Vx Virtuix Technologies Feedback section

Privacy Policy

Last updated:

This Privacy Policy explains how Virtuix Technologies ("Virtuix", "we", "our", or "us") handles information in connection with our websites and mobile applications, including Reach! — The Daily Climb, TunerNest, and Toilet Olympics (collectively, the "Services").

Summary

Scope

This policy applies to our public website and to apps we publish, including Toilet Olympics for iOS and Android, TunerNest for iOS, and Reach! for iPhone and iPad, including its browser preview.

Information We Collect

Information you provide

Toilet Olympics can be used without creating an account or providing personal information. TunerNest and Reach! are described in their own sections below. If you choose to use the optional Feedback feature, we collect the message content you submit so we can review and respond.

Information collected automatically

We do not embed third‑party advertising or analytics SDKs in the App. We may receive de‑identified, aggregated metrics from app store providers (e.g., installs, crashes, device model counts) to improve performance and reliability; these metrics do not identify individual users.

TunerNest (formerly e-tv, iOS)

TunerNest connects to a media server chosen by you or your server administrator. The app includes no television subscription. A temporary developer-operated sample server with openly licensed films was retired on September 15, 2026. The privacy practices for your own server and that former sample service differ.

Your own media server

The server receives your login and stores a password hash, account details, favorites, viewing history, resume positions, and sessions. The administrator controls retention and access. Self-hosted TunerNest servers can store session IP addresses and device user agents. Their session-location feature sends an IP address to ip-api.com when the administrator opens Sessions; ask your administrator about that feature. Virtuix does not receive the library or account data from an independently operated server merely because you use this app.

Our sample server

Virtuix operated the temporary demo service on Azure, reached through Cloudflare. It is now offline. Its stored sample state remains in the disabled stack for possible restoration for future app review; contact us for a deletion request. The shared public evaluation login has viewer access, with separate private credentials for owner review. Favorites, recent viewing, and resume positions on the shared sample account are shared sample state, not a private profile. We retain this state for evaluation until it is reset or deleted; contact us for a deletion request. In the updated demo service, session IP addresses and device user agents are not stored in its application database or shown in Sessions, and geolocation lookups are disabled. Network providers still process connection information to deliver and protect requests and may retain operational or security logs under their service policies.

Optional avatars

Avatar choices depend on the installed build. The on-device comic option in updated builds applies Apple's Core Image filter to your photo and does not upload it. The Amazon drawing option sends your selfie (resized to limit upload size) and sampled skin, hair, and clothing colors to our AWS Lambda service and Amazon Rekognition in the United States. Facial attributes such as glasses, facial hair, and expression are used to draw the avatar. Updated builds explain this transfer and ask for explicit agreement before upload. Avatar creation is optional.

Our avatar function does not write the source photo or facial attributes to a database, file, or application log. Its operational logs are retained for three days and do not include photos. Since September 8, 2026, avatar processing runs in our business AWS account with a verified effective Rekognition service-improvement opt-out. We use stateless face detection and do not create stored face collections. A daily processing counter contains only the date, total count, and an expiry timestamp, with deletion scheduled after three days; it contains no user identifiers or photo data. This does not promise immediate erasure of all AWS operational data. Requests processed in our former AWS account before this change are not covered by the new account's opt-out; historical deletion is still being addressed. Older app endpoints forward new requests to the business account. You can avoid that transfer by using the local option or keeping your initials. For deletion requests relating to past processing, email privacy@virtuixtech.com.

Updated builds remove temporary captured and processed photo files when the operation finishes, including failed or cancelled attempts. Only an avatar you explicitly save is retained in the app on your device; you can remove it from the account menu. Older builds may leave temporary photos in the application's cache until the operating system clears them or the app is deleted. Generated avatars and local settings may be included in device backups according to your device settings.

Voice, pages, updates, and support

In-app voice search requests on-device transcription; the app does not upload the audio. Recognized search text is sent to your selected server to search its library. Opening support, credits, privacy, or release notes loads a web page from our AWS-hosted website. The app also checks Expo's update service. These services process ordinary connection information, such as IP addresses, to deliver requests; infrastructure logs may be retained for operation and security. We do not use these requests for advertising tracking.

Support email contains the information you choose to send and is retained to handle the request and follow-up. For support use TunerNest Help & Support. For access or deletion of data on our demo or avatar service, contact privacy@virtuixtech.com. For an independent media server, contact that server's administrator. Do not send passwords or selfies in your request.

Reach! — The Daily Climb (iPhone and iPad)

Reach! is a platform game with Daily Runs, Infinite Mode, online rankings, and optional selfie avatars. No player account or Game Center sign-in is required. Camera and microphone access are optional and are not required to play.

Local settings and installation identity

The app stores your settings, selected character, local results, chosen leaderboard name, and any saved avatar on your device. It generates a private installation credential to associate run submissions with that installation and protect the service. A derived public player identifier distinguishes results; it is not your Apple account identity. Local data and saved images may be included in device backups according to your device settings.

Daily Run submissions and public rankings

Updated versions of Reach ask whether you want to share Daily Run results before any score upload. Choosing Agree & enable sharing permits saved pending and future completed Daily Runs to upload automatically with your chosen display name. Choosing Keep results on this device lets you continue playing without uploading scores. Settings lets you turn sharing off, which clears pending uploads and stops future submissions; it does not remove results already published or retract requests already transmitted. Older versions asked for a display name and then automatically submitted completed runs; upgrading requires a new explicit sharing choice. Submissions send the name, installation credential, challenge and rules information, run timing, and recorded gameplay inputs to our AWS-backed service to verify the result. Recorded inputs describe in-game actions, not camera or microphone recordings. Choose a nickname rather than a real name if you prefer.

Verified completed runs are archived for daily rankings, the all-time podium, and searches across historical finishes. Public results can show the submitted name, run date, completion time, ranking, and a public player identifier. Private installation credentials are not displayed. Display names are not unique accounts, so a name search may return more than one person's runs. Changing your name in Settings changes future submissions; it does not rename previous results. A name you enter in archive search is sent to the service to find matching runs.

Completed run records have no automatic expiry while the archive operates. Deleting the app does not delete server records. For access, correction, or deletion requests, email privacy@virtuixtech.com with the app name, leaderboard name used at submission, approximate run dates, and public player identifier if available. We may need additional information to distinguish your runs from another player's. Do not send your private installation credential. Database backups may retain deleted records until the backup retention period ends; we do not promise immediate removal from every backup.

Optional selfie avatar and face data

Face images and local processing

The local-avatar version of Reach provides an optional on-device pixel portrait filter. Selecting Create pixel portrait after taking a selfie identifies this version. It replaces the cloud generation in build 31 and earlier; those older builds are covered separately below. The still selfie can include your face, hair, expression, skin tone, glasses, clothing, and background. Reach processes these image pixels on your device solely to make the profile portrait you request. It does not use generative AI or create facial landmarks, face measurements, biometric templates, a recognition database, Face ID data, TrueDepth depth maps, or ARKit face tracking.

The selfie and resulting portrait are not sent to Virtuix, AWS, OpenAI, or another processing service by this version of the avatar feature. No installation credential or network identifier is sent for local avatar creation. We do not use face images for identification, authentication, advertising, tracking, or sale. The portrait appears only in Settings on your device; it is not a playable character or public leaderboard picture.

Selecting Create selfie avatar opens the system camera permission request directly when needed. You can deny permission and keep playing. After authorization, the camera opens and you can take, review, retake, or cancel a selfie. Create pixel portrait applies the local filter; only Use avatar saves the result. This feature works without an internet connection and does not request microphone or photo-library access. Other optional features, such as leaderboard voice search, have separate permissions.

Temporary image storage and deletion

The original capture and cropped, resized selfie are temporarily held in the app's private cache and memory on your device. The original capture is deleted after preparation. The prepared selfie is deleted after processing finishes, fails, or is canceled, or when you retake it or close the studio. Closing or backgrounding the studio triggers cleanup; an in-progress camera capture is allowed to settle safely first. If the app is interrupted before cleanup completes, leftover avatar photos are cleared on the next launch before a new capture. These temporary images are not saved to your Photos library.

Local image resources are released after filtering, and reusable pixel buffers are cleared. Runtime-managed copies are garbage collected; this is not a guarantee of immediate physical-memory erasure. Unsaved portraits are discarded when the studio closes. There is no server-side selfie or portrait storage for the local-avatar version.

Saved portrait retention and deletion

Only a portrait you choose with Use avatar is saved persistently in Reach's local app storage. It remains until you replace it, choose Remove avatar in Settings, or delete the app and its local data. A previously saved portrait remains on your device after updating and can be removed in the same way. The avatar and other local app data may be included in device backups according to your settings; removing the in-app copy does not necessarily remove earlier backups. You can revoke camera permission in device Settings. For privacy requests contact privacy@virtuixtech.com without sending a selfie.

Earlier cloud versions and previously submitted images

This paragraph applies only to the cloud-avatar feature in build 31 and earlier and to images already sent through it. Those builds offered an AWS/OpenAI processing disclosure and agreement before an upload. Choosing Generate sent the prepared selfie over HTTPS through our AWS function in Northern Virginia, United States, to OpenAI with non-personal Reach style artwork. Our function processed the images in memory without saving them to S3, a photo database, files, or application logs. Canceling the app's wait did not cancel generation already accepted by OpenAI.

The former integration did not use Zero Data Retention. As disclosed for those submissions, OpenAI may retain submitted images and generated content in abuse-monitoring logs for up to 30 days, or longer for legal or safety reasons; images flagged by safety systems may be retained for manual review. API content is not used for training by default. Updating Reach or deleting a local portrait does not erase prior provider records. Provider processing and storage follow its policies and are not promised to be US-only. These historical practices do not apply to new portraits made with Create pixel portrait.

Historical provider details: OpenAI data controls.

Earlier cloud service metadata

The former avatar service used daily request counts and hashed installation/network identifiers to limit abuse and cost, without storing face images or facial attributes in those counters. Counters became eligible for asynchronous DynamoDB deletion after three days; avatar operational logs were configured for three-day retention without selfie content. Local portrait creation generates no such service requests or counters. Separate leaderboard and website data practices remain described in the full policy.

Optional voice input

The microphone in the run-search dialog converts a spoken name into text after microphone and speech-recognition permission. On iOS, on-device recognition is preferred when supported; otherwise Apple's speech service may process the audio. In the browser preview, the browser's speech service may process it. Reach does not save recordings or send audio to its backend. You review the recognized name and press Search before the text is sent to the archive. Typing remains available if you decline permission. Listening stops when the dialog closes, the app leaves the foreground, or the listening time limit is reached. You can revoke permissions in device settings.

Network services, web pages, and support

AWS hosts the leaderboard and supporting website, and hosted the earlier cloud avatar service. Network providers process connection information, such as IP addresses and request metadata, to deliver requests and protect the services. The leaderboard uses network addresses for request limiting; its service logs are configured for 14-day retention. The website's access logs can include IP address, approximate country, requested URL, referring page, and browser information; they are scheduled for deletion after 90 days. Provider security records may follow separate retention policies. These records are not used for advertising tracking.

Opening privacy, support, or release-notes pages loads web resources. The release-notes editor sends a publishing credential and release text to our service; published notes are public. Contacting support shares the contact information and message you choose to send, which we use to respond and handle follow-up. For support use contact@virtuixtech.com; for privacy requests use privacy@virtuixtech.com. Do not send passwords, API keys, or selfies in support requests.

How We Use Information

Sharing and Disclosure

We do not sell your information. We do not share data for third‑party advertising. We may disclose information:

Feedback (Optional)

Our Feedback feature allows you to send comments or bug reports to our team.

Data Retention

We retain information for the purposes described in this policy. Feedback messages are kept until removed during our periodic moderation reviews or upon verified deletion request. See the app-specific sections for other retention periods, including Reach!'s ongoing completed-run archive, local selfie processing, earlier cloud provider retention, usage counters, and operational logs.

Data Security

We use reasonable technical and organizational measures to protect information we process. However, no method of transmission or storage is completely secure.

Children’s Privacy

Our Services are intended for a general audience and are not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us and we will delete it.

Your Rights and Choices

Depending on where you live, you may have rights to request access, correction, or deletion of your information.

International Users

Our services include infrastructure in the United States. Third-party processing, including OpenAI and platform speech services, may occur in other jurisdictions under their service policies; we do not promise US-only processing for these services. Your information may be processed in jurisdictions with different data protection laws.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted at this URL with an updated “Last updated” date.

Contact Us

If you have questions or requests regarding this policy, contact us at privacy@virtuixtech.com.

Direct link for app stores: https://www.virtuixtech.com/privacy.html