Privacy notice for the Kashmeta campus
Version 2026-10 · applies to the Kashmeta web campus, the Meta Quest app and the teacher portal. Our general privacy policy for the Quest app and kashmeta.io also applies.
Kashmeta SMC Private Limited ("Kashmeta", "we") runs the Kashmeta Metaverse Medical Campus, a simulated hospital for healthcare training. When a university uses the campus for its courses, the university decides what the campus is used for and Kashmeta processes students' data on its behalf. This notice explains what we keep, why, where, for how long, and what you can do.
No real patients
Every patient, case and AI character in the campus is fictional. Teachers who edit cases must confirm the case is fictional, and the editor refuses text that looks like real patient identifiers (record numbers, ID card numbers, phone numbers, e-mail addresses or dates of birth). Please never type real patient information into the campus.
Guests and signed-in users
You can explore the campus as a guest without an account. Signing in (with a Google or Microsoft university or work account, or with your e-mail address and a password, through Google Cloud Identity Platform) is only needed for classes, assignments, grades, certificates and saved progress. Kashmeta never sees your password: Google's Identity Platform keeps it, and sends the e-mails that confirm your address or reset your password. Everyone accepts the Community Rules when they sign in.
Free demo, plans and requests
To give every visitor a free demo, the campus keeps a random visitor number in your browser (local storage) and, on our server, how many demo minutes it has used, when it last visited, its time zone and language, a one-way hash of its network address (to stop invite abuse; never the address itself), whether it came through an invite link, and its plan if it has one.
| Data | Why | How long |
|---|---|---|
| Visitor number, demo minutes used, plan, your invite code and how many friends joined through it, and your 0 to 10 answer if you rate the campus | The free demo, Pro access and invite rewards | 400 days after the last visit |
| What you send with a request: name, e-mail, phone or WhatsApp number, institution, role, number of students, payment reference, your message | Confirming payments and answering quotes, pilots and questions; the request keeps your visitor number so your campus can unlock itself | As long as the request and our accounting records need it; ask us to delete it |
| E-mail address or WhatsApp number you leave for extra demo minutes | News about new simulations, classes and offers, which you asked for | Until you ask us to stop |
| Daily totals (visits, demo ends, plan views, requests, payments) without names | Knowing how the campus is used | Kept as statistics |
Online payments (card, PayPal, Apple Pay, Google Pay) happen on our payment provider's checkout page: Kashmeta never receives card numbers. The provider tells us the amount, your e-mail address and the reference of your campus browser, so the campus can unlock by itself; the provider handles your payment details under its own privacy policy. Bank transfers and other manual payments are checked by our team with the reference you send.
What we keep when you sign in
| Data | Why | How long |
|---|---|---|
| Name, e-mail address, organisation, role (student, teacher, reviewer, administrator) | Your account, and so your teachers know who you are | Until you or your university deletes the account |
| Signed-in devices (browser or headset name, when it was last used) | Keep you signed in; you can sign devices out yourself | 14 days (browser), 180 days (headset) |
| Saved progress (best scores, practice question history, avatar choice) | Continue on any device | Until the account is deleted |
| Activity results (score, time taken, mode, device type) | Assignments, your teacher's gradebook and your own history | 2 years (your university can set less) |
| Attendance of scheduled sessions (minutes present) | Attendance records for your class | Until the account or class is deleted |
| Learning records (xAPI statements: launched, completed, passed, attended) | Your university's learning records and reports | 2 years |
| Study answers (before/after test, survey) if you agree to take part in a study | Measuring whether the campus helps learning | Until the study ends and the account is deleted |
| Audit log of administrative actions (no learning content) | Security and accountability | 400 days |
Safety reports and certificates
| Data | Why | How long |
|---|---|---|
| A report you make about someone, or someone makes about you: who reported whom (name, account or guest number), the reason, the note, the place and the time | Keeping the campus safe. A copy goes by e-mail (Gmail) to the safety contact, and moderators read it in the portal | 400 days |
| Moderator actions: removal from the campus, suspension or ban, with the reason and who decided | Keeping people out who broke the Community Rules, and fairness if you ask us to check a decision | Kept as a safety record; your name is removed from it when your account is deleted |
| Certificates: your name, the activity, your score and the date | Proving what you passed. Anyone with the certificate link can check it, and you can add it to LinkedIn | Until you delete your account |
Optional: attention analytics
Only if you switch on Share progress with teacher in the campus, the app sends where your headset (or camera) is facing during lectures and cases, summarised into 10-second windows, so your teacher can see whether the class is following. No audio, video or eye images are recorded. You can switch it off at any time; it is kept for 180 days.
Your university's learning system (Moodle)
If your course opens Kashmeta from Moodle (LTI 1.3), Moodle tells us your name, e-mail, course and role, and Kashmeta sends your activity grades and attendance back to the course gradebook. Grades in Moodle are kept under your university's rules.
Where your data is stored
On Google Cloud in the us-central1 (Iowa, USA) region: Firestore for records, Cloud Run for the service, Secret Manager for keys. Data is encrypted at rest by Google and in transit with HTTPS. Multiplayer movement and voice pass through Photon (Exit Games GmbH) to connect people in the same session; Photon does not receive your account, grades or progress. AI characters answer through Google Cloud AI services. If you pay online, the payment provider named on the checkout page processes the payment.
Your rights and choices
- Download your data and delete your account yourself on My account. Deleting removes your account, progress, results, certificates, attendance, study answers, learning records, attention analytics, the campus browsers linked to your account and the requests you sent while signed in. Safety reports and moderator actions stay, without your name. Grades already sent to Moodle stay with your university.
- Sign out any device from the same page.
- Ask your university or us (team@kashmeta.io) to correct or delete your data, or about anything in this notice.
- Taking part in a study is optional and does not affect your grades. You can decline in the campus portal.
Contact
Kashmeta SMC Private Limited · team@kashmeta.io
We will change the version at the top when this notice changes, and ask signed-in users to read the new version.