BioSuite Virtual Privacy Policy

1. About This Policy

This Privacy Policy applies to the BioSuite Virtual virtual reality application for Meta Quest headsets (the "App"), published by Prism Immersive ("we," "us," or "our"). It explains what information the App collects, how we use it, who we share it with, and how you can have it deleted. The App is the headset component of the BioSuite Virtual training platform; your use of the wider platform and website is also governed by our platform Privacy Policy.

2. Information the App Collects

BioSuite Virtual is used as part of instructor- or institution-managed training. To record your training, the App must be paired to your BioSuite Virtual account using a short-lived, single-use pairing code shown in your account. Once paired, the App collects and transmits the following to the BioSuite Virtual platform:

• Training module progress and completion status
• Knowledge-check responses and scores
• Credentialing assessment responses and results
• Time-on-task, per-step timing, and session duration
• Session and headset device identifiers used to associate a training session with your account

Your name, email address, and institutional affiliation are collected when your account is created on the BioSuite Virtual website — not by the App itself — and the data above is linked to that account. If your institution provides BioSuite Virtual through a learning management system such as Canvas, your account is instead created from information your LMS sends us; see Section 3.

Information the App Does Not Collect

The App does not collect, store, or transmit:

• Biometric data, including eye-tracking, facial-expression, or hand-tracking data
• Spatial, room-mapping, or environment data
• Microphone audio, voice recordings, or camera imagery
• Precise location data
• Advertising identifiers — and we do not use the App for advertising

3. Learners Who Access BioSuite Virtual Through a Learning Management System (Canvas / LTI)

Many institutions provide BioSuite Virtual through their own learning management system (LMS), such as Canvas, using the LTI 1.3 standard. If you launch BioSuite Virtual from inside your school's LMS, information is exchanged directly between your LMS and BioSuite Virtual, and this works differently from a standalone account.

Information your LMS sends to us

When you launch the App, your LMS sends BioSuite Virtual a signed launch message so we can create or recognize your account and place you in the correct course. This typically includes:

• Your name
• Your email address
• A stable user identifier assigned by your LMS
• Your role in the course (for example, student or instructor)
• Course context, such as the course title and a course identifier

We use this information only to authenticate you, create or link your BioSuite Virtual account, associate your VR training with the correct course, and enforce your organization's seat licensing. Because your LMS is the identity provider for these launches, we do not receive or store a password for you. We also store identifiers that link your LMS identity to your BioSuite Virtual account and that map your LMS course to a BioSuite training group, so that launches and grade reporting continue to work on later visits.

Grades we send back to your LMS

When you complete or pass a credentialing assessment, BioSuite Virtual sends your score back to your LMS gradebook using the LTI Assignment and Grade Services (AGS) standard, so your result appears in your course. Your assessment results are therefore shared with your institution through your LMS. We send only the numeric score for the relevant assignment — we do not send your detailed per-question responses to your LMS.

Your institution's role

When you access BioSuite Virtual through your LMS, your participation is part of your institution's relationship with you. Your institution administers your LMS account and can view your progress and results. You may direct requests to access or delete your data to your institution as well as to us (see Section 8, "How to Delete Your Data").

4. How We Use Your Information

We use the information the App collects only to deliver the training service:

• Record and display your training progress to you and your instructor
• Administer knowledge checks and credentialing assessments
• Issue and manage the professional credentials you earn
• Maintain, secure, and improve the App

We do not sell your personal information, and we do not use it for advertising or profiling.

5. How Your Information Is Shared

• Your institution: Instructors and administrators in your organization can view your progress, scores, and credential status as part of the educational relationship.
• Your learning management system: If you launch BioSuite Virtual from an LMS such as Canvas, we exchange identity and grade information with that system, as described in Section 3.
• Credentialing authority: When you pass a credentialing assessment, we notify the designated credentialing authority with your name, email, and pass status.
• Service providers: We use vetted processors (for example, email delivery) that handle data on our behalf under confidentiality obligations.
• Legal requirements: We may disclose information where required by law, regulation, or legal process.

We do not sell your personal information.

6. Data Storage & Security

Data collected by the App is transmitted over encrypted HTTPS connections to the BioSuite Virtual platform. Pairing codes are short-lived and single-use, and the access tokens issued to a headset are cryptographically random and stored only in hashed form. We protect platform data with industry-standard measures, including Argon2id password hashing, prepared SQL statements, output escaping, and access controls scoped to your organization.

7. Data Retention

We retain training and credential records for as long as your account is active or as required by your institution's data-retention policies, after which the data is securely deleted or anonymized.

8. How to Delete Your Data

You can request deletion of your personal data at any time:

• Self-service: Sign in to your BioSuite Virtual account on the website, where you can export or delete your data from your profile's privacy settings.
• By email: Contact us at the email address below and we will delete your personal data, subject to any retention your institution requires for academic records.
• Through your institution: Your instructor or organization administrator — or, where your access is managed through an LMS, your institution — can also remove your account.

Uninstalling the App from your Meta Quest headset removes the App and any locally stored settings from the device.

9. Children's Privacy

BioSuite Virtual is intended for higher-education students and professionals. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has used the App, please contact us so we can remove the information.

10. The Meta Quest Platform

The App runs on Meta Quest hardware and is distributed through the Meta Horizon Store. Meta's own collection and use of data through your headset and account is governed by Meta's privacy policy, not this one.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date above reflects the latest revision, and material changes will be communicated through the platform.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, or to request deletion of your data, please use the contact email below.