Privacy Policy

Last updated: 2026

GraffitiXR (“the app”), published by Flet Media, is a mixed-reality tracing tool for Meta Quest. This policy explains what data the app and this website handle. The guiding principle is simple: GraffitiXR keeps as little as possible, and deletes what it can.

What the app does on your device

GraffitiXR uses your headset’s passthrough cameras and depth sensors, provided through Meta’s system APIs, to display your real surroundings and to detect surfaces so a reference image can be locked to a wall. This camera and depth processing happens on the device through Meta’s platform. The app itself does not record, store, or transmit a video or photographic capture of your surroundings.

Reference images

Reference images you use for tracing are stored locally on your headset. These can come from the bundled samples, images you copy into the headset’s storage, or images you send from your phone using the upload feature described below. Locally stored references stay on your device and are under your control; you can remove them at any time.

Phone-to-headset upload

The optional upload feature lets you send images from your phone to your headset. When you start an upload, the app creates a short-lived pairing code. Images you choose on your phone are uploaded to a temporary cloud store, associated only with that pairing code, and then downloaded by your headset.

These uploads are ephemeral by design. As soon as your headset downloads an image, that image is deleted from the cloud store. Any upload that is never retrieved is automatically deleted shortly after, and pairing codes expire within minutes. We do not build profiles from uploaded images, and the upload feature does not require an account or sign-in.

Accounts

GraffitiXR does not require you to create an account, and the upload feature is anonymous — it is tied only to a temporary pairing code, not to your identity.

Analytics and third parties

The temporary upload store is hosted by Supabase, which processes the image only for the brief time needed to pass it to your headset. Distribution and platform services are provided by Meta under their own terms and privacy policy. We do not sell your data.

Children

GraffitiXR is not directed to children under the age required by the Meta platform in your region, and we do not knowingly collect personal information from them.

Changes

We may update this policy as the app evolves. Material changes will be reflected on this page with an updated date.

Contact

Questions about privacy? Reach us through the support page.

This policy describes current functionality and is provided for transparency. It is not legal advice; if you have specific compliance requirements, consult a qualified professional.