Workout Worlds privacy policy

Last updated: 9 October 2026

Who is responsible

Lucas Dos Santos Ramos, trading as Unagi Studios, a sole proprietor established in Germany, is responsible for the processing described here. Contact us about privacy, support or data deletion at support@unagistudios.com.

Postal contact: c/o Online-Impressum 8498, Europaring 90, 53757 Sankt Augustin, Germany. This is our public correspondence address.

This policy covers our Workout Worlds game for Meta Quest. It does not replace Meta's policies for the headset, Meta account or store, or the policy of the website hosting this notice.

Your workouts and body information

The game stores progress locally on your headset, including:

• workout history: dates, workouts, difficulty, environment, duration, scores, grades, accuracy, hits and misses, dodges, estimated calories, punch-speed summaries and input mode;
• personal bests and activity streaks;
• settings such as volume, language, colors, haptics, height/reach adjustments and low-impact mode;
• calibration measurements (standing eye height and reach), calibration date, tutorial completion and acceptance of the safety notice;
• optional body weight and preferred units, used for calorie estimates;
• a randomly generated local player identifier, which is not your Meta account ID.

These saved values are not uploaded to us or Sentry. The game has no developer-operated account, cloud sync or social profile. Local processing allows the game to provide the gameplay, calibration and progress features you request. Entering body weight is optional; without it, the game uses a default value for calorie estimates. Estimates are not medical measurements.

Local data remains until you remove the game's app data or uninstall the game. The game keeps a local backup of its save file for corruption recovery, but disables Android cloud backup. You can remove optional weight through Settings → Body → Clear weight. We cannot remotely access, export or delete your local save.

Tracking and passthrough

The game uses headset/controller poses and, when enabled, hand tracking to operate the game and judge movements. Selected measurements and workout summaries are saved as described above; raw movement streams and hand images are not recorded or uploaded by the game.

The “Your room” environment uses Meta's passthrough feature to display your surroundings. The game does not request raw camera images, record your room or send room images to us. It does not record your voice or access the microphone. Meta operates the headset's tracking and passthrough services under its own policies.

Purchase verification and Meta

In store release builds, the game uses the Meta platform to check whether the current user is entitled to run it. Meta processes that request; our game receives the check result. We do not request your Meta profile, email, friends list or payment-card details. Meta handles store purchases and payments. See Meta's Privacy Policy.

Technical crash and error reports

Player builds use Sentry to send technical crash/error reports so we can diagnose failures and maintain the game. Reports can contain the error message and stack trace, time of the event, app/build version, operating system and device model, hardware/runtime information and diagnostic identifiers generated by the reporting SDK. Technical identifiers should not be treated as anonymous merely because they do not contain your name.

We disable performance/session tracking, metrics, structured log uploads, screenshots, view-hierarchy attachments and game-log breadcrumbs. The game does not intentionally include workout history, body measurements, local save identifiers, account details, room images or voice recordings in reports. It removes explicit user fields and device names from managed reports. The native crash-reporting path is also configured without gameplay breadcrumbs or default personal-information collection.

Sentry is a service provider for crash reporting. This project uses its EU ingestion endpoint and EU data storage region. We have accepted Sentry's Data Processing Addendum and disabled its optional use of aggregated identifying diagnostic data for product improvement. Network transmission necessarily exposes a connection IP address to the receiving infrastructure; the Sentry project is configured to prevent storing IP addresses in new events. This is different from claiming that no IP address is ever processed. Sentry's service operations can involve subprocessors and international processing. Its published processing terms and transfer arrangements are available in Sentry's Data Processing Addendum.

Reports may be cached locally while offline and sent later. Uninstalling removes local cached reports but does not delete reports already received by Sentry.

Where GDPR applies, we rely on our legitimate interest in identifying failures and providing a stable game for limited technical diagnostics (Article 6(1)(f)). We keep diagnostics only while needed to investigate and resolve technical problems. Error events are subject to automatic deletion after 30 days under our current Sentry plan. You may object to processing based on legitimate interests by contacting us; we will assess your request under the applicable law.

The game contains no advertising SDK, marketing analytics or sale of your data. Crash reporting is the limited technical processing described here.

If you contact us

If you email us, we receive your email address and the information you choose to include. We use it to answer the request, provide support or handle your privacy rights. Do not send body measurements, passwords, payment details or a save file unless needed and specifically requested.

Support related to your purchase is processed as necessary to provide the service (Article 6(1)(b)); other correspondence may be processed for our legitimate interest in answering inquiries (Article 6(1)(f)). Handling legally required privacy requests is based on Article 6(1)(c). Correspondence is retained only as needed to resolve the inquiry and any applicable recordkeeping or legal obligations. Emails to support@unagistudios.com are received directly in our business Gmail mailbox provided through Google Workspace. Information about Google's processing of Workspace customer data is available in Google's Cloud Data Processing Addendum. The mailbox service may process data outside the European Economic Area, including in the United States. Details of the website and contact services are also described in our website privacy notice.

Deletion requests and your rights

To delete local workouts, settings and calibration, remove the game's app data or uninstall it on the headset. Removing the app does not delete your Meta account, purchase record or remote crash reports.

For data we hold, email support@unagistudios.com with the subject “Privacy / deletion request”. If the request concerns a crash, include the approximate time, app version and headset model if known. Do not send your Meta credentials. Because we do not deliberately attach your account identity to reports, we may need additional information to locate a report and may be unable to identify one from your name alone. We do not collect extra identifiers solely to make you identifiable. We will explain what can be located and deleted and any lawful retention exception.

Where GDPR applies, you may request access, correction, erasure, restriction and data portability where applicable; you may object to processing based on legitimate interests. You can also complain to a supervisory authority, including the authority where you live or work. These rights are subject to their legal conditions. We do not make automated decisions that produce legal or similarly significant effects about you.

Changes

We will update this notice and its date when our processing changes. New collection purposes or features must be disclosed before being introduced.