Privacy Policy

Effective September 6, 2026

This policy covers Robonia teleop and its Operations site, operated by the Cybernetic Physics team at teleop.kyberneticphysics.com and ops.kyberneticphysics.com. Contact [email protected] about privacy or your data.

What the service does

Robonia provides authorized operators with task instructions and simulation practice, and provides administrators with session oversight. The project is developing supervised robot teleoperation and collection of robot demonstrations for vision-language-action (VLA) training. The current internet deployment offers simulation practice; remote physical control and synchronized training-episode recording are not commissioned.

Information we process

Google sign-in: your Google account identifier, verified work email address, Workspace domain, and authentication claims needed to validate your sign-in. We request only the openid and email scopes. We do not request access to Gmail, Drive, Cloud Storage, BigQuery, contacts, or your Google password.
Shared-password sign-in: each site has a separate password. Where enabled, we process the password you submit to verify access against a salted password hash. Password sessions are labeled as shared sessions, do not establish a Google identity, and can grant operator or administrator access only on the site that issued the password. Do not share the password with unauthorized people.
Session and task activity: session identifiers, access role, control-lease status, task interactions, simulation commands and state, and operational diagnostics. Authorized administrators can see the active operator’s email address and session expiry.
Connection information: our hosting and network providers process information such as IP addresses, browser/request metadata, timestamps, and security events to deliver and protect the service. Cloudflare may also process website performance and usage measurements.

How we use information

We use Google identity information to authenticate you, enforce organization and administrator access, associate you with your active session, and protect the service. We use task and technical information to provide simulation, coordinate operator access, investigate faults, and improve reliability.

We do not sell Google user data, use it for advertising, or use Google account information or authentication tokens to train AI models. Robot demonstration data is distinct from Google sign-in data. Before enabling retained demonstration recording or VLA dataset collection, we will provide a collection notice describing the data, training use, recipients, and retention, and obtain any required authorization. Sign-in alone does not authorize recording people or their surroundings.

Who receives information

Google handles authentication; Cloudflare hosts the frontend and routes protected requests; the Cybernetic Physics site backend processes authorized simulation activity. Access is limited to service providers supporting these functions and authorized personnel who need it for operation or support. We may disclose information when legally required or necessary to investigate abuse and protect people or the service. Provider infrastructure may process information outside your country.

Cookies, security, and retention

We use secure, HTTP-only first-party cookies for sign-in and sessions. The Google sign-in-flow cookie expires after five minutes; an application session expires within fifteen minutes. Signing out clears the browser’s application session cookie. These cookies are required for access. We use HTTPS, signed sessions, restricted administrator access, and authenticated backend requests; no system can guarantee absolute security.

The current application keeps active simulation assignments in server memory and does not maintain a persistent Google account directory or store Google refresh tokens. Expiry or sign-out does not automatically erase hosting, security, or diagnostic records. Such records are retained as needed for operation, security, legal obligations, and the applicable provider’s retention settings; we do not promise a fixed deletion period for all records.

Your choices and requests

You can stop using the service, sign out, and remove its access through your Google account connections. Removing Google access does not necessarily end an already issued application session immediately; sign out too. Contact us to request access, correction, or deletion of personal information, or to ask about retention. We may need to verify your identity and may retain information required by law or for legitimate security purposes. Rights and exceptions depend on applicable law.

Changes

We will update this page when practices change and provide additional notice where required. The service is for authorized workplace participants and is not directed at children.