Privacy Policy

Last updated: 15 August 2026 · Anwar Studio Official

The short version. Vista Pictures VR has no servers. We do not collect, transmit or store any of your data. Your pictures, models, HDRI maps, network passwords and cloud sign-ins stay on your headset.

There is no analytics, no telemetry, no advertising and no account to create. When the app talks to the network it talks only to servers you chose — your own NAS or PC, the cloud provider you signed in to, or Poly Haven when you search it.

1. Who we are

Vista Pictures VR is developed by Anwar Studio Official. Questions about this policy, or about your privacy, go to psopala93@gmail.com — a real person reads them.

2. What we collect

Nothing. Vista Pictures VR operates entirely on your device. We run no backend, we have no database, and we receive no data from the app — not your files, not their names, not usage statistics, not crash reports, not an identifier of any kind.

3. What stays on your headset

To do its job, the app stores the following locally, in its own private storage. None of it ever leaves the device.

Data	Why it exists	How it is protected
Thumbnails and previews	So a folder of 8K skies scrolls smoothly instead of decoding every map again. Generated from your own files, on your device.	App-private cache. Clear it at any time in `Settings → Clear cache`.
Network connections (SMB, FTP, SFTP, WebDAV): host, username, password	So a saved server reconnects without retyping the password.	Passwords are encrypted with a key held in the Android Keystore — hardware-backed, and unusable outside this app on this device.
Cloud sign-in tokens (Google Drive, Dropbox, OneDrive)	So you stay signed in between sessions.	App-private storage, readable only by this app. Sign out at any time to delete them.
Preferences and viewer settings	Sort order, favourites, and the lighting, colour and passthrough settings you chose.	App-private storage.
Sample images	The pictures included with the app, unpacked on first run so there is something to look at before you copy anything across.	App-private storage. They are ours, not yours, and contain no data about you.

Uninstalling the app removes all of it.

4. Files on your device

Vista Pictures VR requests broad storage access because that is what a file viewer is: it has to see your pictures, models and maps in order to show them. It reads files only when you ask it to, and it writes only in two cases — downloads you start yourself, and its own cache. It never scans your files for content, never indexes them anywhere but on the device, and never uploads them anywhere.

5. Network connections

The app connects only to addresses you enter yourself — your NAS, your PC, your server. Your credentials are sent to that server and to nobody else. Some protocols (FTP, WebDAV over plain HTTP) are unencrypted by design; that is a property of the protocol and of the server you chose, not of this app. Use SFTP, SMB, or WebDAV over HTTPS if you need the connection itself protected.

6. Google Drive

If you connect Google Drive, the app uses the drive.file scope. This is the narrowest scope Google offers: the app can only see the files you specifically pick in Google's own file picker. It has no view of the rest of your Drive.

Vista Pictures VR's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

Drive content is used only to provide the file-viewing and transfer features you asked for, on your device.
Drive content is never transferred to us or to any third party, and is never used for advertising.
No human at Anwar Studio Official reads your Drive content, and we have no ability to.

Revoke access at any time from your Google account permissions page, or by signing out inside the app.

7. Dropbox

If you connect Dropbox, the app requests access so you can browse and open your Dropbox from inside the headset. That access is used for nothing else: files are read on your device, at your instruction, and are never sent to us. Revoke access at any time from Dropbox connected apps, or by signing out inside the app.

8. OneDrive

If you connect OneDrive, the app requests access so you can browse and open your files from inside the headset, on the same terms: read on your device, at your instruction, never sent to us. Revoke access at any time from your Microsoft account privacy settings, or by signing out inside the app.

9. Poly Haven

The app can search Poly Haven, a public library of free, CC0-licensed HDRI maps, models and textures. This is the only third-party service the app contacts on its own, and it does so only while you are using the search screen.

What is sent: the catalogue request and, when you download something, the request for that file. Along with it goes an identifying User-Agent (VistaPicturesVR/1.0.0 (Meta Quest)), which names the app and nothing else. Poly Haven asks for this so their traffic is identifiable; it contains no data about you.
What is not sent: no account, no identifier, and no information about your files or your device beyond the app name above.
What comes back: the catalogue, and the file you chose, saved to your Downloads folder.

Poly Haven's own handling of requests is governed by their terms. We have no account with them and receive nothing from them about you.

10. Permissions, in plain terms

Permission	What it is for
All-files access	Finding and opening the pictures, models and HDRI maps on your headset. This is the app's core function.
Internet & network state	Reaching the network shares and cloud accounts you connect to, and searching Poly Haven when you open that screen.
USB host	Reading external drives you plug in.
Foreground service (data sync)	Keeping a long download running while the headset is idle.
Notifications	Showing download progress.
Wake lock	Preventing the headset from sleeping in the middle of a transfer.

11. Passthrough, sensors and camera

Vista Pictures VR offers passthrough, so your own room can show through behind whatever you are viewing. It is worth being precise about what that does and does not mean.

The app never receives camera images. On Meta Quest, passthrough is drawn by the system compositor: the app asks the system to show a passthrough layer, and the system draws it. No camera frame, still or moving, is ever delivered to the app, so there is nothing for the app to read, store or transmit. This is enforced by the platform, not merely by our own code.

Beyond that, the app uses no microphone, no hand-tracking data, no eye-tracking data and no other sensor except the head and controller tracking the system needs in order to draw the scene and accept your input. None of it is recorded or transmitted.

12. Children

Vista Pictures VR is a utility, is not directed at children, and collects no data from anyone — children included.

13. The platform

Vista Pictures VR is distributed through the Meta Horizon Store. Meta's own handling of your data is governed by the Meta Privacy Policy and is outside our control. We receive nothing from Meta beyond anonymous, aggregate store statistics.

14. Your rights and data deletion

Since we hold no data about you, there is nothing for us to export, correct or delete, and no request you need to make of us. Everything the app stores lives on your headset:

Clear thumbnails and cached media in Settings → Clear cache.
Delete a saved connection, or sign out of a cloud account, inside the app.
Uninstall the app to remove all of it at once.

If you are in the EEA or the UK, this means there is no personal data for which we act as a controller. Should you believe otherwise, write to us at the address below and we will answer.

15. Changes to this policy

If this policy changes, the date at the top changes with it, and a material change will be noted in the app's release notes. Since we collect nothing, changes should be rare.

16. Contact

Anwar Studio Official
psopala93@gmail.com