privacy | Vision Anatomy

Privacy Policy

Effective Date: September 09 of 2026

This Privacy Policy ("Policy") explains how MySegmenter Technologies Inc.("Company", "we", "us", or "our"), the developer of Vision Anatomy, collects, uses, and protects information in connection with the Vision Anatomy mixed-reality application for Meta Quest headsets, any companion website, and related services (together, the "Service").

We reserve the right to update this Policy at any time. If we make material changes, we will notify you as described in Section 23.

We encourage you to review this page periodically.

Table of Contents

Definitions
What Data We Collect
Why We Collect Data
Legal Basis (GDPR)
Data Security
Third-Party Services
Data Disclosure
Data Retention
GDPR Rights
How We Protect Your Data
Breach Notification
Cookies & Similar Technologies
Do Not Track / Global Privacy Control
Marketing Communications
Consent Withdrawal
Account & License Deletion
Automated Decisions
Diagnostic & Log Data
Aggregated Data
Third-Party Links
Children's Privacy & Age Requirements
Restricting Collection
Policy Changes
Privacy Contact / DPO
Supervisory Authority
Complaints Procedure
Governing Law
Contact Us

1. Definitions

For the purposes of this Privacy Policy:

Account: A license/user profile associated with your copy of the Service, which may be tied to your Meta account and/or a device-bound software license.

Company: MySegmenter Technologies Inc., located at 8 The Green Suite # 10588 Dover, DE 19901

Device: The Meta Quest head-mounted display (e.g., Quest 2, Quest 3, or successor models) on which the Service runs.

Headset Platform: Meta Platforms Technologies, LLC and its Meta Quest / Meta Horizon operating system, account system, and store, which operate under Meta's own privacy policy and are not controlled by the Company.

License Provider: Keygen (Keygen.sh), our third-party service used to validate and manage per-device software licenses.

Personal Data: Any information that relates to an identified or identifiable individual.

Service: The Vision Anatomy application distributed through the Meta Horizon (Quest) Store, together with any companion website or support tools provided by the Company.

Service Provider: Any natural or legal person who processes data on behalf of the Company.

Usage Data: Data collected automatically through use of the Service, such as feature interactions, session length, and diagnostic/crash data.

User / You: The individual using the Service, or the institution or organization on whose behalf the Service is used.

Data Controller: The entity that determines the purposes and means of processing Personal Data (the Company, except where the Headset Platform acts as an independent controller of device-level data).

Data Processor: An entity that processes Personal Data on behalf of the Data Controller.

2. What Data We Collect

In connection with your use of the Service, we may collect:

Account and license data: Your email address (if an account is created), a device-bound license key, hardware identifiers used to bind the license to your headset, and license activation/validation records.

Purchase data: A purchase or order identifier from the Meta Horizon (Quest) Store confirming your entitlement to the Service. We do not receive or store your full payment card details; these are handled directly by Meta.

Device and technical data: Headset model (e.g., Quest 2/Quest 3), operating system version, app version, and other technical identifiers needed to operate and license the Service.

Usage data: In-app interactions such as which anatomical regions/systems are viewed, tools used (e.g., transparency, hidden-list, info panel), and approximate session duration, used to understand feature usage and improve the Service.

Diagnostic and crash data: Error logs and crash reports that help us identify and fix technical issues.

Communications data: Information you provide when contacting support, submitting feedback, or corresponding with us.

Headset sensor data (mixed-reality specific)

The Meta Quest headset uses cameras and sensors to enable passthrough mixed reality, hand tracking, and spatial awareness (e.g., Guardian boundaries, room mapping). This raw sensor, camera, and spatial data is captured and processed by the Meta Horizon operating system under Meta's own privacy policy, not by the Company. The Service receives only the limited, real-time inputs necessary to render interactions (for example, hand or controller position) and does not store, transmit, or have independent access to raw camera images, room scans, or biometric identifiers derived from them.

No patient or third-party health data

Vision Anatomy is an educational and reference tool. It does not acquire, process, transmit, or store medical imaging or health information about any real patient, and it is not used on or in contact with a patient. All anatomical content shown is generalized, model-based reference material, not derived from or linked to any specific individual.

3. Why We Collect Your Data

We collect and use data for the following purposes:

To validate your software license and provide access to the Service.

To operate, maintain, and provide the educational content and features of the Service.

To detect, diagnose, and fix technical issues and improve performance.

To understand which features are used so we can improve future versions.

To provide customer and technical support.

To communicate with you about updates, security notices, or (with consent) promotional information.

To enforce these Terms and this Policy, including detecting unauthorized or fraudulent license use.

To comply with applicable legal obligations.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, our legal basis for processing your personal information depends on the context:

Contract: Processing is necessary to provide the Service to you (e.g., license validation, delivering app functionality).

Consent: You have given us permission to do so (e.g., for optional marketing communications).

Legitimate Interests: Processing is in our legitimate interests and not overridden by your rights (e.g., diagnosing crashes, improving the Service).

Legal Obligation: We need to comply with the law (e.g., tax, accounting, or regulatory recordkeeping).

5. Data Security

MySegmenter Technologies Inc.is committed to protecting the data we collect. Our security measures include:

TLS/HTTPS encryption for license validation and any other network communication.

Encrypted, device-hashed storage of authentication/license data on your headset.

Access controls limiting who at the Company can access account and license records.

Regular review of our license validation and backend infrastructure for vulnerabilities.

Employee training on data protection practices.

Use of reputable, security-vetted third-party infrastructure providers (see Section 6).

6. Third-Party Services

We use the following categories of third-party service providers, which process data only as needed to perform services on our behalf:

Headset Platform: Meta Platforms Technologies, LLC operates the Meta Quest device, Meta Horizon account system, and Meta Horizon Store through which the Service is distributed and purchased. Meta's handling of your data is governed by Meta's own privacy policy, not this Policy.

License Management: Keygen (Keygen.sh) for device-bound software license issuance and validation.

Cloud Hosting: AWS Cloud hosting for secure storage and hosting of backend license and support data — to be confirmed.

Analytics / Crash Reporting: Analytics/crash-reporting SDK is used to understand feature usage and diagnose crashes — to be confirmed and disclosed once finalized.

Customer Support: Help-desk and support ticketing tools used to manage your inquiries.

7. Data Disclosure

Business Transactions

If the Company is involved in a merger, acquisition, or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data becomes subject to a different privacy policy.

Law Enforcement

We may disclose your Personal Data if required to do so by law or in response to valid requests by public authorities.

Other Legal Requirements

We may disclose your Personal Data in the good-faith belief that such action is necessary to:

Comply with a legal obligation.

Protect and defend the rights or property of the Company.

Prevent or investigate possible wrongdoing in connection with the Service.

Protect the personal safety of users or the public.

Protect against legal liability.

8. Data Retention

We retain Personal Data only as long as necessary for the purposes set out in this Policy:

Account and License Data: Retained for the duration of your license and up to 3 years after deactivation, to support license administration and dispute resolution.

Usage and Diagnostic Data: Retained for up to 12 months for analytics and troubleshooting purposes.

Support Communications: Retained for 3 years after the issue is resolved.

Transaction Records: Purchase confirmation identifiers retained for 7 years for accounting purposes; full payment data is retained by Meta, not the Company.

Log Data: Retained for up to 90 days for security and debugging.

9. Your Data Protection Rights (GDPR)

You have the right to:

Access: Request a copy of your personal data.

Rectification: Request correction of inaccurate data.

Erasure: Request deletion of your personal data, under certain conditions.

Restrict processing: Request that we limit how we use your data, under certain conditions.

Object: Object to our processing of your data, under certain conditions.

Portability: Request that we transfer your data to you or another organization, under certain conditions.

We will respond to verified requests within one month. To exercise these rights, contact us at privacy@3dsurgical.com

10. How We Protect Your Personal Information

No method of transmission or electronic storage is completely secure. While we use reasonable efforts to protect your information, we cannot guarantee absolute security. If we are required by law to notify you of a breach affecting your data, we will do so electronically or in writing as permitted by law.

11. Data Breach Notification

In the event of a data breach affecting your personal information, we will:

Notify affected users without undue delay, and within 72 hours of becoming aware where required by GDPR.

Describe the nature of the breach and the data affected, and the measures taken to address it.

Offer guidance on steps you can take to protect yourself.

Report the breach to relevant supervisory authorities as required by law.

12. Cookies & Similar Technologies

The Vision Anatomy headset application does not use browser cookies. If the Company operates a companion marketing or support website, that website may use cookies and similar technologies for the purposes below:

Essential Cookies: Required for the website to function (e.g., security).

Analytics Cookies: Help us understand website traffic and usage patterns.

Functional Cookies: Remember your preferences and settings.

Within the application itself, we may use local on-device storage (not browser cookies) to cache your license status and app preferences. You can control browser cookies through your browser settings if you visit any Company website.

13. Do Not Track / Global Privacy Control

The concept of browser "Do Not Track" signals does not apply within the headset application itself. If the Company operates a website, it will honor the Global Privacy Control (GPC) signal as a valid opt-out request for the sale/sharing of personal information, where applicable; the site currently does not otherwise respond to DNT signals.

14. Marketing Communications

With your consent, we may send promotional communications about the Service. You may opt out at any time by:

Clicking "unsubscribe" in any marketing email.

Contacting us at marketing@3dsurgical.com

Even after opting out of marketing, we may still send transactional messages related to your account, license, or purchase.

15. Consent Withdrawal

Where we rely on your consent, you may withdraw it at any time; this will not affect the lawfulness of processing carried out before withdrawal. To withdraw consent for marketing, use the unsubscribe link; for other processing, contact us using the details in Section 28.

16. Account & License Deletion

You may request deletion of your account and associated personal data, and deactivation of your device license, at any time by contacting privacy@3dsurgical.com. Upon request, we will verify your identity, delete or anonymize your personal data within 30 days (subject to legally required retention), and confirm completion by email.

17. Automated Decisions

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you. Any automated processes (e.g., license validation) are used solely to operate the Service.

18. Diagnostic & Log Data

Like most software applications, the Service may generate diagnostic data when used, which can include:

App version and headset model/OS version.

Feature-usage events (e.g., which anatomical systems were viewed).

Crash reports and error logs.

Timestamps of sessions.

This information is used for security monitoring, troubleshooting, and improving the Service, and is typically retained for up to 90 days for raw logs (see Section 9 for other categories).

19. Aggregated and Anonymized Data

We may collect, use, and share aggregated or anonymized data (which does not identify you) for any purpose, such as understanding overall feature usage or producing usage benchmarks. If aggregated data is combined with personal data such that it could identify you, we treat the combined data as personal data under this Policy.

20. Third-Party Links

The Service or any companion website may contain links to third-party sites or reference materials (e.g., anatomical or educational resources). We are not responsible for the privacy practices of those third parties; please review their own privacy policies.

21. Children's Privacy & Age Requirements

Vision Anatomy is designed for medical and allied-health students, educators, and healthcare professionals, and is intended for adult users comfortable operating a mixed-reality headset. Use of the Service also follows the minimum age requirements set by the Headset Platform for Meta Quest devices and Meta Horizon accounts.

We do not knowingly collect personal data from children under the age the Headset Platform designates as its minimum account age (currently set by Meta). If we become aware that we have inadvertently collected personal data from a child without appropriate consent, we will take steps to delete that data promptly. Parents or guardians who believe their child has provided us with personal data should contact us using the details in Section 28.

22. Restricting the Collection of Your Personal Data

You can limit the collection and use of your personal data by:

Declining optional marketing communications.

Disabling diagnostic/analytics sharing in the app's settings, where available.

Contacting us to update your preferences or request deletion.

MySegmenter Technologies Inc.will not lease, sell, or distribute your personal information to third parties without your permission, except as required by law.

23. Changes to This Privacy Policy

We may update this Policy from time to time. We will post the updated Policy on this page, update the "Effective Date," and, for material changes, provide additional notice such as an email or an in-app notice prior to the change taking effect. Continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

24. Privacy Contact / Data Protection Officer

For questions about this Policy or to exercise your rights, contact our privacy team:

MySegmenter Technologies Inc.

8 The Green Suite # 10588 Dover, DE 19901

Email: privacy@3dsurgical.com

25. Supervisory Authority (GDPR)

If you are in the EEA and believe we have not adequately addressed your concerns, you may lodge a complaint with a supervisory authority in your Member State of residence, work, or the place of the alleged infringement.

EU Data Protection Authorities: edpb.europa.eu

UK residents: Information Commissioner's Office (ICO) — ico.org.uk

26. Complaints Procedure

Step 1: Contact our support team at privacy@3dsurgical.com with details of your complaint.

Step 2: We will acknowledge your complaint within 5 business days.

Step 3: We will investigate and respond within 30 days.

Step 4: You retain the right to lodge a complaint with the relevant supervisory authority.

27. Governing Law

This Privacy Policy is governed by the laws of the Republic of India, without regard to its conflict-of-law provisions. For users in the European Union, this choice of law does not deprive you of protections that cannot be derogated from under the law of your country of residence.

28. Contact Us