Privacy Policy
Last updated 30 September 2026 · Version 2026-09-30
This policy explains what personal data Reality ASM collects, why, and what you can do about it. Plazmonix AI is the data fiduciary / controller for this data. We wrote it to be read, not to hide things.
What we collect
| Data | Why | Kept for |
|---|---|---|
| Name, email, password (stored only as a salted scrypt hash) | To create and secure your account | Until you delete your account |
| Google account ID, name and email (only if you sign in with Google) | To sign you in | Until you delete your account |
| Session records: when you signed in, browser user agent | To keep you signed in and spot misuse | Up to 30 days per session |
| Your saved history: designs, flights, missions, simulation snapshots, photos, AI questions you save | So you can come back to your work | Until you delete them or your account |
| Feedback you send from the app, with the page you were on and your browser type | To fix problems and decide what to build next | Until the beta ends, or until you delete your account |
| Your space company, spacecraft and challenge progress | To run those features | Until you delete them or your account |
| Simulation inputs you send to the engine | To compute results. Not stored unless you save them | Not kept, apart from short-lived server logs |
| Technical logs: IP address, time, requested path, errors | Security, rate limits and fixing bugs | Up to 30 days |
We don't use advertising, tracking pixels or third-party analytics, and we don't sell or rent personal data.
Who else processes your data
- AI provider. When you ask the AI analyst a question, the question, the recent conversation and a compact summary of the simulation on your screen are sent to the language-model provider we use (NVIDIA NIM, Groq or xAI, depending on configuration) to write the answer. Don't put personal information in AI questions.
- NASA imagery. Satellite photos in the space company load public Earth imagery from NASA's GIBS service directly in your browser. NASA sees your IP address and the map area requested, as with any website.
- Hosting and email. Our hosting provider stores the database and servers. If password-reset email is switched on, our email provider delivers those messages.
- Google. Only if you choose "Continue with Google".
These providers may process data outside India. Where they do, we rely on their contractual and legal safeguards.
Your rights
- See and take your data: Account settings → Download my data gives you everything we hold about you as JSON.
- Correct it: change your name in Account settings, or write to us for anything else.
- Delete it: Account settings → Delete account removes your account, history, fleet, photos and sessions straight away. Backups roll over within 30 days.
- Withdraw consent, complain or ask questions: write to [email protected]. You can also complain to your data-protection authority (in India, the Data Protection Board of India; in the EU or UK, your local supervisory authority).
We rely on your consent and on performing our agreement with you (the Terms) to process your data, and on our legitimate interest in keeping the Service secure.
Security
Passwords are hashed with scrypt. Sessions use random tokens in HttpOnly cookies, and only a hash of each token is stored. Traffic is encrypted with HTTPS in production. No system is perfectly secure; if a breach affects you, we'll tell you and the authorities as the law requires.
Children
The Service is for people aged 13 and over. Users under 18 should have a parent or guardian's permission. If you believe a child under 13 has an account, write to us and we'll delete it.
Changes
If we change how we use personal data in a meaningful way, we'll update this page and tell you by email or in the app before the change applies.