Privacy Policy

Overview

NucleusXR (“the Platform”) is an enterprise-focused extended reality (XR) training, simulation, and workforce enablement platform designed to deliver immersive learning experiences across Virtual Reality (VR), Augmented Reality (AR), Mixed Reality (MR), desktop web portals, and enterprise-managed XR devices.

The Platform supports training delivery, simulation environments, digital workflows, reporting dashboards, enterprise administration, and connected learning experiences across industries such as healthcare, architecture, engineering, education, public safety, and industrial operations.

We respect your privacy and are committed to protecting user data.

This Privacy Policy explains how information is collected, used, stored, and protected when using NucleusXR across supported XR devices, Meta Quest platforms, enterprise systems, web applications, and related services, in compliance with applicable privacy laws and Meta Quest Store Privacy Requirements (VRC.Privacy.1 – VRC.Privacy.4).

Information We Collect

2.1 Information Collected Automatically

To operate, secure, and improve NucleusXR, the Platform may collect limited technical and operational data, including:

Device type, model, and operating system version
XR headset or wearable device identifiers
Application version and build identifiers
Session duration and feature usage metrics
Performance diagnostics, crash reports, and error logs
Network performance and connectivity diagnostics
System health monitoring information

This information is primarily non-identifying and is used solely for platform stability, quality assurance, security, and performance optimization.

2.2 Enterprise, School, and Platform-Provided Information

When deployed through an enterprise, educational institution, healthcare provider, or organizational environment, NucleusXR may receive limited information from:

Meta platform services
Mobile Device Management (MDM) systems
Enterprise Identity Providers (SSO, Azure AD, Okta, etc.)
Learning Management Systems (LMS)
School district administration systems
Customer-owned infrastructure and integrations

This may include:

Platform user IDs or entitlement identifiers
Organization, tenant, school district, or facility identifiers
Role-based access permissions
Assigned training modules or curriculum access
Completion status and training progress
Device fleet assignment information

NucleusXR does not require the collection of personal identifiers such as government-issued IDs, Social Security numbers, or payment card information through the XR application.

Where enterprise or educational systems provide names, work emails, or school-issued account credentials for access management, such information is managed only for authorized platform access and administration.

2.3 XR Device Sensor Data

Certain XR devices may provide real-time interaction inputs required for functionality, including:

Controller tracking
Positional movement
Spatial interaction inputs
Hand tracking
Environmental understanding for AR/MR placement

This information is processed locally or transiently for real-time functionality only and is not stored unless explicitly required for a specific enterprise workflow or training simulation approved by the customer.

2.4 Information We Do Not Collect

Unless explicitly required for a customer-approved enterprise use case with separate disclosure, NucleusXR does not collect or process:

Biometric identification data
Facial recognition or facial scan data
Eye-tracking data for identity profiling
Voice recordings for storage or surveillance
Precise real-world GPS location data
Personal health records unrelated to training delivery
Government-issued identification records

We do not use XR device sensor data for advertising, behavioral profiling, or consumer surveillance.

How We Use Information

Collected information is used strictly for the following purposes:

Delivering immersive XR training modules and simulations
Managing enterprise access, authentication, and permissions
Supporting learning progress tracking and completion reporting
Enabling platform dashboards and operational reporting
Improving platform performance, reliability, and device compatibility
Monitoring application health and diagnosing technical issues
Supporting customer implementation, validation, and compliance workflows
Maintaining platform security and fraud prevention

NucleusXR does not use user data for advertising, behavioral profiling, or unrelated marketing purposes.

Data Sharing and Disclosure

We do not sell, rent, or monetize user data.

Data may be shared only in limited and appropriate circumstances:

With trusted infrastructure providers (such as cloud hosting, analytics, crash reporting, authentication, and secure support services) strictly for operational support
With enterprise customers, schools, healthcare organizations, or authorized administrators for reporting, compliance, training completion, and user management
In an aggregated, anonymized, or de-identified form for operational insights
When required by law, regulation, legal process, or lawful government request
To protect the rights, security, and integrity of users, customers, or the Platform

All third-party service providers are contractually required to protect data and use it only for approved business purposes.

Data Storage and Security

We employ reasonable and appropriate administrative, technical, and physical safeguards to protect data, including:

Secure cloud infrastructure and access controls
Encrypted data transmission where applicable
Role-based access restrictions following least-privilege principles
Secure authentication and identity management
Internal monitoring and security review processes

Data is retained only for as long as necessary to support platform functionality, enterprise reporting, customer agreements, compliance obligations, and legal requirements.

User Rights and Choices

Depending on jurisdiction, customer agreements, and enterprise deployment configuration, users may have the right to:

Request access to stored personal data
Request correction of inaccurate information
Request deletion of applicable data
Limit or object to certain processing activities
Receive information regarding enterprise-managed data use

For enterprise or school-managed accounts, requests may be directed first to the organization’s administrator or privacy officer.

Users may also contact us directly using the contact information below.

Children’s Privacy and Educational Use

NucleusXR may be used in educational environments, including elementary schools, secondary schools, universities, and vocational institutions under the supervision of authorized educators, administrators, or school districts.

Student access is typically provided through accounts created and managed by the educational institution.

NucleusXR uses only the information supplied by the institution for account provisioning, learning access, and educational reporting.

Students are not required to provide personal information directly to access the Platform.

NucleusXR does not collect sensitive student personal data, biometric data, stored voice recordings, or precise location information.

Data collection is limited to:

School-authorized account access information
Training participation and completion status
Non-personal technical diagnostics
Anonymized usage data is necessary to operate and improve the Platform

NucleusXR does not use student data for advertising, behavioral profiling, or commercial marketing purposes.

Changes to This Policy

This Privacy Policy may be updated periodically to reflect platform improvements, legal requirements, or operational changes.

Any updates will be reflected by the “Last Updated” date above.

Continued use of NucleusXR after updates constitutes acceptance of the revised Privacy Policy.

Contact Information

For privacy-related questions, compliance inquiries, or data requests, please contact:

Email: sales@noorcon.com
Company: Noorcon Inc.
Website: https://www.noorcon.com

Meta Quest Privacy Compliance Statement

NucleusXR complies with Meta Quest Store privacy requirements, including:

VRC.Privacy.1 – Clear disclosure of data collection practices
VRC.Privacy.2 – Transparent explanation of data usage
VRC.Privacy.3 – Limited and justified data sharing
VRC.Privacy.4 – User rights, controls, and contact access

This policy also supports enterprise privacy governance across XR devices, educational deployments, and regulated training environments.