Privacy Policy

Last Updated: December 2025

OcuTech LLC ("we", "our", or "us") operates the Spatial Camera application for Meta Quest devices, as well as the companion website sc.ocutech.dev. This Privacy Policy explains how we handle information when you record spatial videos and link your YouTube account for direct uploads.

1. Data We Process

Spatial Camera is designed to work primarily on your device. Your recorded videos and photos are stored locally on your Meta Quest 3 / 3S headset storage unless you choose to move or delete them yourself.

We do not upload or permanently store your videos, photos, or other personal media on our own servers. When you choose to upload to YouTube, the video file is sent from your device to YouTube using the YouTube Data API.

2. YouTube Sign-In and OAuth Tokens

To enable the Direct Upload feature, we use Google OAuth 2.0 and YouTube API Services. When you visit sc.ocutech.dev and sign in with Google, Google sends an authorization code to our backend (hosted on Firebase).

Our backend exchanges this code for OAuth tokens and generates a temporary 6-digit pairing code. These tokens are stored in a short-lived record in our Firestore database for up to approximately 5 minutes, solely to allow your VR headset to retrieve them using the same 6-digit code.

Once your headset successfully retrieves the tokens, the Firestore record is deleted as part of the same operation. We do not use these tokens for any purpose other than enabling uploads that you explicitly request.

On your VR device, a refresh token and access token may be stored locally so that you can stay signed in and upload additional videos without repeating the linking process. These tokens are stored only on your device and are not permanently stored on our backend.

3. Use of YouTube API Services

Spatial Camera uses the youtube.upload scope to let you upload videos to your own YouTube channel. We use this scope only to:

We do not use the YouTube API to access your watch history, subscriptions, comments, analytics, or other account data.

Our use of information received from Google APIs will adhere to the Google API Services User Data Policy , including the Limited Use requirements.

By using the YouTube upload feature, you also agree to the YouTube Terms of Service and acknowledge the Google Privacy Policy.

4. Data Sharing

We do not sell or rent your information. We do not knowingly share user data with third parties except:

5. Data Retention

Short-lived OAuth token records in Firestore (used with the 6-digit pairing code) are stored only long enough to complete the linking process, typically no more than about 5 minutes, and are deleted immediately after a successful retrieval or when they expire.

Refresh tokens and access tokens stored on your VR device remain there until you choose to log out inside the app, uninstall the app, or revoke access via your Google account settings.

We do not retain copies of your media files on our servers.

6. Your Choices and Controls

You can:

7. Children’s Privacy

Spatial Camera is not directed to children under the age of 13, and we do not knowingly collect personal information from children. If you believe that a child has provided us with personal information, please contact us so we can take appropriate action.

8. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last Updated” date at the top of this page. Your continued use of the app after changes become effective means you accept the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact OcuTech LLC.