NUKLEUS VERSE is operated by Nukleus Office Solutions Limited. This notice covers the meeting app on Meta Quest and its Android/iOS versions where the described features are available, and this information website. Contact us at tech@nukleus.work.
The Quest permission details below reflect version 0.1.0, build code 14. Android phone, iOS and older app versions can have different permissions and feature availability.
Meetings are joined using meeting codes, not public matchmaking. People who receive a code may be able to join; only share codes and meeting content with people you trust.
Accounts and sign-in
When you register, the app sends your name, email address and password to our Spring Boot backend hosted on Google Cloud Run to create and access your account. Login uses your email and password. The current registration form does not request a phone number. This sign-in flow uses Spring Boot, not Firebase Authentication.
The app stores account identifiers, your name, email and selected preferences on your device so it can display your profile and associate meetings and avatars with your account. On Quest, Meta Platform checks whether your Meta account is entitled to use the app; that check is separate from your NUKLEUS VERSE login.
Authenticated requests use a backend-issued session token. The account-deletion flow uses fresh sign-in to verify your request, invalidates previous backend sessions and restricts a pending account to deletion status and cancellation. Cancelling deletion requires a new sign-in before ordinary account access resumes.
Meeting voice and avatar movement
Our backend receives meeting names, codes and identifiers, host and participant email addresses, and related meeting records for creating, joining and retrieving meetings. Photon Fusion synchronizes the shared room. Photon Voice carries microphone audio to other participants when voice transmission is enabled.
Headset, controller and hand poses, avatar movement and interaction state are processed to animate your avatar and synchronized with other participants. Avatar and animation file links are also shared so other devices can display your avatar. Mobile controls provide movement on supported phones.
Live meeting voice is separate from the AI assistant and the optional recorder described below. Do not assume that other participants cannot record or copy anything shared in a meeting. The app does not display your precise real-world location to other participants.
Photos and generated avatars
When you choose the photo-avatar feature, your selected image is uploaded through our Google Cloud storage backend. Its URL is sent to Meshy for 3D avatar generation, rigging and animation. Our backend stores your image link, generated model and animation links, task identifiers and generation status associated with your account. Generated files can be copied into our own cloud storage.
The app also calculates 468 facial landmark points locally from an avatar's rendered face texture to fit avatar animation. These points and mesh/image hashes are cached on the device. This particular process is not a live camera face scan or an identity-verification feature; no upload of that landmark cache was found in the reviewed implementation.
Only upload photos you have permission to use. The upload path sends image file bytes; metadata removal has not been verified. Source photos are not automatically erased simply because generation finishes. Account deletion includes the associated, verified user-owned photos, avatar files, animation outputs and provider assets; shared or disputed ownership requires review. Meshy's generated-asset expiry does not delete copies stored by NUKLEUS VERSE.
Presentations, whiteboards and browsing
Selected PDFs are uploaded to our storage backend and associated with the meeting. Document links and presentation state are shared with participants. PDF copies are kept in the device's persistent cache for display and reuse; leaving a meeting does not establish that these files have been deleted.
Whiteboard strokes and presentation annotations are synchronized in the meeting. A permanent server whiteboard archive or fixed deletion schedule has not been established. Personal Meeting Notes save their title, text, optional meeting code and update time on your device, with a local recovery copy. They are not automatically synchronized to other participants. You can delete a note in the app or export it; copies exported to another location must be removed separately.
The shared in-room browser can synchronize the selected page and browsing interactions with participants. Websites you visit receive their own requests and may use cookies, storage and other data under their own policies. Avoid opening private accounts or confidential pages on a shared screen.
Where recording is supported and you start it, microphone/mixed audio and rendered meeting frames are saved locally. The Recordings library lists saved captures associated with the account on that device and provides deletion/export controls for available files. Capture and export support varies by platform; a library entry does not mean that every platform supports complete MP4 recording. Meetings are not described here as automatically recorded, and account deletion does not remotely erase locally saved or exported recordings.
Meeting schedules and invitation drafts can store meeting titles, times, codes and invitee email addresses on your device. When scheduling or invitation services are enabled and you submit a request, the relevant details are sent to our backend. Local reminders can show meeting information in device notifications; you can control notification permission in device settings.
AI assistant audio and messages
The current Compact Meeting Room does not use the Gemini assistant. Live meeting voice there uses Photon Voice, not Gemini transcription. The Gemini assistant is blocked for users under 18.
If you use an assistant-enabled version or another supported room, its voice-assistant feature sends recorded microphone audio to Google Gemini for transcription, messages and transcripts for response generation, and reply text for speech generation. Assistant messages and replies may also be shared in that meeting. This is additional processing beyond live voice.
For any assistant-enabled deployment, Google's data use depends on the service and billing configuration. That configuration has not been confirmed for this notice, so we do not promise that assistant content is excluded from provider product improvement or human review. Do not submit sensitive or confidential information to the assistant. See Google's Gemini API terms.
Device permissions and your choices
Microphone: supports live meeting voice and available recording functions. The current Compact Meeting Room does not send meeting voice to Gemini. Assistant audio input applies only to assistant-enabled versions or rooms described above. You can mute voice or revoke microphone permission in device settings; microphone-dependent functions will not work without access.
Photos and files: support files you choose for avatars, presentations and web-page uploads. You can cancel selection and choose not to upload.
Head, controller and hand tracking: support VR movement and avatar interaction. These functions differ from the phone controls.
Notifications: supported mobile versions can show local welcome or meeting-reminder notifications. You can turn these off in device settings. Local reminders do not establish that a cloud invitation or push-notification service is active.
Eye tracking and room scanning: the Quest Code 14 package does not request com.oculus.permission.EYE_TRACKING or com.oculus.permission.USE_SCENE. The current experience uses a virtual meeting room, not a scan of your physical room.
Photo location and media-library permissions: Quest Code 14 does not request ACCESS_MEDIA_LOCATION, READ_MEDIA_AUDIO, READ_MEDIA_VIDEO, READ_MEDIA_IMAGES or READ_MEDIA_VISUAL_USER_SELECTED. This is not a promise that uploaded image bytes contain no metadata: metadata removal has not been verified, as explained under avatar photos.
Legacy storage: Quest Code 14 still declares Android READ_EXTERNAL_STORAGE and WRITE_EXTERNAL_STORAGE. Their effective access depends on the device's Android version and platform restrictions. Files you choose can be used for the avatar, presentation and web-upload features described above. A separate essential use of broad shared-storage write access has not been established; this notice does not claim that every remaining declaration is necessary or that its presence proves all files are read.
Spatial anchors: Quest Code 14 still declares com.oculus.permission.USE_ANCHOR_API. This is separate from the removed scene-scanning permission. The complete anchor SDK data flow has not been verified, so this notice does not claim that removing room-scan access eliminates every kind of spatial-data processing.
Network services receive connection information, including IP addresses, to deliver requests. This is distinct from sharing your precise physical location with other meeting participants.
Meeting connectivity, synchronized room state and live voice. Photon privacy policy.
Meshy
Processing the selected avatar image and generating models and animations. Meshy privacy policy.
Google Gemini
Assistant audio, transcripts, prompts, replies and speech generation only in assistant-enabled features. The current Compact Meeting Room does not use this assistant. Gemini data-use terms.
This website is hosted on Netlify, which handles web requests and associated technical information. The supplied pages do not include an advertising or analytics script, login form or file-upload form. Netlify privacy policy.
These providers may process information in different countries. Provider terms do not replace our responsibility for the information we send to them. A release-specific verification of provider agreements, settings and retention is still pending.
Diagnostics, advertising and reports
Unity Ads, Unity Analytics and Cloud Diagnostics reporting are disabled in the reviewed project settings, and no advertising integration was found in the inspected app scripts. An engine diagnostics flag remains enabled. Release telemetry has not been measured, so this is not a claim that no diagnostic information leaves the device.
App logs can contain account email addresses, upload/model URLs, service responses and assistant transcripts or replies. Their collection, access and retention need release-specific verification. Do not send passwords or unnecessary meeting content with a support request.
Administrators can suspend accounts; regular users do not have a direct user-block control. Live meeting communications are not automatically or routinely human-moderated. Meta User Reporting is configured with an encrypted developer inbox, a 90-day report-retention period and reporter-email collection disabled. Any company-exported report copies have a separate, not yet confirmed retention arrangement.
How long information is kept
An accepted account-deletion request schedules cleanup after seven days (168 elapsed hours). This is the cancellation window, not a guarantee that every stored copy disappears at that exact instant. The server's displayed deadline governs the request; processing, provider failures or unresolved ownership can delay completion. Contact us if processing fails or remains unresolved.
Account and personally owned assets: completed cleanup removes the account record and associated verified user-owned photos, avatar/animation files and linked provider assets. Account-linked session and ownership records are removed with the account. Minimal deletion history may retain lifecycle times, status and sanitized failure information with the account reference removed.
Shared meeting information: personal account deletion does not delete entire shared meetings, room codes, other participants' data, shared PDFs, slides, recordings or notes. Structured references to the deleting account can be removed or anonymized without deleting the meeting. An active hosted meeting or unclear asset ownership may require review. Personal information inside shared documents or free text needs a separate request through our privacy contact; this workflow does not automatically redact it.
On your device: account preferences, schedules, personal notes and their recovery copies, PDF caches, avatar landmark caches and local recordings can persist beyond the session. Delete notes and recordings using their in-app controls before deleting your account where possible. Logging out is not a complete cache purge. Clearing app data or uninstalling can remove app-managed local data, but not exported files, device/cloud backups, server records or provider copies.
Backups, logs and other retained records: a fixed retention or erasure period for these categories has not yet been confirmed. The seven-day account cancellation window is not a backup-erasure promise. Provider-held diagnostic or safety records may also have different retention rules. Ask our privacy contact about retained information relating to your account; this notice does not assert that account cleanup removes every backup, log or historical copy.
Meshy generated assets: its API documentation describes retention of at most three days for API-generated models, with an indefinite-retention option for Enterprise customers. This does not establish a deletion period for input photos, provider logs, or files archived in our storage.
User reports: the Meta inbox period described above does not apply to other app data or copies exported by our team.
Access, correction and deletion requests
Request account deletion in the app
In a version with account deletion enabled, open Settings > Account > Account & privacy > Delete account data.
Verify your account using a fresh sign-in. Enter DELETE in the confirmation field and choose Schedule account deletion.
Wait for the server to confirm the request. The app displays the pending status and scheduled deletion time, seven days after acceptance. A network error alone does not confirm whether the request was accepted; sign in again and refresh its status.
Previous backend sessions are invalidated. While pending, a fresh sign-in permits deletion status and cancellation, not ordinary account access.
To keep your account, reauthenticate and choose Cancel scheduled deletion before the displayed deadline. After successful cancellation, sign in again to resume ordinary access. Cancellation does not remove an administrator's account block.
At or after the deadline, cancellation is no longer available. Cleanup may be processing or require recovery; an expired countdown alone is not confirmation of completed deletion.
If the deletion option is missing, disabled, inaccessible, or sign-in/reauthentication fails, use the email route below. This also applies to linked Google accounts when the installed version does not support Google reauthentication. Account deletion removes your NUKLEUS VERSE account, not your Google or Meta account.
Contact us without signing in
For privacy questions or to request access to, correction of, or deletion of information associated with your account, email tech@nukleus.work. You do not need to log into this website.
Use the subject NUKLEUS VERSE data request. Include your account email address and explain whether you are asking about your account, avatar/photo, meeting files, or another category. Where possible, send the request from your account email. Do not include your password, identity documents or payment details.
We need to verify that the request relates to your account before acting on it. Sending an email is not itself confirmation of erasure or the start of a server-recorded cancellation window. The account process described above covers account and verified personal-asset cleanup; requests about shared content, retained records or other copies require separate review. See retention and exceptions.
Logging out only clears selected local account preferences; it does not delete your account or uploaded cloud content. For security concerns, use the same contact address without sending secrets or sensitive meeting material.
Age restrictions and updates
The app's stated Meta audience is ages 13 and over. The current Compact Meeting Room does not use Gemini, and Gemini assistant access is blocked for users under 18. Google's restrictions also apply to any assistant-enabled app or version; the store age rating alone does not establish compliance with those terms. Contact us if you believe a child has supplied information that should be removed.
We will update this page as the service and verified data-handling arrangements change. The date above identifies this version. A policy-text update alone does not implement deletion, change app permissions or certify store compliance.
