Privacy Policy

This Privacy Policy explains how Spatial Communications (“the app”), developed by Viper VR & Tech (“we”, “us”), accesses, uses, stores and protects your information. It covers the Apple Vision Pro app and its optional Android companion app, Spatial Companion.

1. App status

Spatial Communications is in development and is not publicly available. Its Google sign-in currently operates in Google's testing mode and is limited to test users approved by the developer. This policy describes how the app currently works and will be updated if that changes.

2. Gmail data we access

Gmail features are optional. If you choose to connect a Gmail account, you sign in through Google's own sign-in page, shown in the system sign-in sheet on your Apple Vision Pro. The app never sees or stores your Google password.

The app requests one Google permission (OAuth scope):

With this permission, the app accesses the following Gmail data, only when you use the related feature:

• Account identity: the email address of each connected Gmail account, used to label and tell your accounts apart.
• Messages and conversations: sender, recipients, subject, date, labels, read/starred state and message bodies.
• Attachments: attachments you choose to preview, and files you attach to outgoing messages.
• Drafts: drafts you create, edit or discard.
• Labels and categories: your Gmail labels and inbox categories, and unread counts.

3. How we use Gmail data

Gmail data is used only to provide the app's user-facing email features that you choose to use:

• Displaying your inbox, labels, conversations and messages, including in floating windows.
• Sending, replying, replying all and forwarding messages you write, and saving drafts.
• Starring, archiving, marking read or unread, and moving messages back to the inbox.
• Moving messages to Gmail Trash when you throw them into the trash bin and you have turned on the “Enable Real Trash” setting (off by default). Undo and Restore return them.
• Periodically checking Gmail for changes while the app is running, so your mailbox stays up to date.

We do not use Gmail data for advertising, do not sell it, do not use it to build user profiles, and do not use it to develop, improve or train generalized or non-personalized AI or machine-learning models. No person at Viper VR & Tech reads your Gmail data.

4. Google API Services: Limited Use disclosure

Specifically, data received from Gmail APIs is used only to provide and improve the user-facing features described in this policy; it is not transferred to others except as needed to provide those features, to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to you; it is not used for advertising; and it is not read by humans unless you give your explicit consent for specific messages, it is necessary for security purposes such as investigating abuse, or it is required to comply with applicable law.

5. Where data is stored

Spatial Communications does not have its own server. The app communicates directly with Google's servers over encrypted HTTPS connections. Your Gmail data is not sent to, or stored on, servers operated by Viper VR & Tech.

On your Apple Vision Pro:

• Sign-in credentials (OAuth access and refresh tokens) for each connected account are stored in the device Keychain, restricted to this device (not synced to iCloud or other devices).
• Mailbox content is downloaded from Gmail when needed and held in the app's memory while you use it. The app does not keep a persistent offline copy of your mailbox.
• Attachments: files you add to an outgoing message are copied into the app's private cache so drafts can be saved and sent. Attachments you preview are written to a temporary, protected file for viewing.
• Settings: non-secret preferences — such as which account is shown, your Real Trash setting, sidebar selections and Throw Mode options — are stored in the app's local settings.
• Diagnostics: the app keeps a short on-device log of app window events (about the 40 most recent lines). It excludes email subjects and message content, and it is never sent anywhere by the app.

The app contains no third-party analytics, advertising or tracking software. Email content is displayed with scripts disabled, and remote images in emails load only when you choose “Load Images”.

6. Phone messages (optional Android companion)

Messaging integration uses an optional Android app, Spatial Companion, which you install on your own phone and pair with your Apple Vision Pro using a six-digit code.

• Direct, encrypted connection: the phone and headset communicate directly over your local network using end-to-end encryption. Phone messages do not pass through any server operated by us or by a third party.
• Permissions, each optional and requested separately:
  • Notification access — to read Google Messages notifications and use their Reply action.
  • SMS read (READ_SMS) — to show SMS/MMS conversations stored on the phone.
  • SMS send (SEND_SMS) — to send an SMS only when you explicitly send one.
  • Contacts (READ_CONTACTS) — to show contact names and let you search for a recipient. Contacts are looked up as needed and are not copied in bulk.
• Storage on the phone: conversations observed from notifications are saved on the phone in an encrypted file (limited to 200 conversations, 50 messages each, and 30 days), using a key held in Android's hardware-backed Keystore. This file is excluded from device backups. You can erase it with “Clear saved conversations”.
• Storage on the headset: phone messages are shown on the headset but not saved there, except the identifiers of conversations or messages you choose to hide, which are cleared when you choose “Forget Phone”.
• Hiding a phone message on the headset does not delete it from your phone.

7. Sharing and disclosure

We do not sell, rent or share your personal information. Your data leaves your devices only:

• to Google, when the app performs a Gmail action you requested (Google's handling is governed by the Google Privacy Policy);
• to the recipients of emails and text messages you send; and
• between your own paired phone and headset, for messaging features.

8. Retention and deletion

• Sign-in tokens remain in the Keychain until you disconnect the account. Disconnecting revokes the app's access with Google and deletes the tokens from the device. While the app is in Google's testing mode, Google expires sign-ins after 7 days and you are asked to reconnect.
• Mailbox content held in memory is released when the app closes. Temporary attachment files are kept in system-managed cache and temporary storage, which visionOS may clear at any time; they are removed when the app is deleted.
• Deleting the app removes its settings, cache and files. Keychain items may remain on the device after the app is deleted; to remove them, disconnect your accounts in the app before deleting it, or revoke access in your Google Account (see below).
• Because we do not operate servers for the app, we hold no copy of your Gmail or phone data to delete.

9. Your choices and controls

• Connect or disconnect each Gmail account at any time in the app's Mail Account settings.
• Revoke access from your Google Account at myaccount.google.com/permissions.
• Real Trash is off by default. While it is off, throwing an email into the bin does not change your Gmail.
• Remote images load only when you choose “Load Images”. Links ask before opening.
• Phone permissions can be granted or withdrawn at any time in Android Settings. “Clear saved conversations” and “Forget Phone” remove stored message data.
• Demo mode lets you use the app with sample data and no account.

10. Security

• Google sign-in uses OAuth 2.0 with PKCE in the system sign-in sheet, with no embedded web view and no client secret in the app.
• All Gmail communication uses HTTPS. Tokens are kept in the Keychain and never written to logs or settings.
• Email HTML is sanitized and displayed without JavaScript.
• The phone–headset link uses modern authenticated encryption, with keys stored in the Android Keystore and Apple Keychain.

No method of storage or transmission is completely secure, but we design the app to keep your data on your devices and under your control.

11. Children

Spatial Communications is not directed to children under 13, and we do not knowingly collect personal information from children.

12. Changes to this policy

We will update this policy when the app's data practices change, and revise the “Last updated” date above. Material changes will be reflected here before they take effect in the app.

13. Contact

Spatial Communications is developed by Viper VR & Tech. For privacy questions or requests, contact us at:

Email: support@vipervrandtech.com

You can also find help on our Support page.