Obelisk Agency ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how OTG Nexus ("the App") handles your information.
1. Data Collection
OTG Nexus is designed with a privacy-first approach. Obelisk Agency does not collect personal information directly. All file operations happen locally on your device.
The App stores the following data locally on your device only:
- App preferences (theme, sort order, view mode, auto-mount, hidden-file visibility, copy verification)
- Pinned folder bookmarks you create while browsing a USB volume (hardware identifier + path + label, in a local database)
- Completed file transfer history (filename, source path, destination path, size, status, timestamp, in a local database)
- Encrypted vault contents on the USB (files you explicitly add via the vault feature are encrypted with AES-256-GCM using a key derived from your password via PBKDF2; stored under
.nexus-vault/on the USB itself and never sent anywhere) - Temporarily cached files for viewing or sharing
- Technical debug logs in the app's private storage for troubleshooting
We have no access to any of this local data. The sections below describe the limited cases where third-party SDKs (ads, analytics, crash reporting) receive data about your app usage, never about your files.
2. Data Storage
All data is stored exclusively on your device using Android's DataStore and app-private storage. We do not operate servers that store user data. When you uninstall the App, all locally stored data is automatically removed.
3. Data Sharing
We do not share, sell, or transfer any user data to third parties. The only data that may be shared externally is:
- Files you explicitly choose to share using the Share function (sent to the app you select)
- Data collected automatically by the advertising SDK (see Third-Party Services)
4. USB Device Access
OTG Nexus accesses USB storage devices connected via OTG cable. This access:
- Requires your explicit permission each time a new device is connected
- Is used solely to read and manage files on the USB device
- Never transmits USB device data or file contents over the internet
- Is revoked when the device is disconnected or the app is closed
The USB security scanner analyzes device interfaces locally. No data about your USB devices is transmitted anywhere.
5. Network Requests
OTG Nexus does not make outbound network requests for its core file-management features. Browsing, copying, mounting, unmounting, and viewing all work entirely offline. Outbound network activity is limited to the Google SDKs described in the next section.
Local network features (opt-in). If you start "LAN file sharing" from the file browser, the app opens a listening HTTP socket on your phone (default port 8080) so other devices on the same WiFi can download or upload files through a web browser. This socket is protected by a randomly-generated password that is displayed to you and never transmitted to us. Five failed authentication attempts from a source IP trigger a 60-second ban. The server stops immediately when you tap Stop or leave the Share screen. Traffic between your phone and the other device is not encrypted (HTTP, not HTTPS), only use this feature on networks you trust. No data leaves your local network.
6. Third-Party Services
The App integrates the following Google SDKs:
Google AdMob (Advertising)
The free version displays banner advertisements powered by Google AdMob. AdMob receives:
- The Android Advertising ID (which you can reset or opt out of at the operating system level)
- Device information (model, OS version)
- IP address (for ad serving and coarse geolocation)
- Ad-interaction data for delivery and measurement
In the European Economic Area, United Kingdom, and Switzerland, OTG Nexus shows a Google-provided consent form (UMP) on first launch so you can decide whether personalized ads may use your data. You can change your choice at any time from Settings → Ad privacy options.
Firebase Crashlytics (Crash Reporting)
Collects anonymous crash stack traces, device model, OS version, and BuildConfig so we can fix bugs. No content from your files, USB devices, or bookmarks is sent. Collection is always off in development builds.
Firebase Analytics (Usage Statistics)
Collects aggregate, anonymous usage events, screen views and feature interactions, to help prioritize improvements. A Firebase Installation ID is used to deduplicate sessions. No content from your files, USB devices, or bookmarks is sent.
You can limit or opt out of personalized advertising at the operating system level via Android Settings → Google → Ads, or purchase the Remove Ads upgrade to disable advertising entirely.
For more information, see Google's Privacy Policy.
7. Permissions
The App requests only the permissions it needs:
- USB device access: To read and write files on connected USB drives (granted per-device via system dialog)
- Notifications: To show file transfer progress
- Foreground service: To keep transfers running in the background
The App does not request access to your contacts, location, camera, microphone, phone storage, or any other sensitive permissions.
8. Security
We implement reasonable measures to protect locally stored data:
- All data stays on your device
- Cached files are stored in app-private directories
- Debug logs are not accessible to other apps
- The App includes a USB security scanner to detect potentially malicious devices
9. Children's Privacy
OTG Nexus does not collect personal information from anyone, including children under 13. The App does not require account creation, login, or personal data entry.
10. Your Rights
Delete all local data: Android Settings → Apps → OTG Nexus → Storage → Clear storage wipes preferences, the bookmarks and transfer-history database, cached files, and logs. Uninstalling the app has the same effect and is the fastest path.
Delete specific items in-app: Remove individual bookmarks via the bookmark sheet in the file browser. Clear transfer history via the "Clear completed" action on the Transfers screen.
Opt out of personalized ads: Change your consent choice in Settings → Ad privacy options inside the app, reset or opt out of the Advertising ID in your device's Settings → Google → Ads, or purchase the Remove Ads upgrade to disable advertising entirely.
Request deletion of Firebase-held data: crash reports and analytics events held by Google can be deleted from your Google account's My Activity.
Revoke USB permissions: Android grants USB access per-device; revoke by disconnecting the device or via Android Settings.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Your continued use of the App after changes constitutes acceptance.