
no method of internet transmission is completely secure. When hosting a
session, set a password and share the room code only with people you intend to
invite.
--------------------------------------------------------------------------------
9. CHILDREN
--------------------------------------------------------------------------------
The Application is a professional industrial training tool and is not directed
at children. We do not knowingly collect personal data from children under 13,
and use is subject to the minimum age requirements of the device and store you
obtained it from. If you believe a child has provided us with personal data,
contact support@dexterously.io and we will delete it.
--------------------------------------------------------------------------------
10. CHANGES
--------------------------------------------------------------------------------
We may update this policy by replacing this document with a version bearing a
new date, and will make reasonable efforts to give advance notice of material
changes. Continued use after an update means you accept it.
--------------------------------------------------------------------------------
11. CONTACT
--------------------------------------------------------------------------------
Jetecon Oy - support@dexterously.io
================================================================================