Last Updated: December 2025
OcuTech LLC ("we", "our", or "us") operates the Spatial Camera application for Meta Quest devices, as well as the companion website sc.ocutech.dev. This Privacy Policy explains how we handle information when you record spatial videos and link your YouTube account for direct uploads.
Spatial Camera is designed to work primarily on your device. Your recorded videos and photos are stored locally on your Meta Quest 3 / 3S headset storage unless you choose to move or delete them yourself.
We do not upload or permanently store your videos, photos, or other personal media on our own servers. When you choose to upload to YouTube, the video file and its associated metadata (such as the title, description, and privacy setting that you enter) are sent from your device directly to YouTube using the YouTube Data API. We do not retain this video metadata on our servers after it is sent as part of the upload request.
To enable the Direct Upload feature, we use Google OAuth 2.0 and YouTube API Services. When you visit sc.ocutech.dev and sign in with Google, Google sends an authorization code to our backend (hosted on Firebase).
Our backend exchanges this code for OAuth tokens (including an access token and, if provided by Google, a refresh token) and generates a temporary 6-digit pairing code. These tokens are stored in a short-lived record in our Firestore database for up to approximately 5 minutes, solely to allow your VR headset to retrieve them using the same 6-digit code.
Once your headset successfully retrieves the tokens, the Firestore record is deleted as part of the same operation. We do not use these tokens for any purpose other than enabling uploads that you explicitly request.
On your VR device, a refresh token and access token may be stored locally so that you can stay signed in and upload additional videos without repeating the linking process. These tokens are stored only on your device and are not permanently stored on our backend.
The Google user data we receive and process is limited to:
We do not access your Google account password, and we do not use this integration to read your name, email address, watch history, subscriptions, comments, or other YouTube data.
Spatial Camera uses the youtube.upload scope to let you upload videos to your
own YouTube channel. We use Google user data only to:
We do not use the YouTube API to access your watch history, subscriptions, comments, analytics, or other account data. We do not use Google user data for advertising, profiling, or training machine learning models. Our use of Google user data is limited to providing and improving the user-facing upload functionality in Spatial Camera.
Our use of information received from Google APIs will adhere to the Google API Services User Data Policy , including the Limited Use requirements.
By using the YouTube upload feature, you also agree to the YouTube Terms of Service and acknowledge the Google Privacy Policy.
We do not sell or rent your information. We do not knowingly share Google user data with third parties except in the following situations:
We do not share Google user data with advertisers, data brokers, or other third parties for marketing, targeted advertising, or similar purposes.
Short-lived OAuth token records associated with the 6-digit pairing code are stored in Google Cloud Firestore (via Firebase) and are protected by Google's security controls. Access to our Firebase project is restricted to authorized administrators.
Communication between the Spatial Camera app, the sc.ocutech.dev website, and our backend uses HTTPS to encrypt data in transit. We design our systems so that we do not log OAuth tokens in plaintext.
On your VR device, tokens are stored using the platform's local storage mechanisms in order to keep you signed in. You can remove these tokens at any time by logging out or uninstalling the app.
While we use reasonable technical and organizational measures to protect Google user data and other information processed by the Service, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Short-lived OAuth token records in Firestore (used with the 6-digit pairing code) are stored only long enough to complete the linking process, typically no more than about 5 minutes, and are deleted immediately after a successful retrieval or when they expire.
Refresh tokens and access tokens stored on your VR device remain there until you choose to log out inside the app, uninstall the app, or revoke access via your Google account settings.
We do not retain copies of your media files or their metadata on our servers after an upload request is completed.
If you contact us, we may retain the information you provide (such as your email address and message) for as long as needed to respond and for basic record keeping. You may request that we delete information we hold about you by contacting us as described in the Contact Us section below. We will review and honor such requests in accordance with applicable law.
You can:
Spatial Camera is not directed to children under the age of 13, and we do not knowingly collect personal information from children. If you believe that a child has provided us with personal information, please contact us so we can take appropriate action.
We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last Updated” date at the top of this page. Your continued use of the app after changes become effective means you accept the updated policy.
If you have questions about this Privacy Policy, our use of Google user data, or our data practices, please contact OcuTech LLC at the contact address provided on our website or support channels.