XPPanelsVR Privacy Policy

Updated November 3, 2026 for XPPanelsVR 2.0. Privacy contact: AldoApps, aldoapps@gmail.com.

Scope

This policy describes the current XPPanelsVR app and its local display-bridge workflow. The app has no account system, advertising SDK, tracking SDK or publisher-operated analytics/upload service. It does not automatically send your panels, cockpit activity, display images or hand-tracking data to AldoApps. This does not mean it makes no network connections: it communicates with the simulator and endpoints you configure.

Information on the Headset

The app stores your panel designs, command/dataref mappings, simulator address and ports, cockpit placement/scale, display visibility and preferences in its local app storage. Temporary runtime state includes received simulator values, streamed images and interaction state. Diagnostic messages can include network endpoints, dataref names, values and errors; the operating system controls console-log retention.

Embedded simulator web views use a nonpersistent website data store. Their pages and images are processed to display the configured service. Closing the view ends that web session. XPPanelsVR does not create a persistent recording of streamed displays. Device backups and exports may create separate copies according to your system settings and selected file provider.

Panel exports are portable configuration files, not a secure vault. The package format uses a shared application key, not a private user password; do not rely on it to protect secrets. Copying panel items uses the system clipboard, which may be shared with your other devices under system settings.

Network Communication

Local Network access connects your headset directly to your configured simulator computer for commands, readings and display streams. This traffic is not routed through an AldoApps cloud service. The computer receives your network address and requests. The local UDP and HTTP protocols do not add transport encryption or cryptographic authentication in XPPanelsVR, so use a trusted private network with devices you control and no port forwarding. A private network limits exposure but is not an encryption guarantee. See the network setup guide.

The companion bridge captures selected simulator instrument and ISCS windows. Optional Outside View shares the selected simulator source; Companion's local control preview can show the selected whole display, so keep private information off that display. Optional simulator audio streams X-Plane application sound, not a microphone recording. Sharing and source selection are controlled on the computer. Stop sharing to disconnect viewers. Computer-side logs and saved source assignments can include window titles, identifiers, network addresses and technical errors. These are computer captures, not headset camera streams. Consult the matching Companion privacy notice for source selection, permissions and session approvals.

Optional ISCS interaction sends the selected source identity, picture ticket and tap coordinates to your Companion. With session approval and the required computer permissions, it moves the computer's mouse pointer and clicks the selected simulator window. This is real desktop input; do not use it on private or unrelated windows. Stop ISCS sharing to revoke input. SETUP and cockpit controls send simulator commands and values to your configured computer. Offline Cockpit uses local demonstration state without sending those control actions to X-Plane.

Experimental Foveated Streaming

Foveated Curved Screen is an optional connection through Apple's FoveatedStreaming framework and the compatible Windows CloudXR endpoint you select. visionOS manages pairing, stream presentation and privacy-sensitive foveation processing. This is separate from the ordinary HTTP video and UDP control services; approving a foveated stream does not secure those other services.

The system streaming session exchanges rendering/pose and connection information with the selected endpoint in real time. System-supported input sharing depends on the visionOS version, endpoint capabilities and your authorizations. On visionOS 27 the app requests no optional foveated input capabilities. The app does not expose or record a raw eye-tracking feed. Only pair with a computer you trust, review the system authorization prompts and the sender/runtime notices, and disconnect the foveated session to stop that stream. See Apple's explanation of foveated streaming.

User-configured web services may have their own logging, cookies, scripts and privacy policies. External support, source and license links open only when selected and are governed by the destination provider. Do not load an untrusted server or enter sensitive information into simulator web content.

Hands, Head Position and Passthrough

With your permission, hand-joint positions are processed locally to detect cockpit touches, pinches and hand-flight control movement. Head/world tracking positions the cockpit and supports seat resets. The app's ordinary cockpit interaction code sends resulting simulator actions and axis values, not a recorded hand-pose history. Stored cockpit placement is distinct from a recording of your movements. The optional system foveated session has the separate data flow described above.

Gaze targeting and highlights are mediated by visionOS. The app does not receive a raw eye-tracking stream. Passthrough is composed by visionOS: the app does not receive or record raw camera images, room video or microphone audio. It does not request camera, microphone, location, photo-library or contact access.

Your Choices and Deletion

You can revoke Local Network or Hand Tracking permission in visionOS Settings. Local Network is necessary for simulator communication. Choose Hand Touch, Glance & Pinch, or both in the cockpit interaction preferences. End Session stops headset streams, tracking and simulator communication; closing only the immersive view may leave the app's other connections active. Disconnect foveated streaming separately when testing that transport. Stop Companion sharing on the computer to revoke its session approvals. Ending the headset session does not pause or quit X-Plane.

Remove XPPanelsVR from the device to remove its local app data; offloading alone may retain data. Delete exported panels and backups separately in their storage provider. Computer-side bridge logs and assignments remain on the computer until removed there. There is no XPPanelsVR cloud account or publisher-hosted panel store to delete.

Support Correspondence

Emailing support shares your email address, message and any attachments you choose to send with AldoApps and the email providers involved, including Gmail for the support inbox. These are used to investigate and respond to your request. No log or screenshot is attached automatically. Avoid sending personal cockpit recordings, activation keys or passwords. You may ask for access, correction or deletion of support correspondence; retention necessary for unresolved claims or legal obligations may still apply.

Support records are kept only as needed to handle the request and relevant obligations. Apple separately handles App Store transactions, system permissions and any system analytics you choose to share under Apple's policies. Those services are not operated by XPPanelsVR.

Changes and Questions

The date above identifies this policy version. Material changes to data handling require an updated policy and, when required, new consent. Contact aldoapps@gmail.com with privacy questions or requests.