Whiteboard Privacy Policy
This privacy policy applies to the Whiteboard app (hereby referred to as "Application") for Meta Quest devices that was created by Savva (hereby referred to as "Service Provider") as a Free service. This service is intended for use "AS IS".
Information Collection and Use
The Application has no accounts, no ads, no analytics, and no network connection. It does not collect, sell, or share any personal information. All of your data is stored locally on your device only and never transmitted to the Service Provider or any third party:
- Your boards — the whiteboard documents you create, including their drawings (freehand strokes), sticky notes, text, shapes, lines and arrows, frames, and any images you add
- Your board metadata — names, creation and modification times, and the element content of each board
- Thumbnail previews — small PNG images of each board generated on-device for the board list
- Your app settings — theme, grid visibility, undo history limit, and other preferences
Each board is saved as a single self-contained document file (.wbj) on your device. The Application does not gather precise information about the location of your VR device, does not access your contacts, camera, or microphone, and does not use advertising identifiers.
Images
You can add images to a board by sharing them from another app or by pasting them. Such images are stored inside the board document on your device. The Application only reads the image data you provide; it does not upload it, fetch it from the internet, or send it anywhere.
Optional Meta telemetry
The Application uses the Meta Spatial SDK. Meta may offer optional, opt-in diagnostics/telemetry for Meta SDKs; this is governed by Meta's own privacy policy and terms (see Meta Privacy Policy). Telemetry is disabled unless you opt in through the system or SDK prompts, and opting in is not required to use the Application. The Service Provider does not receive, access, or review any telemetry data.
Permissions
The Application requests no permissions. It has no network access and does not declare the Internet permission. It works fully offline.
Third Party Access
The Service Provider does not share, sell, or transmit any of your information to third parties. The Application makes no outbound network requests of any kind. The only telemetry that may ever be associated with it is the optional Meta SDK telemetry described above, which is handled entirely by Meta and only if you opt in.
The Service Provider may disclose information:
- as required by law, such as to comply with a subpoena, or similar legal process;
- when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
Opt-Out Rights
You can stop all collection of information by the Application easily by uninstalling it. You may use the standard uninstall processes as may be available as part of your VR device or via the VR application marketplace or network. Uninstalling the Application permanently removes your boards, thumbnails, and settings from the device. If you opted in to Meta SDK telemetry, you can disable it in the Meta system settings; the Service Provider does not control or receive that data.
Data Retention Policy
All Application data (boards, thumbnails, settings) is stored only on your device and is retained only as long as the Application is installed. The Service Provider has no server-side copies of your data and cannot access your data. If you delete a board from within the Application, it is removed from the device; if you uninstall the Application, your local data is deleted with it.
Children
The Service Provider does not use the Application to knowingly solicit data from or market to children under the age of 13.
The Application does not address anyone under the age of 13. The Service Provider does not knowingly collect personally identifiable information from children under 13 years of age. Because the Application does not collect any personal information, the Service Provider has no such data to delete; if you believe a child has used the Application, please contact the Service Provider at oisurka@gmail.com so that they can take any necessary actions.
Security
The Service Provider is concerned about safeguarding the confidentiality of your information. Because the Application stores your data only on your device and makes no network connections, there is no Service Provider-side storage to secure. The Service Provider provides physical, electronic, and procedural safeguards for any information they process or maintain.
Changes
This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any changes to the Privacy Policy by updating this page with the new Privacy Policy. You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed approval of all changes.
This privacy policy is effective as of 2026-11-12.
Your Consent
By using the Application, you are consenting to the processing of your information as set forth in this Privacy Policy now and as amended by us.
Contact Us
If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at oisurka@gmail.com.