Privacy Policy

Last updated: June 2026

This Privacy Policy describes how Kibioniks LLP, trading as Cybionyx ("we", "us", "our"), handles information in connection with the CYBIONYX InMotion application (the "App") and the website inmotion.cybionyx.space (together, the "Service").

Local-only by design

CYBIONYX InMotion streams your computer's screen to your Meta Quest headset over your own local network (Wi‑Fi) or a direct USB cable. All processing happens on your own devices. We do not operate servers that receive your data, and the App contains no analytics, advertising, tracking, or crash-reporting tools. The App does not collect, transmit, sell, or share any personal data. The App requires no account, login, or password.

Our website

Separately from the App, our website (inmotion.cybionyx.space) uses Cloudflare Web Analytics, a privacy-first analytics service, to understand general interest in the product. As Cloudflare describes it, Cloudflare Web Analytics does not use any client-side state, such as cookies or localStorage, to collect usage metrics, and does not "fingerprint" individuals via their IP address, User Agent string, or any other data for the purpose of displaying analytics. It also does not track you across other websites or build a profile of you. It records only aggregate, non-identifying measurements — visits, page views, page-load performance, the site that referred you, your browser and operating system, and your approximate country — which cannot be used to identify you. Cloudflare provides this service to us as our processor; see Cloudflare's privacy policy for details. The App itself uses no analytics of any kind, as described above.

1. Data Processed Locally on Your Devices

To make streaming work, the App processes the following entirely on your own devices. This data is exchanged only directly between your PC and your headset over your local network or USB cable — it never reaches us or any third party:

Screen image — your PC desktop is captured, encoded, and sent to your headset for display in real time. It is not recorded or stored.
System audio — your computer's speaker output (system sound) may be streamed to your headset so you can hear it. This is your PC's audio output, not microphone input. It is not recorded or stored.
Controller & head tracking — head pose and controller actions are sent from the headset to your PC to move the mouse and keyboard. They are used in real time and not stored.
Pairing keys — when you pair your headset and PC with a one-time PIN, a cryptographic key is stored on each device so they can reconnect securely. These keys stay on your devices.
Local settings — your preferences (screen size, controller sensitivity, video quality, language, etc.) and a randomly generated installation identifier are stored locally in a configuration file on your PC and headset.
Diagnostic logs — performance metrics (frame rate, latency) and technical logs are written to a local file on your device to help with troubleshooting. They are not uploaded anywhere.

None of the above leaves your local network or is accessible to us.

The installation identifier and your local settings are stored only on your device, are strictly necessary to operate features you have requested (such as pairing and your preferences), are never transmitted to us, and are not used for tracking or analytics.

2. Permissions

The App requests only the permissions needed for local streaming:

On Meta Quest — local network access and multicast, used solely to discover and connect to your PC on your own network. (The Android "Internet" permission is required for any local-network connection; the App does not connect to remote servers.)
On your PC (Windows / macOS) — Screen Recording to capture the screen you choose to stream; Accessibility / Input to let your headset control the mouse and keyboard; and audio loopback to stream your system sound.

We do not request microphone, camera, location, or contacts access.

3. Data Sharing

We do not sell, share, or transfer your data to third parties. We do not track you across websites or over time, and because the App performs no tracking, it does not respond to browser "Do Not Track" signals. While the App itself collects no data about you, the platforms you use it on — such as Meta (Horizon Store and Quest) and your computer's operating system — handle data under their own privacy policies, which we do not control. Payments, if any, are processed entirely by Meta under Meta's terms; we do not receive or process payment information.

4. Data Retention and Deletion

All data described above is stored only on your own devices, under your control. You can remove it at any time by unpairing your devices in the App, or by uninstalling the App from your headset and PC — this deletes local settings, pairing keys, and logs. Because we hold no copy of your data, there is nothing for us to delete on our side. If you have any questions, contact us at [email protected].

5. Children's Privacy

The Service is not directed to children. The minimum age to use online services without parental consent varies by country — in the EU/EEA it is between 13 and 16 — and you must meet the minimum age set by the law of your jurisdiction. We do not knowingly collect data from children; in fact, the App does not collect personal data from anyone.

6. Security

Pairing uses a one-time PIN, and messages between your PC and headset are authenticated (HMAC-SHA256) to detect tampering. Pairing keys are stored encrypted on each device. Because the App streams only over your own local network or a direct USB cable, your screen and audio never travel over the public internet.

7. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date. If we make material changes to how we handle your data, we will provide prominent notice and, where required by law, obtain your consent before those changes apply to you.

8. Contact

If you have questions about this Privacy Policy, contact us at:

[email protected]