Last updated: 7 June 2026
This Privacy Policy describes how Kibioniks LLP, trading as Cybionyx ("we", "us", "our"), handles information in connection with the CYBIONYX InMotion application (the "App") and the website inmotion.cybionyx.space (together, the "Service").
CYBIONYX InMotion streams your computer's screen to your Meta Quest headset over your own local network (Wi‑Fi) or a direct USB cable. The streaming itself (your screen, your system sound, and your controller and head input) happens entirely between your own devices and never reaches us: we operate no servers that receive, relay, or store it. The App contains no analytics, advertising, tracking, or crash-reporting tools, and we do not build a profile of you. Beyond your local network there are only two limited connections, both described in section 2: the Quest app confirms your purchase with Meta, and the Windows desktop app checks our server for updates. Neither sends us your screen, audio, or input. Apart from those two connections, the App does not automatically send personal data to us, sell it, or share it for advertising or tracking, and we operate no Cybionyx account, login, or password.
Our website, our download/update server (dist.cybionyx.space), and our domain are all provided through Cloudflare (Cloudflare Pages, R2 storage, and DNS). As the provider that hosts and delivers these services for us, Cloudflare necessarily processes basic connection data, such as your IP address, request details, and timing, at its edge in order to deliver content and protect the services. Cloudflare acts as our processor for this; its handling is governed by Cloudflare's privacy policy.
The website also uses Cloudflare Web Analytics, a cookieless analytics service, to understand general interest in the product. As Cloudflare describes it, Cloudflare Web Analytics does not use any client-side state, such as cookies or localStorage, to collect usage metrics, and does not "fingerprint" individuals via their IP address, User Agent string, or any other data for the purpose of displaying analytics. It does not track you across other websites or build a profile of you, and records only aggregate, non-identifying measurements: visits, page views, page-load performance, the site that referred you, your browser and operating system, and your approximate country. It sets no cookies and stores nothing on your device. The App itself uses no analytics of any kind.
To make streaming work, the App processes the following on your own devices. Your screen, audio, and input flow only directly between your PC and your headset over your local network or USB cable; the rest is stored locally on the device. The streaming data never reaches us:
Apart from your one-time purchase verification with Meta (section 2) and any logs you choose to send us for support (section 8), none of this data leaves your devices or is accessible to us. The installation identifier and your local settings are strictly necessary to operate features you have requested (such as pairing and your preferences), are never transmitted to us, and are not used for tracking or analytics.
There are only two situations in which the App communicates outside your own local network, and neither involves your screen, audio, input, or any profile of you:
Purchase verification (Meta Quest app). The Quest app is sold through the Meta Horizon Store. To confirm you are entitled to use it, the app asks Meta, through Meta's official on-device software (the Meta Platform SDK), whether your Meta account owns the app. This uses your existing Meta account and needs an internet connection the first time; the result is then remembered on your headset so it need not repeat every launch. This verification happens directly between your headset and Meta: no information about it is sent to us, and we receive no payment, account, or contact details. Meta's handling of your account is governed by Meta's privacy policy.
Software updates (Windows desktop app). So that you automatically receive fixes and security updates, the Windows desktop app periodically checks our update server (dist.cybionyx.space, hosted on Cloudflare) for a newer version. Making that check necessarily reveals your device's IP address and basic technical details of the request (the app version, your operating system, the files requested, and standard request headers) to Cloudflare as the provider that operates the server for us. We use this only to deliver the correct update; we do not use it to identify you, track you across sites, or build a profile, and we do not combine it with other data. We use any server-side request logs we control only for security and reliability. The macOS desktop app does not check for updates automatically. Advanced users can turn the Windows check off (set the environment variable CYBIONYX_UPDATES_DISABLED=1), though we recommend leaving it on so you keep receiving security fixes.
The App requests only what local streaming needs:
We do not request microphone, camera, location, or contacts access on any platform.
Almost everything the App handles is processed on your own devices and never reaches us, so for that activity we do not act as a data controller in the ordinary sense. Where we do process limited personal data, our legal bases under the EU GDPR and UK GDPR are: performance of a contract, verifying your purchase so we can provide the App you acquired; our legitimate interests, keeping the software secure and up to date, measuring aggregate interest in the product through cookieless analytics, and protecting against unlicensed use, balanced against your rights and freedoms; and your consent, where we ever specifically ask for it.
We do not sell, share, or rent your personal data, and we do not track you across websites or over time; because the App performs no tracking, it does not respond to browser "Do Not Track" signals. While the App does not automatically send us data about you, the providers and platforms involved handle data under their own policies, which we do not control: Meta (Horizon Store and Quest, including purchase and entitlement), Cloudflare (our hosting, content delivery, DNS, update server, and cookieless website analytics), and your computer's operating system. These providers are based in the United States and may process data there or in other countries; such transfers rely on their own safeguards, such as the European Commission's Standard Contractual Clauses. Kibioniks LLP is established in Kazakhstan; where we receive any personal data (for example, brief update-server logs), it may be processed there. Payments, if any, are processed entirely by Meta under Meta's terms; we do not receive or process payment information.
Depending on where you live, you may have the right to access the personal data we hold about you and to have it corrected, deleted, restricted, or ported, to object to processing, and to withdraw any consent. Because we hold almost no personal data about you, there will often be little or nothing for us to act on, but you can exercise these rights, free of charge, by emailing inmotion@cybionyx.space, and we will respond as the law requires. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data-protection supervisory authority (in the UK, the Information Commissioner's Office). We will not discriminate against you for exercising any of these rights.
In the past 12 months we have not sold or "shared" (as the California Consumer Privacy Act uses those terms) any personal information, and we do not do so. The App is designed not to automatically send personal information to us; the only personal information we may handle is limited internet and identifier data in update-server request logs and aggregate, non-identifying website-analytics measurements, used solely for security, reliability, and understanding general interest. California residents have the right to know, delete, and correct personal information, to opt out of its sale or sharing (which we do not do), to limit the use of sensitive personal information (which we do not collect), and not to be discriminated against for exercising these rights. To make a request, email inmotion@cybionyx.space.
Diagnostic logs stay on your device, and the App never uploads them. The desktop app's "Open Logs" button opens the local logs folder on your computer so you can find the files. If you choose to send us logs (for example, by email) so we can help with a problem, we will receive whatever those files contain, which may include technical details such as your device or computer name, local network (IP) address, file paths (which can include your computer account name), performance metrics, and error messages. We use anything you send only to diagnose and resolve your issue, and we delete it when it is no longer needed for that purpose. Sending logs is entirely optional.
The on-device data described above is stored only on your own devices, under your control. You can remove it at any time by unpairing your devices in the App, or by uninstalling the App from your headset and PC, which deletes local settings, pairing keys, logs, and the purchase-verification record. Because we hold no copy of that data, there is nothing for us to delete on our side. The only data we may hold is the update-server and analytics log data described above (used only for security, reliability, and aggregate analytics), and anything you voluntarily send us for support, which we delete when no longer needed. If you have any questions, contact us at inmotion@cybionyx.space.
The Service is not directed to children, and the App does not automatically send us personal data about anyone, including children. The minimum age to use online services without parental consent varies by country (in the EU/EEA it is between 13 and 16), and you must meet the minimum age set by the law of your jurisdiction. We do not knowingly collect personal data from children; if you believe a child has provided us personal data, contact us and we will address it.
Pairing begins with a one-time PIN and a Diffie–Hellman key exchange (X25519), and every message between your PC and headset is authenticated with HMAC-SHA256 to detect tampering; the key that lets your devices reconnect is encrypted while it travels between them (AES-256-GCM). The resulting pairing keys are then stored locally on each device and never leave them. Because pairing and streaming work only over your own local network or a direct USB cable, your screen and audio never travel over the public internet, and a stored key is not useful by itself without access to your local network and device context. As with any desktop software, we recommend protecting your devices with your operating system's normal account and device protections.
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date. If we make material changes to how we handle your data, we will provide prominent notice and, where required by law, obtain your consent before those changes apply to you.
The Service is provided by, and the data controller is:
Kibioniks LLP (Limited Liability Partnership "Kibioniks"), trading as Cybionyx
Registered office: Office 30, Building 17, Saryarka Avenue, Saryarka District, Astana 010000, Kazakhstan
Business Identification Number (BIN): 220440050927
Email: inmotion@cybionyx.space
If you are in the EEA or UK and wish to contact us about data-protection matters, please use the email above.