The short version: VRL Cam does not collect, store, sell, or transmit any personal data to VTOKU for its own use. There are no accounts, no analytics, no ads, and no third-party tracking. Almost everything the app does happens on your device or on your own local network. The one exception is VRL Link — an optional feature you turn on that relays a live stream through our authorization server and a third-party real-time service; it carries only the stream you choose to send, and only while you have it running (see section 7).
1. Who we are
VRL Cam ("the app") is developed and published by VTOKU LLC ("VTOKU", "we", "us"), based in Honolulu, Hawai‘i, United States. This policy explains how the app handles information. You can reach us at support@vtoku.com.
2. Data we collect
None for our own use. The app contains no analytics SDKs, advertising SDKs, crash-reporting services, or tracking technologies, and we build no profile of you. Apple's "App Tracking Transparency" does not apply because the app does not track you across other companies' apps or websites, and the app's bundled privacy manifest declares no tracking domains.
We operate one server — the VRL Link authorization service — and it is used only when you turn VRL Link on. It receives a random per-install identifier the app generates (not tied to your name, Apple ID, or device serial) and Apple's signed proof that the app is a genuine install, solely to issue a short-lived access credential for the live-streaming session and to rate-limit abuse. We do not use this to identify you, and it is not sold or shared for advertising. See section 7 for the full picture.
3. How your content and device data are used (on-device only)
To do its job, the app accesses the following on your device. This information is processed locally and in real time; it is not uploaded to us.
| Permission | Why the app asks | Where it goes |
|---|---|---|
| Camera | ARKit world tracking uses the camera to determine the device's position and orientation, and to composite your avatar into the live view. | Processed on-device. The camera image is only sent off the device if you turn on NDI, a stream (SRT / VRL Link / VDO.Ninja), or recording (see below). Face capture with the front (TrueDepth) camera is covered in section 4. |
| Microphone | Records audio together with your video takes when you choose to record. | Saved into your recording on-device. Not transmitted to us. |
| Add to Photos | Saves the video takes you record to your photo library. | Stored in your own Photos library on your device/iCloud, under your control. |
| Local Network | Sends and receives camera tracking, motion-capture, audio, and video (VMC/OSC, FreeD, NDI, iFacialMocap) with other apps and devices you choose on your network. | Stays on your local network, sent only to the destinations you configure (for example your computer running Warudo). This traffic does not traverse our servers. |
| Internet (streaming) | Optional outbound streaming you switch on: SRT to a server you specify, or VRL Link / VDO.Ninja to send your camera and avatar to a browser or receiver over the internet. | SRT goes only to the address you enter. VRL Link and VDO.Ninja carry the live stream through a third-party real-time relay (LiveKit); VRL Link also contacts our authorization server first (see sections 2 and 7). Nothing is streamed until you enable it. |
4. Face data (TrueDepth camera) and depth data
What is collected. If you enable face capture, the app uses Apple's ARKit face tracking on the front (TrueDepth) camera to derive, on your device, up to 52 numeric expression values (for example, how far the jaw is open or an eyelid is closed) together with the position and rotation of your head. The app never receives a photograph, video, depth map, or 3-D scan of your face from this process, and the numeric values cannot be used to identify you. Face capture is off by default and runs only while you have it switched on.
What it is used for. One purpose only: animating your virtual avatar's facial expression in real time while you use the app. Face data is not used for authentication or identification, not used for advertising or analytics, and not used to train machine-learning models.
Storage, retention, and deletion. The expression values are processed in memory frame by frame and discarded immediately; they are never written to disk, never stored, and never retained after the frame is rendered. Because nothing is kept, there is nothing to delete. Videos you record contain the rendered avatar — not your face data and not the front-camera image.
Sharing. Face data is never sent to VTOKU and is never shared by us with any third party. If you enable a motion-capture sender (VMC/OSC or iFacialMocap), the numeric expression values are transmitted — at your direction — to the software you configure on your own local network (for example Warudo on your computer), as described in section 7. VRL Link and the other streams carry the rendered video image of your avatar, not your face data.
Rear depth (LiDAR). On devices with a LiDAR scanner, the app also reads rear-camera scene depth to place the avatar in the room, handle occlusion, sample the floor, and calibrate focus. Like face data, scene depth is processed on-device in real time, never stored, and never transmitted.
5. Avatars and recordings are yours
VRM avatar files you import, motion data you receive, and video takes you record are stored locally on your device and remain under your control. We have no access to them. Deleting the app, or removing files through the Files and Photos apps, removes that content from your device.
6. Settings
The app saves your preferences (such as connection addresses, ports, and toggle states) in the device's standard local settings store so they persist between launches. These settings stay on your device and are not sent to us.
7. Network streaming, explained
On your local network. VRL Cam is a tool for sending camera and avatar data to other software you run. When you enable a sender (VMC/OSC, FreeD, NDI) or discovery (NDI, iFacialMocap), the app communicates with devices on your local network using the addresses you specify or that are discovered on your LAN. We never see this traffic. What the receiving software (for example Warudo) does with the data is governed by that software's own privacy practices, not ours.
Over the internet (VRL Link and VDO.Ninja). VRL Link is an optional feature that lets you send your camera and avatar to a browser or receiver that isn't on your local network. To make that work, two things happen, and only after you turn the feature on:
- Authorization. The app contacts our authorization server (operated by VTOKU on Fly.io) to obtain a short-lived access token for the session. The request includes a random per-install identifier the app generates and Apple's signed proof that the app is genuine. We use these only to issue the token and to rate-limit abuse; server logs store only a salted, one-way hash — never your raw IP address or a reversible identifier — and are not used to build a profile of you or shared for advertising.
- The stream itself. Your live video, audio, and avatar data flow through a third-party real-time media service (LiveKit) that relays them to the people you share your room link with. This is a live relay: the media is not recorded or retained on the relay after the session, and we do not have access to its contents. LiveKit's handling of the transit is governed by its own privacy policy. VDO.Ninja (WHIP) works the same way through its real-time service.
If you never enable VRL Link or VDO.Ninja, the app never contacts our authorization server or any streaming relay, and none of your data leaves your device or local network by these paths.
8. Children's privacy
The app is rated 4+ and is suitable for general audiences. Because it collects no personal data, it collects none from children. It is not directed at children for the purpose of data collection.
9. Purchases
VRL Cam offers optional in-app purchases. Purchases are handled entirely by Apple through the App Store. VTOKU does not process payments and does not receive your name, card, or billing details. Apple's handling of your purchase is governed by Apple's privacy policy. We only see anonymous, aggregate sales information that Apple reports to all developers, which does not identify you.
10. Third-party software
The app includes third-party libraries (for example the NDI SDK and open-source components) that run entirely on-device as part of the app and do not phone home to us. The optional VRL Link and VDO.Ninja streaming features additionally use a third-party real-time media service (LiveKit) that carries your stream only while you have streaming turned on, as described in section 7. Trademarks such as Warudo, NDI, VMC, VRM, and LiveKit belong to their respective owners; their inclusion does not imply endorsement. See Acknowledgements.
11. Your rights
Because we do not collect or hold any personal data about you, there is no personal data for us to access, correct, export, or delete on your behalf. You remain in full control of the content on your own device. If you have questions about your rights under laws such as the GDPR or CCPA, contact us and we will help.
12. Changes to this policy
If we change this policy, we will update the date at the top of this page and post the revised version here. Material changes will be reflected in a future app update's notes where appropriate.
13. Contact
Questions about this policy or the app's privacy practices? Email support@vtoku.com or use our contact form.
VTOKU LLC