DEXTEROUSLY FOR META QUEST - PRIVACY POLICY
Last updated: September 30, 2026
--------------------------------------------------------------------------------
IN SHORT
--------------------------------------------------------------------------------
Your work stays on your headset. Projects, CAD models and everything else you
create or open are never uploaded to us.
Two things do go over the internet:
1. Licence checks. To verify your licence, the Application sends your licence
key and a device identifier to our licensing provider when you activate it
and each time you start it with an internet connection. With a floating
licence it also checks in every few minutes while it runs. This is not
optional.
2. Multi-user sessions, if you use them.
We run no analytics, no advertising and no crash reporting. This version of the
Application does not use the microphone or the camera, and does not access your
Meta account.
--------------------------------------------------------------------------------
1. WHO IS RESPONSIBLE
--------------------------------------------------------------------------------
The Dexterously application for Meta Quest (the "Application") is published by
Jetecon Oy, which is the data controller under the EU General Data Protection
Regulation (GDPR) for the licence and session data described below:
Jetecon Oy
Länsikatu 15, 80110 JOENSUU
Business ID: 2803420-2
Finland
support@dexterously.io
--------------------------------------------------------------------------------
2. WHAT WE PROCESS, WHY, AND ON WHAT BASIS
--------------------------------------------------------------------------------
2.1 Licence activation and validation (always active)
The Application is licensed software and uses Keygen for licence management.
When you activate a licence, the following is sent to Keygen servers:
* your licence key;
* a device identifier provided to the Application by the headset's operating
system, which we attach to the activation record so activations can be
tied to a specific device. It is also shown to you on the licence panel in
the Application;
* the device name you enter on the licence panel (or the headset's name, if
you leave it unchanged);
* the platform type (for example, Android) and your IP address.
Each time you start the Application with an internet connection, it sends your
licence key and device identifier again to confirm the licence and to download
an updated licence file. If you hold a floating licence, the Application also
sends a short check-in every few minutes while it runs, and the licence is
released automatically shortly after you close the Application, once the
check-ins stop.
Keygen therefore holds a record of the devices activated on your licence, and of
activations, deactivations, licence checks and check-ins, linked to your licence
key and device. This is a persistent identifier and a limited record of when the
Application is in use.
Your licence key and a signed licence file are also stored locally on the
headset, so you do not have to re-enter the key and the licence can be verified
without an internet connection for a limited time. The licence file contains
licence details such as its name, status, expiry date and included features,
and the device name. For a floating licence, the device name is also stored
separately so that the licence can be taken again automatically.
Why: to confirm you hold a valid licence, enforce the permitted number of
devices, and enable the features you are entitled to.
Legal basis: performance of our contract with you (Art. 6(1)(b)) and our
legitimate interest in preventing unlicensed use (Art. 6(1)(f)).
2.2 Multi-user sessions (only if you use them)
Nothing here happens unless you host or join a session.
By default, sessions are routed through Unity's Relay servers. The Application
signs in anonymously to Unity's services - no name, email or Meta account is
involved - and Unity issues a room code that the host shares. Unity processes
your IP address and connection data in order to route the traffic, which is
encrypted in transit.
The host may protect a session with an optional password. When you join, the
Application sends only a cryptographic hash of that password for comparison -
the password itself never leaves your device.
Shared with the other participants during a session: the display name you type,
the movement of your head and hands (used only to animate your avatar in real
time), and the state of objects in the shared scene. Movement data is not
recorded, stored or analysed by us.
You may instead connect directly to a host on your local network. In that case
your IP address is visible to that host.
Project files and CAD geometry are never transmitted between participants;
everyone must already have the same project file locally.
Why: to provide the collaboration feature you asked for.
Legal basis: performance of our contract with you (Art. 6(1)(b)).
2.3 On your device only
The Application uses Meta's hand-tracking and controller features; this
tracking is processed on the headset and is not transmitted, except as avatar
movement in a session (see 2.2). Passthrough is used for display comfort only -
the Application has no access to camera images.
Project files, settings and diagnostic messages stay on the headset. To let you
keep projects in a folder of your choosing, the Application asks for access to
that folder through Android's Storage Access Framework; you can revoke it in the
system settings at any time.
--------------------------------------------------------------------------------
3. WHAT WE DO NOT COLLECT
--------------------------------------------------------------------------------
This section describes the version of the Application to which this policy
applies, as identified by the date above.
The Application contains no analytics, telemetry, crash reporting or
advertising code. We do not collect your name, email address or payment details
(activation needs only a licence key), your Meta account or profile, microphone
or camera input, eye, face or body tracking, spatial or room-scan data, or any
of your project files or CAD models. This version has no voice chat and
requests no microphone permission. CAD conversion runs entirely on your device.
If a future version adds a feature that processes new categories of data, we
will update this policy before that version is released.
--------------------------------------------------------------------------------
4. WHO RECEIVES DATA
--------------------------------------------------------------------------------
* Keygen LLC - licence activation and validation, acting as our processor
https://keygen.sh/privacy/
* Unity Technologies - engine, anonymous sign-in and relay networking
(only when you use multi-user sessions)
https://unity.com/legal/privacy-policy
* Meta Platforms - headset operating system, store and XR SDK
https://www.meta.com/legal/privacy-policy/
Each acts under its own privacy policy, which we do not control.
--------------------------------------------------------------------------------
5. TRANSFERS OUTSIDE THE EEA
--------------------------------------------------------------------------------
Some of these providers are established outside the European Economic Area or
use infrastructure outside it. In particular, licence activation data is stored
by our licensing provider on cloud infrastructure in the United States.
Such transfers rely on the safeguards offered by the provider concerned, being
the adequacy decision for the EU-US Data Privacy Framework or, where that does
not apply, the EU Standard Contractual Clauses. That provider handles licence
data on our behalf and for licence verification only. Contact us for details of
a specific transfer or of the safeguards that apply to it.
--------------------------------------------------------------------------------
6. HOW LONG WE KEEP IT
--------------------------------------------------------------------------------
Licence activation records are kept for as long as the licence exists, and
afterwards as required for contractual and accounting purposes. Session data is
transient and exists only while the session is running. Files you create stay
on your device until you delete them; locally cached licence data and settings
are removed when you uninstall the Application, though a device activation may
need to be released separately.
--------------------------------------------------------------------------------
7. YOUR RIGHTS
--------------------------------------------------------------------------------
If you are in the EEA or the UK you may ask us to give you access to your
personal data, correct or erase it, restrict or object to its processing, or
provide it in a portable form, and you may withdraw any consent you have given.
Write to support@dexterously.io.
In practice the personal data we hold is limited to licence activation records
(licence key, device identifier, the device name you entered, activation and
check-in times and IP address as logged by our licensing provider) and any
correspondence you send us.
If you think we have handled your data unlawfully you may complain to the
Office of the Data Protection Ombudsman in Finland (tietosuoja.fi) or to the
authority in your own country. You can stop all use of the Application at any
time by uninstalling it.
--------------------------------------------------------------------------------
8. SECURITY
--------------------------------------------------------------------------------
Multi-user sessions using the default relay connection are encrypted in
transit.
If you instead connect directly to a host by IP address, that connection is not
encrypted, and the data described in 2.2 - including display names and
movement - travels in the clear over your local network. Use direct connections
only on networks you trust. Licence activation and licence checks are sent to
our licensing provider over an encrypted (HTTPS) connection.
We take reasonable technical and organisational measures to protect data, but
no method of internet transmission is completely secure. When hosting a
session, set a password and share the room code only with people you intend to
invite.
--------------------------------------------------------------------------------
9. CHILDREN
--------------------------------------------------------------------------------
The Application is a professional industrial training tool and is not directed
at children. We do not knowingly collect personal data from children under 13,
and use is subject to the minimum age requirements of the device and store you
obtained it from. If you believe a child has provided us with personal data,
contact support@dexterously.io and we will delete it.
--------------------------------------------------------------------------------
10. CHANGES
--------------------------------------------------------------------------------
We may update this policy by replacing this document with a version bearing a
new date, and will make reasonable efforts to give advance notice of material
changes. Continued use after an update means you accept it.
--------------------------------------------------------------------------------
11. CONTACT
--------------------------------------------------------------------------------
Jetecon Oy - support@dexterously.io