Privacy Policy

Obelisk Agency ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how OTG Nexus ("the App") handles your information.

1. Data Collection

OTG Nexus is designed with a privacy-first approach. Obelisk Agency does not collect personal information directly. All file operations happen locally on your device.

The App stores the following data locally on your device only:

• App preferences (theme, sort order, view mode, auto-mount, hidden-file visibility, copy verification)
• Pinned folder bookmarks you create while browsing a USB volume (hardware identifier + path + label, in a local database)
• Completed file transfer history (filename, source path, destination path, size, status, timestamp, in a local database)
• Encrypted vault contents on the USB (files you explicitly add via the vault feature are encrypted with AES-256-GCM using a key derived from your password via PBKDF2; stored under .nexus-vault/ on the USB itself and never sent anywhere)
• Temporarily cached files for viewing or sharing
• Technical debug logs in the app's private storage for troubleshooting
• Network drives you add (Windows shares, NAS boxes and servers reached by SMB, SFTP, FTP or WebDAV): each server's name, address, port, folder and user name, and the fingerprint of its SSH key or certificate once you have accepted it
• The passwords you ask the App to remember for those servers, and SFTP sign-in keys you create or import in the App, encrypted with a key held in Android's hardware-backed Keystore, kept in storage that is excluded from backups, and deleted when you remove the server or clear the App's data
• If you turn on App lock: only whether it is on and how soon it locks. Your fingerprint and your phone's screen lock are checked by Android; the App never sees them and keeps no PIN of its own
• If you sign in to a cloud service to upload files (Google Drive, Dropbox or Microsoft OneDrive): the sign-in tokens that service issues and your account's e-mail address, encrypted with a key held in Android's hardware-backed Keystore, kept in storage that is excluded from backups, and deleted when you sign out

We have no access to any of this local data. The sections below describe the limited cases where third-party SDKs (ads, analytics, crash reporting) receive data about your app usage, never about your files.

2. Data Storage

All data is stored exclusively on your device using Android's DataStore and app-private storage. We do not operate servers that store user data. When you uninstall the App, all locally stored data is automatically removed.

Android backup. If backup is turned on for your phone, Android includes some of the App's settings in your own backup (to your Google account, or directly to a new phone when you move to one) so they come back after a reinstall: your preferences, your bookmarks and transfer history, and the list of network drives you added (names, addresses, folders, user names). Passwords, SFTP keys and cloud sign-ins are never part of a backup; after a restore each server asks for its password again. Backups are made and stored by Android and Google under Google's terms; we have no access to them. You can turn backup off in Android's settings.

3. Data Sharing

We do not share, sell, or transfer any user data to third parties. The only data that may be shared externally is:

• Files you explicitly choose to share using the Share function (sent to the app you select)
• Files you explicitly choose to upload with Upload to cloud, sent from your device straight to the cloud service you pick (Google Drive, Dropbox or Microsoft OneDrive), into your own account. They do not pass through any server of ours, and we never receive them.
• Files you copy, move or save to a network drive you added, sent from your device straight to that server
• Data collected automatically by the advertising SDK (see Third-Party Services)

4. USB Device Access

OTG Nexus accesses USB storage devices connected via OTG cable. This access:

• Requires your explicit permission each time a new device is connected
• Is used solely to read and manage files on the USB device
• Never transmits USB device data or file contents over the internet, except files you choose to upload to your own cloud account (see Network Requests)
• Is revoked when the device is disconnected or the app is closed

The USB security scanner analyzes device interfaces locally. No data about your USB devices is transmitted anywhere.

5. Network Requests

OTG Nexus does not make outbound network requests for its core file-management features. Browsing, copying, mounting, unmounting, and viewing all work entirely offline. Outbound network activity is limited to the Google SDKs described in the next section, and to the network drives and cloud services you choose to use.

Cloud upload (opt-in). If you sign in to Google Drive, Dropbox or Microsoft OneDrive and choose Upload to cloud, the files you selected are sent over an encrypted connection (HTTPS) directly to that service, into a folder named "OTG Nexus" in your account (on Dropbox and OneDrive, under Apps). On Google Drive the App asks for the narrowest access Drive offers: only the files the App itself created; it cannot read, list or change anything else in your Drive.

Dropbox and OneDrive as drives (opt-in). The App can also show your Dropbox or OneDrive beside your USB drives, so you can browse it and copy files to and from it. For that it asks Dropbox and Microsoft for access to the files in your account, not only its own folder. It reads a folder only when you open it and changes a file only when you copy, move, rename or delete it; file names and contents go between your phone and that service over HTTPS and never to us. Signing in happens on the service's own page (in your browser, or through Google Play services for Drive); the App never sees your password. What the service does with the files you upload is governed by its own privacy policy: Google, Dropbox, Microsoft. You can sign out at any time in Settings → Cloud accounts, which deletes the App's copy of the sign-in; to revoke the App's access entirely, remove it in your account's security settings with that service.

Network drives (opt-in). If you add a Windows share, NAS or server under Devices → Network drives, the App connects from your phone directly to the address you entered, with the user name and password (or SFTP key) you gave it, and lists, reads and writes files there only when you browse or act on them. Nothing passes through any server of ours. SFTP, FTPS and WebDAV over https are encrypted; plain FTP and WebDAV over http are not (your password and files cross the network readable), and SMB is encrypted only if your server requires it, so use those on networks you trust. The first time a server shows an SSH key or a certificate your phone does not already trust, the App shows its fingerprint and connects only if you accept it; if it changes later, the App refuses to connect and tells you.

Find on this network (opt-in). If you tap Find on this network, the App listens on your local Wi-Fi for devices that announce file sharing (mDNS / Bonjour) and lists them. This stays on your local network; nothing is sent to us or to the internet, and it stops when you leave the list.

Local network features (opt-in). If you start "LAN file sharing" from the file browser, the app opens a listening HTTP socket on your phone (default port 8080) so other devices on the same WiFi can download or upload files through a web browser. This socket is protected by a randomly-generated password that is displayed to you and never transmitted to us. Five failed authentication attempts from a source IP trigger a 60-second ban. The server stops immediately when you tap Stop or leave the Share screen. Traffic between your phone and the other device is not encrypted (HTTP, not HTTPS), only use this feature on networks you trust. No data leaves your local network.

6. Third-Party Services

The App integrates the following Google SDKs:

You can limit or opt out of personalized advertising at the operating system level via Android Settings → Google → Ads, or purchase the Remove Ads upgrade to disable advertising entirely.

For more information, see Google's Privacy Policy.

7. Permissions

The App requests only the permissions it needs:

• USB device access: To read and write files on connected USB drives (granted per-device via system dialog)
• Notifications: To show the LAN share while it runs, the progress of a format, the result of automatic copies from a drive, the progress of a cloud upload, and the media player's controls
• Foreground service: To keep the LAN share, a format in progress, a cloud upload, and audio playback running while the screen is off or the App is in the background
• Internet and network state: For the Google SDKs described above and, only when you use them, network drives, finding servers on your Wi-Fi, LAN file sharing and cloud services
• Keep awake: So a copy, a format or the LAN share in progress is not cut off when the screen turns off
• Fingerprint (optional): Only if you turn on App lock. Android checks your fingerprint or screen lock and tells the App only whether it matched; the App never sees or stores them
• Google Play billing: To buy the Remove Ads upgrade through Google Play. Payment is handled by Google Play; the App receives only whether you own the upgrade
• Storage (Android 10 and older only): To save files you copy from a USB drive into your phone's Downloads folder, and, if you choose, to show your phone's storage and SD card in the App. Older Android versions allow that only with this permission. It is asked for the first time you copy something to your phone or tap Allow access on the "This phone" card, never at launch.
• All files access (Android 11 and newer, optional): Only if you tap Allow access on the "This phone" card and turn it on in Android's settings. It lets the App show your phone's internal storage and SD card beside your USB drives, so you can browse them and copy, move, rename or delete files between them. The App reads and changes only what you open or act on, does all of it on your device, and never sends your files or their names anywhere unless you choose Upload to cloud. Without it, everything else in the App works as before.

The App does not request access to your contacts, location, camera, microphone, or any other sensitive permissions. It asks for access to your phone's storage only when you choose to use it as described above.

8. Security

We implement reasonable measures to protect locally stored data:

• All data stays on your device, apart from files you choose to share or upload
• Cloud sign-in tokens, network-drive passwords and SFTP keys are encrypted with a hardware-backed Android Keystore key, excluded from backups, and never written to logs
• An optional App lock asks for your fingerprint or your phone's screen lock when you come back to the App
• Cached files are stored in app-private directories
• Debug logs are not accessible to other apps
• The App includes a USB security scanner to detect potentially malicious devices

9. Children's Privacy

OTG Nexus does not collect personal information from anyone, including children under 13. The App does not require account creation, login, or personal data entry.

10. Your Rights

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Your continued use of the App after changes constitutes acceptance.