Privacy Policy

Last updated: April 2026

This Privacy Policy describes how Biluma EMDR ("the App", "we") handles information when you use the App as a Zoom App during a Zoom meeting.

1. Information we collect

The App is designed for minimum data collection. During a session, we process:

• Meeting UUID — used in memory only, to associate the therapist's control panel with the in-meeting Camera Mode rendering context for the duration of the session.
• Therapist's participantUUID — used in memory only, to identify the user whose video stream the bilateral-stimulation overlay is applied to.
• Therapist preferences (default ball color, speed, direction, sound type, set duration, language) — stored in the therapist's browser via localStorage. Never transmitted off the therapist's machine.

We do not collect, store, or transmit:

• Audio or video content of any meeting participant.
• Names, emails, addresses, or other identifying information of clients or participants.
• Session content (duration, topic, transcripts, timing).
• Diagnostic, clinical, or biometric data.
• Cookies for tracking purposes.

2. Third-party services

The App may make outbound requests to:

• Pollinations.ai — when the therapist uses the optional in-app image generation feature for exposure work, the text prompt entered by the therapist is sent to Pollinations.ai's public image-generation endpoint. Pollinations.ai's privacy policy governs that interaction. The generated image is returned and held in the therapist's browser memory only.
• Zoom Apps SDK — runtime calls to Zoom for Camera Mode and Layers APIs. Governed by Zoom's privacy policy.

We do not share data with advertisers, analytics providers, or any other third party.

3. Data storage

No server-side database stores user information, session content, or preferences. The App's hosting (Vercel) sees only the static asset delivery and standard HTTP request logs. Therapist preferences live in the browser's localStorage and never leave the device.

4. The bilateral-stimulus overlay

The App composites a visual overlay (a moving ball, bracket markers, optional exposure image) onto the therapist's outgoing video feed via Zoom's Layers API. This processing happens locally on the therapist's machine, before the video reaches Zoom's transmission pipeline. The overlay is initiated explicitly by the therapist on each session, ends on Stop or session-timer expiry, and is automatically cleared when the meeting ends. The App does not modify the audio stream and does not perform face-tracking, face-replacement, or any deceptive transformation.

5. Children's privacy

The App is intended for licensed mental-health professionals. We do not knowingly collect data from anyone under 18.

6. Changes to this policy

We will update this page if our handling of information changes. The "Last updated" date at the top reflects the current version.

7. Contact

For privacy questions: roman@biluma.ru