Tupi3D Privacy Policy

Last updated: 13 October 2026.

Tupi3D is a 3D modelling app for VR headsets. This policy explains what data the app handles, where it goes and how to have it removed. It covers the Tupi3D app and the website www.tupi3d.com.

Who is responsible

Andre Kling David
Lahmsbeck 27
21640 Bliedersdorf, Germany
E-mail: andrekling@gmail.com

The short version

• You do not need an account to use Tupi3D, and we do not create one.
• The app contains no advertising, no analytics and no tracking.
• Your models and settings stay on your headset.
• Your voice is turned into text on the headset. It is not recorded or sent anywhere for that.
• Data leaves your headset only when you use a feature that needs it: working with other people, live streaming, signing in to a service, browsing the web or downloading something.
• We do not store any of your data on our servers.

What stays on your headset

• Your projects, models, textures, renders and screenshots.
• Your settings, the display name you chose and your avatar's colour.
• Voice notes you record: your voice, your hand and head movement and pictures of the menus you used. They are files in your project.
• Sign-in tokens for Twitch, YouTube and Dropbox, if you sign in. "Sign out" removes them.
• The in-app browser's history, bookmarks and cookies.
• A random number created when the app is installed. A session host can use it to keep a device out of their session. It says nothing about you or your headset.

Removing the app, or clearing its data in the headset's settings, deletes all of it.

Your hands

Hand tracking is off unless you turn it on (App, Controls). With it on, the positions of your hands and fingers are used on the headset to work the app, in place of the controllers. They are not recorded. In a shared session the other people see where your hands are, as they do with controllers.

The microphone

The microphone is off until you turn it on. With it on:

• Voice commands and dictation are recognised on the headset. The audio is not kept and not sent.
• In a multiplayer session, the other people in the session hear you.
• In a live stream, your audience hears you, unless you mute it.
• A voice note records you until you stop it.

Working with other people (multiplayer)

When you host or join a session, the other people in it receive:

• your display name and avatar colour;
• the position of your head and hands;
• your voice, if your microphone is on;
• the scene you are working on together, with its notes and drawings;
• pictures of your menus and panels, only if you turn on "Share my panels and menus".

Sessions are private: someone needs your room code, your address or to be on your network to join. The host can mute, remove or ban a participant.

If you connect directly, the other devices can see your IP address. If you connect through our relay server, the relay sees it instead. The relay runs at Oracle Cloud in Frankfurt, Germany. It passes the session's data along and does not store or read it.

Session data is encrypted in transit. When you connect through our relay, the app checks that it is talking to the real relay. When you connect directly to a host, the link is encrypted but the app cannot verify who the host is, so join only hosts you know. Versions of the app from before 13 October 2026 did not encrypt sessions.

What you share with other people stays with them. We cannot remove it from their devices.

Live streaming

When you go live, the picture you see in the headset, the app's sound and your microphone (unless muted) are sent to the service you chose: Twitch, YouTube or a server you entered. The headset asks for your permission to capture the screen each time.

• Twitch: you sign in on Twitch's own page. Tupi3D reads your stream key and chat, sets your stream's title and sends the chat messages you type. Twitch's privacy notice applies: https://www.twitch.tv/p/legal/privacy-notice/
• YouTube: Tupi3D uses YouTube API Services. You sign in on Google's own page. Tupi3D reads your channel's name, creates a stream key and a broadcast with your title and visibility, reads the viewer count and chat, and sends the chat messages you type. By using this feature you agree to the YouTube Terms of Service (https://www.youtube.com/t/terms). Google's privacy policy applies: https://policies.google.com/privacy. You can withdraw Tupi3D's access at any time at https://myaccount.google.com/permissions.

The sign-in details stay on your headset. We never receive them.

Other services you may use from the app

• Dropbox, to open and save files there: https://www.dropbox.com/privacy
• The in-app browser, including Discord and Poly Haven: each website receives what any browser sends it and applies its own policy.
• Speech models you choose to download come from Hugging Face.
• LocalSend sends the files you choose to a device you choose on your own network.

What the app does on its own

When it starts, Tupi3D fetches a small file from www.tupi3d.com that lists our relay servers. No information about you is sent, but as with any web request the host (GitHub Pages) sees your IP address.

Why we may process this data

Under the EU General Data Protection Regulation: to provide the features you use (Article 6(1)(b)), with your consent for the microphone, screen capture and sign-ins (Article 6(1)(a)), and our legitimate interest in running the relay and keeping sessions safe (Article 6(1)(f)).

Who else is involved

• Oracle (cloud hosting of the relay, Frankfurt, Germany).
• GitHub (hosting of the website).
• The services you choose to use, listed above, each under its own policy.

We do not sell data and do not share it with anyone else.

How long data is kept

We keep nothing. Data on your headset stays until you delete it or remove the app.

Deleting your data, and your rights

• On your headset: sign out of each service in Stream settings and the Dropbox panel; delete projects in the Files panel; or remove the app to delete everything.
• With Twitch, Google or Dropbox: through your account with them.
• With us: we hold no data about you. If you believe we do, or to report a problem, write to andrekling@gmail.com and we will answer within 30 days.

You have the right to ask for access to, correction or deletion of your personal data, to restrict or object to its processing, and to complain to a data protection authority, for example the one where you live.

Children

Tupi3D is not intended for children under 13.

Three features are locked when the app is first installed, and are unlocked in the app's settings (App, Privacy & safety):

• The web browser and live streaming can be unlocked only by someone who is 18 or older, or who has a parent's or guardian's permission.
• Shared sessions (multiplayer), where other people can hear you and see what you make, can be unlocked only by someone who is 16 or older, or who has a parent's or guardian's permission.

Reporting other people

Everyone in a session is expected to follow our Code of Conduct. To report someone's behaviour, press the menu button on your controller and choose Report, use the Report button next to their name in the People list, or write to andrekling@gmail.com. The session's host can mute, remove or ban a participant, and you can mute or hide anyone for yourself.

Changes

We will update this page when the app changes what it does with data, and change the date at the top.