Privacy Policy

1. Information We Collect

A. Information Collected via the Meta Horizon Store / Meta Quest Platform

In strict compliance with Meta's Virtual Reality Check (VRC) requirements, our application GAVEAXR MEDICAL CENTER only accesses and processes data approved through our Meta Horizon Dashboard integrations, multiplayer infrastructure, and hardware features:

• Meta User ID: We access your unique Meta User ID provided by the Meta Horizon SDK. This identifier is essential for mandatory platform entitlement checks (verifying application ownership), managing multiplayer sessions, and linking data securely within the application.
• Meta User Profile: We access your Meta Horizon username and profile picture. This information is processed solely to personalize your interface and display your identity to other users within multiplayer sessions.
• Meta Active Avatars & Platform Features: We integrate the Meta Avatars SDK to allow users to bring their persistent visual identities into our immersive environment.
• Microphone Access: Audio input is accessed in real-time solely to drive lip-sync animations on your Meta Avatar and to enable real-time in-app voice communication between users in multiplayer rooms. Audio data is streamed securely in real-time via our multiplayer network provider (Photon) and is never recorded or permanently stored on our or third-party servers.
• Geographical Region: We access the general geographical region provided by the platform to optimize multiplayer matchmaking, select the nearest server infrastructure hosted via Photon Cloud, and ensure regulatory compliance.
• Hand Tracking Data: Our application supports the Meta Quest Hand Tracking feature to enable natural gesture controls during medical simulations. Hand tracking telemetry and skeletal data are processed locally in real-time by the device hardware to render your movements and are never transmitted, collected, or stored on our external servers.
• Technical and Performance Data: We may collect anonymous hardware data (such as device model, OS version, frame rate, and crash logs) to monitor application stability and performance.

B. Information Collected via our Website

When you interact with our website, we may collect:

• Contact Information: Name, email address, and professional details provided voluntarily by you through contact or demo request forms.
• Log and Usage Data: IP addresses and usage patterns collected via essential technical cookies to optimize website performance.

2. Use of Your Information (Purpose of Processing)

We process your data based on legitimate business, legal, and operational purposes:

• To Deliver the VR Experience: To authenticate your session, validate your software license, and display your Meta Avatar, username, and profile picture correctly inside the application.
• To Enable Multiplayer & Core Features: To facilitate real-time voice (microphone) communications and gesture tracking (hand tracking) between multiple connected users in the same simulation space.
• To Maintain App Performance: To identify bugs, optimize medical simulation performance, and prevent software crashes.
• To Enforce Security and Integrity: To investigate reported violations of our Community Standards and protect our users from prohibited behavior.

3. Multiplayer Community Standards & Anti-Abuse Policy

GAVEAXR MEDICAL CENTER features real-time multiplayer collaborative experiences. To maintain a safe, professional, and respectful environment for clinical training and simulation, all users must strictly adhere to the Meta Horizon Community Standards and our zero-tolerance policy against toxic behavior.

The following behaviors are strictly prohibited within the application:

• Harassment and Abuse: Any form of targeted verbal abuse, offensive gestures, or hostile behavior directed at other participants.
• Bullying and Cyberbullying: Intimidating, humiliating, or degrading comments or actions toward any user.
• Violence and Threats: Promoting, threatening, or encouraging physical harm or violence.
• Hate Speech: Any discriminatory language or behavior based on race, ethnicity, nationality, religion, gender, sexual orientation, or disability.

Enforcement and Penalties: We actively review community reports. Any user found engaging in harassment, abuse, bullying, or violence will face immediate disciplinary action. Violations will result in penalties up to and including a permanent ban of the user's Meta ID from accessing the application.

4. Meta Horizon Store / Oculus VRC Compliance

To fulfill the explicit requirements of VRC.Privacy.1 through VRC.Privacy.4, HEALTHTECH BRASIL LTDA declares:

• VRC.Privacy.1 (Data Transparency): We explicitly list all data permissions (User ID, User Profile, Meta Avatars, Microphone, Hand Tracking, and Region) utilized by GAVEAXR MEDICAL CENTER in Section 1A of this document. No hidden tracking mechanisms are deployed.
• VRC.Privacy.2 (Processing Purposes): Data processing is strictly limited to application authentication, avatar identity rendering, real-time multiplayer execution, and infrastructure optimization as outlined in Section 2.
• VRC.Privacy.3 (Third-Party Sharing Restrictions): We do not sell, trade, rent, lease, or share any Meta platform identifiers, user profiles, or personal data with third-party advertising networks, data brokers, or commercial entities. Transient multiplayer session data (such as temporary User IDs, positional data, and real-time voice streams) is transmitted securely through Photon (Exit Games GmbH) solely as a sub-processor to enable multiplayer infrastructure and real-time connectivity. Photon does not retain or use this data for any secondary purposes.
• VRC.Privacy.4 (User Rights & Data Deletion Path): Users retain full rights over their data. You can request the absolute deletion of any personal data link or historical logs generated by our application by contacting our dedicated privacy channel at drbmiranda@healthtechbr.io.

5. Data Retention and Security

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law (such as Brazilian LGPD or GDPR regulations).

We implement robust administrative, technical, and physical security measures to protect your personal data. Real-time inputs like microphone streams, hand tracking telemetry, and multiplayer interaction packets transmitted via Photon are transient, processed in-memory, and disappear instantly after the session ends or the features are executed.

6. User Rights (LGPD & GDPR Compliance)

In compliance with the Brazilian General Data Protection Law (LGPD) and global privacy standards, users have the right to access, correct, anonymize, or request the deletion of their personal data processed by us. To exercise these rights, please follow the instructions provided in Section 7.

7. Contact Us, Reports & Data Deletion Requests

If you have any questions, wish to submit an official data deletion request under VRC.Privacy.4, or need to report a user for harassment, bullying, or abuse in a multiplayer session, please reach out directly to our designated compliance officer:

• Company: HEALTHTECH BRASIL LTDA
• CNPJ: 48.509.310/0001-62
• Address: Rua Arthur Corradi, 101, São Bernardo do Campo, SP, Brazil, CEP: 09725-240
• Website: https://www.healthtechbr.io
• Dedicated Contact Email: drbmiranda@healthtechbr.io

Response Turnaround: All privacy inquiries, report investigations, and data deletion requests will be processed, handled, and confirmed within 15 to 30 days.