Last Updated: January 3, 2026
PatchXR AG (“PatchXR”, “we”, “us”, or “our”) respects your privacy. This Privacy Policy explains how we collect, use, store, and share information when you use the PatchWorld virtual reality application and related backend services (the “Service”) on supported platforms, including the Meta Horizon platform.
1. Data Controller
The data controller responsible for the processing of personal data is:
PatchXR AG
Chriesbaumstrasse 6
8604 Volketswil
Switzerland
Commercial Register Number: CH-020.3.049.427-2
VAT / UID: CHE-316.817.994
Contact for data protection matters: gdpr@patchxr.com
2. Information We Store
We store only the data necessary to operate PatchWorld and provide its features.
A. Account & Authentication Data (USER_ID / USER_PROFILE)
When you first use PatchWorld, you are automatically signed in using your Meta account. We store:
- Platform User ID (USER_ID), used as your internal PatchWorld account identifier
- Public Meta username, used as your default PatchWorld display name (which you may change at any time)
- Authentication and session tokens
- Purchase and entitlement verification data
We do not collect or store real names, email addresses, or contact details.
We do not access or use Meta avatar representations.
B. User-Generated Content
We store content that you actively create or save within the Service, including:
- Virtual worlds, music, instruments, and assets
- Project metadata associated with your account
- Uploaded or generated media you choose to save, such as audio recordings, virtual pictures, and avatar or interaction movement recordings
This content remains private by default unless you choose to make it public or share it with other users. Content remains associated with your account until you delete it or request account deletion.
Shared Multiplayer Content
PatchWorld includes multiplayer experiences that take place in shared virtual worlds. When you voluntarily join a multiplayer session, actions you perform within that shared world — such as placing or modifying objects, interacting with instruments, contributing to the world state, or recording audio or other media — may become part of that shared environment.
If another participant chooses to save the world or its state, content created during the session, including content reflecting your interactions or recordings that you intentionally create or save using in-app recording features, may be saved as part of that world even if you did not personally initiate a save action. This reflects the collaborative nature of shared world creation in PatchWorld.
Content saved in this way is treated as user-generated content associated with the saved world and is subject to the privacy, visibility, and sharing settings applied by the user who saved it.
C. Friends Data (FRIENDS)
PatchWorld may access Meta friends information only when you open the world share menu, in order to show you which of your Meta friends also own and use PatchWorld so that you can share a world privately with them.
- We do not store your Meta friends list or any friends data on our servers
- Friends information is used only on-demand to display eligible recipients in the sharing menu
- This information is not made public within PatchWorld and is not shared with other users
D. Invites & World Sharing (INVITES)
PatchWorld supports private world sharing between users who:
- Already own PatchWorld, and
- Are currently active PatchWorld users
When you use the world sharing menu, PatchWorld may display Meta friends who also own PatchWorld at the top of the list to simplify private sharing.
PatchWorld does not:
- Invite non-users to the platform
- Send invitations to Meta friends who do not already own PatchWorld
All invites and sharing actions are user-initiated and occur only between existing PatchWorld users.
E. AI Feature Input Data
When you use AI-powered features, we store:
- Text/media prompts you submit
- Generated output
AI interactions are optional and occur only when you actively use these features. To provide AI-generated results, user-submitted content (such as text prompts or media) is transmitted to third-party AI service providers solely for the purpose of generating the requested output. We do not transmit Meta account identifiers, usernames, or other account-level personal information as part of these requests.
F. Transactional Data (IAP)
PatchWorld supports in-app purchases through platform providers.
We store:
- Records of virtual items, entitlements, and in-app currency balances
We do not:
- Process payments directly
- Receive or store payment card details or financial account information
Payment processing is handled entirely by the platform provider. We receive only purchase and entitlement confirmation necessary to unlock purchased content.
G. Technical & Log Data
For security, stability, and debugging, we may temporarily store:
- IP addresses
- Device and application information
- Error and crash logs
We do not access or use the device Advertising ID.
3. How We Use Your Data
We process personal data solely for the following purposes:
- Account authentication and management
- Operating core app features (saving content, loading worlds, multiplayer functionality)
- Enabling private world sharing between PatchWorld users
- AI content generation based on user-initiated prompts
- Purchase and entitlement verification
- Security, fraud prevention, and debugging
- Service communication (notifications and updates, if enabled)
If we use analytics to improve PatchWorld, we do so using aggregated and/or de-identified data and do not use analytics to identify individual users or devices.
Multiplayer interactions and shared world persistence are core features of PatchWorld. Data generated during these interactions is processed solely to enable collaborative gameplay and content creation and is not used for monitoring, profiling, or advertising.
Legal Basis for Processing
We process personal data where necessary to perform our contract with you (providing PatchWorld and its features), to comply with legal obligations, to protect our legitimate interests in operating and securing the Service, and, where applicable, based on your consent.
Where processing is based on consent, you may withdraw your consent at any time without affecting prior lawful processing.
When PatchWorld is used via the Meta Horizon platform, Meta-sourced user data is processed only to run, support, and maintain the Service, improve the in-app experience using aggregated or de-identified insights, and comply with legal obligations, in accordance with Meta’s Developer Data Use Policy.
4. Data Sharing & Third Parties
We do not sell personal data.
We share data only:
- When necessary to operate the Service
- When you actively initiate a sharing feature
- When required by law
Infrastructure & Service Providers
We use third-party service providers (such as cloud hosting and database providers) to operate PatchWorld. These providers process data only on our instructions and under confidentiality and data-protection obligations.
5. Meta Horizon Platform – Specific Data Use
Advertising
PatchWorld does not show ads and does not access or use the device Advertising ID.
Microphone & Voice Chat
PatchWorld may request microphone access for real-time multiplayer voice chat and for user-initiated audio recording.
We do not store voice chat data. Audio recordings are stored only when you explicitly record and save them.
Movement & Interaction Recording
PatchWorld allows you to record avatar movement and interactions with virtual items only when you explicitly enable recording. We do not store continuous movement or gesture data without your knowledge.
6. International Data Transfers
PatchXR is based in Switzerland. Data may be processed outside Switzerland or the EEA depending on infrastructure location. Where required, we rely on appropriate safeguards, including recognized contractual protections such as the European Commission’s Standard Contractual Clauses.
7. Data Retention
We retain personal data only as long as necessary:
- Account & Purchase Data: While your account is active and as required by law
- User-Generated Content: Until you delete it or request account deletion
- Friends Data: We do not store friends data on our servers
- AI Interaction Logs: Deleted after a limited retention period
- Technical Logs: Retained for a limited period (generally no longer than 12 months)
Shared World Content Retention
Where content is saved by another user as part of a shared multiplayer world, your ability to directly delete or modify that content may be limited, as control over the saved world rests with the user who saved it. In such cases, PatchXR will assess deletion or modification requests in accordance with applicable data protection laws and, where required, delete or anonymize personal data without undue delay, while balancing those requests against the rights and interests of other users who participated in creating or saving the shared content.
Data is deleted or anonymized when no longer required or upon request.
8. Your Rights & Account Deletion
You have the right to access, correct, or delete your personal data and to object to certain processing activities in accordance with applicable data protection laws.
How to Request Deletion
To request deletion of your PatchWorld account and associated data:
- Email: gdpr@patchxr.com
- Subject: “Account Deletion Request – [Your Username]”
This email address is our primary, clearly marked method for data correction and deletion requests.
Verified requests are processed within 30 days and result in permanent deletion of your account, including saved content and virtual currency.
You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC).
9. Security & Responsible Disclosure
We maintain appropriate technical and organizational security measures.
If you believe you have identified a security vulnerability in PatchWorld, please report it to: support@patchxr.com.
10. Children’s Privacy
PatchWorld is not intended for children under the age of 13 (or the applicable age of digital consent). We do not knowingly collect personal data from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last Updated” date.