Privacy built around your tools.

Nexora is a personalized utility application developed by ZarMas Tech. This Privacy Policy describes how the app and its service providers process information, including which features work locally, when account sign-in is used, and what happens when you use advertising, Power Tools or purchases. The policy should be read together with any in-app consent dialogs and relevant third-party privacy notices.

Using Nexora does not, by itself, replace choices or consent that may be required for optional advertising or other data processing.

1. Privacy at a Glance

Nexora is a customizable utility app. Many features, including everyday calculations, notes, personal organization and supported document/image operations, are designed to work locally on your device. Other features use online services when needed.

• General use: You can use most Nexora tools without creating a Nexora account or signing in.
• Protected Power Tools: Some advanced tools require Google Sign-In, processed using Firebase Authentication, to apply per-user usage allowances and verify rewards securely.
• Purchases: Nexora Pro is available through Google Play; Nexora uses a verification backend to validate purchase entitlements.
• Advertising: Nexora uses Google AdMob, including rewarded advertising for eligible Power Tools and potentially other advertising placements. Google and its advertising partners may process device, usage and advertising-related data as described below.
• Privacy choices: When required, the Google User Messaging Platform (UMP) displays consent/privacy choices before eligible ads are requested.
• Your content: Private notes, documents, scans, OCR text, recordings and clipboard entries are generally processed on-device, not uploaded to ZarMas Tech to provide Power Tool usage checks.
• Online records: Firebase/Google services and Nexora's backend may process authentication, purchase-verification, device-attestation and pseudonymous tool-usage/reward information.
• No sale of private content: ZarMas Tech does not sell users' private notes, files, recordings or calculator inputs.
• Third-party services: Some utilities request weather, currency, world-information, map or network information from third parties; the external provider may receive normal network metadata.

2. Information You Create or Provide

Depending on the tools you choose to use, Nexora may process information such as:

• Notes and text you create
• Tasks, reminders and calendar entries
• Habit and productivity information
• Alarm settings
• Fasting, prayer and other tracker information
• Calculator values and results
• Loan, EMI, discount, Zakat, BMI and similar calculation inputs
• QR codes and QR scan history
• Clipboard text you explicitly choose to capture
• Saved links, notes, tags and favorites in Save for Later
• Images and photographs selected by you
• Scanned documents
• OCR-extracted text
• PDFs and other files selected by you
• Voice recordings created through Nexora
• Tool preferences
• Pinned tools and My Nexora configuration
• Kits and personalization settings

Unless a feature requires an online service, this content is processed locally on your device. Nexora's Power Tool backend receives identity/usage verification requests rather than the private contents of your selected PDFs, images or OCR results.

The Home smart-action/search feature performs supported calculations and tool discovery locally; it is not described here as a service that sends your questions to a general-purpose AI cloud model.

ZarMas Tech does not use your private notes, scans, OCR text, recordings, clipboard content or calculator inputs to train artificial intelligence models.

3. Local Storage

Nexora stores various settings and user-created information locally so features can continue working between sessions.

Depending on the feature, locally stored information may include:

• App preferences
• Selected and pinned tools
• Tasks and reminders
• Calendar events
• Habit information
• Prayer and fasting trackers
• Alarm configuration
• Saved links
• QR history
• Clipboard history
• Weather preferences
• Currency preferences
• Voice recording information
• Scanner/document history
• OCR results
• Generated or edited files

Some particularly sensitive information receives additional protection.

For example, Nexora stores Notes and saved SOS emergency contact details using secure encrypted device storage.

Other feature data may be stored in Nexora's private application storage.

Nexora's private app data is configured to be excluded from Android backup and device-transfer backup. Files you explicitly export to other locations are subject to the destination's own storage and backup rules.

Identity-related quotas, usage records and ad rewards for protected Power Tools are stored separately in Google Cloud/Firebase services as explained below.

4. Documents, Images, PDFs and OCR

Nexora provides features including:

• Document scanning
• OCR text recognition
• Searchable PDFs
• Image editing
• Image conversion
• PDF processing
• Image-to-PDF conversion
• File sharing

Files you choose are processed primarily on your device. Android's Open With integration may copy a user-selected PDF into Nexora's temporary private storage to view it. The temporary copy is not a request to upload the file to our backend.

English/Latin OCR uses Google ML Kit components, while supported Urdu OCR uses locally packaged Tesseract resources. OCR text can be edited, searched, copied, saved or shared by you.

Machine-learning components may require supporting models or components provided through Google services. Processing is designed to occur on the device.

Nexora does not send the contents of selected scanned documents, images, OCR results or PDF files to its Power Tool usage-verification backend. The backend checks access and usage status; the selected file processing is performed primarily on-device.

If you choose to share, open or export a file using another application or service, that destination is governed by its own privacy practices.

5. Camera and Photo/File Access

Some Nexora features may request access to your camera or allow you to choose images and files.

Examples include:

• QR Scanner
• Document Scanner
• OCR
• Passport Photo Helper
• Image tools
• PDF tools

Nexora uses Android system interfaces and scoped file selection where possible rather than requesting unrestricted access to all files on your device.

Selected files are used only for the action you request unless you choose to save the resulting content within Nexora.

6. Microphone and Voice Recordings

The Voice Recorder feature requires microphone access.

Microphone access is used only when you actively use recording functionality.

Recordings are stored locally on your device unless you choose to export or share them.

Nexora does not continuously listen through your microphone in the background for advertising, profiling or analytics purposes.

7. Location Information

Certain Nexora tools may request device location permission.

These include features such as:

• Weather
• Qibla
• Prayer Times
• SOS location sharing
• Wi-Fi Analyzer

Location permission is requested contextually when you use a feature that requires it.

Weather

When you request weather for your current location, Nexora sends latitude and longitude coordinates rounded to three decimal places to the weather provider so forecasts can be returned. These coordinates may still constitute precise location under applicable privacy definitions; rounding them does not necessarily make the location approximate. Location-based weather is optional and requires your action and applicable device permission.

Qibla and Prayer Times

Location may be used locally to calculate direction or prayer-related information.

SOS

If you choose to include your location in an SOS action, Nexora may create a map/location link that you can choose to share through another application.

Nexora does not automatically send SOS location information to ZarMas Tech.

Wi-Fi Analyzer

Android may require location permission to provide Wi-Fi scanning information such as nearby network details.

Nexora uses this permission for Wi-Fi analysis functionality and does not use Wi-Fi scan information for advertising or behavioral profiling.

8. Clipboard

Nexora includes Smart Paste and Clipboard Manager functionality.

Smart Paste

Nexora reads clipboard text only when you choose to paste it.

Smart Paste analyzes the selected text locally and does not maintain a Smart Paste history.

Clipboard Manager

Clipboard Manager reads clipboard text only when you explicitly choose Capture Clipboard.

If you choose to save clipboard content, the selected text is stored locally.

Nexora attempts to prevent obviously sensitive clipboard content—such as passwords, security codes, private keys and payment-card numbers—from being saved to clipboard history.

However, automated detection cannot guarantee recognition of every type of sensitive information, so you should avoid intentionally saving confidential credentials in clipboard history.

9. Save for Later

Save for Later allows you to store:

• Web links
• YouTube links
• Supported social/web links
• Text and notes
• Tags
• Favorites
• Read/watched status
• Reminders

Saved items are maintained using local-first storage.

When you save a web address, Nexora may connect directly to that website to retrieve basic metadata such as:

• Page title
• Preview information
• Thumbnail or image information

For supported YouTube links, Nexora may request thumbnail images from YouTube's image service.

When Nexora connects to a website, that website may receive standard network information, including your IP address and request headers.

Nexora does not attempt to bypass protected streaming systems or download protected media without authorization.

10. Weather Services

Nexora uses online weather services to provide current conditions and forecasts.

Weather functionality currently uses Open-Meteo services.

Information sent may include:

• A searched location name; or
• Latitude and longitude rounded to three decimal places when current-location weather is requested (which can still be precise location)

The service may receive your IP address and ordinary network request information as part of normal internet communication.

11. Currency Exchange Rates

Currency Converter retrieves current exchange-rate information from an external exchange-rate service.

Nexora currently uses the public ExchangeRate-API service endpoint for this functionality.

The currencies and base currency requested may be transmitted to that service.

Personal financial account information, bank balances or payment-card information are not required for the Currency Converter.

12. Financial Calculators

Nexora includes calculation tools such as:

• Loan / EMI Calculator
• Discount Calculator
• Tip Split Calculator
• Trip Budget
• Fuel Cost Calculator
• Zakat Calculator
• Percentage Calculator

Values entered into these calculators are processed locally unless a feature explicitly states otherwise.

Nexora does not connect to your bank account, access banking credentials, issue loans, transfer money or provide brokerage services.

13. Health-Related Calculations

Nexora includes utilities such as the BMI Calculator.

Values entered into these tools are processed locally and are not sent to ZarMas Tech servers.

These utilities are informational calculation tools and are not intended to replace professional medical advice, diagnosis or treatment.

14. Speed Test, Connectivity and Network Information

Nexora includes network-related tools such as:

• Speed Test
• Connectivity Test
• Network Information
• Wi-Fi Analyzer

To test internet connectivity or performance, Nexora may make network requests to external infrastructure, including Cloudflare speed-test services or destinations chosen by the user.

As with normal internet communication, external servers may receive your:

• IP address
• Approximate network location inferred from the IP address
• Request timing
• User-agent or connection metadata

Nexora does not use this information to create an advertising profile.

15. World Information

Nexora's World Information feature retrieves public country and geographic information from external public-data services.

These may include sources such as:

• World Bank
• REST Countries
• Wikidata
• WorldFactbook.io
• jsDelivr-hosted public geographic datasets

Requests generally identify the country or geographic record being viewed rather than identifying the user.

The service providers may nevertheless receive your IP address and ordinary network request metadata.

16. External Websites and Applications

Nexora may allow you to:

• Open a website
• Open a map location
• Launch another installed application
• Share text or files
• Open YouTube or other supported content
• Send an SOS message
• Export a document

These actions are initiated by you.

Once information is sent to or opened in another application, website or service, that third party's privacy policy applies.

ZarMas Tech is not responsible for how an independent third-party service handles information after you choose to send it there.

17. Google Services

Nexora integrates with Google and Google Cloud services for specific purposes:

Google Sign-In and Firebase Authentication

When you choose to use certain protected Power Tools, Nexora asks you to sign in with a Google account. Google and Firebase Authentication may process your Google account identifier, Firebase user ID and related profile information provided through sign-in (which can include your email address, display name or profile image, depending on the account and service settings). This sign-in is not required for most other utilities.

Nexora uses a verified Firebase authentication token when checking protected tool access. Google Sign-In can create a Firebase Authentication account for the optional signed-in feature without requiring you to choose a separate Nexora password. We do not require your Google account password.

For account deletion requested through our website, Google identity verification is used to check for an existing, eligible Google-linked Nexora Firebase account before accepting a request. The website verification process does not itself create a new Firebase account. For the deletion process, our backend may process a verified Google identity token, account identifiers and the information necessary to validate and process the request; it is not a separate general-purpose sign-up service.

Firebase App Check and Google Play Integrity

Nexora uses App Check and Play Integrity-related verification to help protect restricted tool requests. Google may process app, device, integrity and request information to provide these anti-abuse checks.

Google Cloud Run and Cloud Firestore

ZarMas Tech operates a secure verification backend on Google Cloud. It processes protected-tool requests, usage limits, successful-use records, pending rewards, signed AdMob reward notifications, and authenticated account-deletion requests. User identifiers used in Power Tool usage/reward records are derived from a one-way hash of the verified Firebase identity, rather than storing the user's raw email address in those ledgers. The deletion workflow also uses a controlled background task and deletion-status checks. Google Cloud service logs may contain ordinary request and diagnostic metadata.

Google Play Billing

Nexora Pro purchases are processed by Google Play. Nexora sends transaction data needed for validation, such as product ID, purchase token, transaction timing and purchase status, to its verification backend. The backend validates entitlement and may record necessary verification, acknowledgement, fraud-prevention or recovery information. ZarMas Tech does not receive your full card number or Google account password.

Google AdMob and User Messaging Platform (UMP)

Nexora uses Google AdMob to show advertisements and offer rewarded ad unlocks. The Google UMP SDK manages eligible consent and privacy-choice messages. More details appear in the Advertising section.

Google ML Kit and Android/Google Play Services

Google ML Kit supports features such as on-device scanning and OCR; certain models or support components may be supplied through Google services. Android/Play services also support relevant operating-system capabilities.

Your use of Google products is also governed by Google's applicable privacy policies.

18. Advertising

Nexora's current release displays third-party advertisements using Google AdMob. These can include banner ads and rewarded ads shown when an eligible user chooses to earn an additional use of a protected Power Tool. Users with eligible Nexora Pro access may have an ad-free experience or avoid rewarded-ad requirements, according to the app's feature rules.

Data processed for advertising. According to Google's Mobile Ads SDK disclosures, the SDK may collect or share an IP address (from which an approximate location can be inferred), ad interactions such as ad views and taps, diagnostic/performance information, and device or app identifiers such as the Android advertising ID when available and permitted. The actual identifiers available depend on operating-system settings, SDK configuration and consent choices. Google and its advertising partners may use this data for ad delivery, measurement, security and fraud prevention, as permitted by applicable law and the user's choices.

Consent and choices. For regions where consent is required, Nexora uses Google's UMP consent-management flow. You may be able to accept, reject or adjust advertising choices through the consent message or an available in-app privacy-options control. Certain operating-system advertising controls are also available in Android Settings. Declining personalized advertising does not necessarily remove all advertising; ads may be limited or non-personalized where supported and permitted.

Rewarded ads and server verification. When you choose to watch a rewarded ad, Google AdMob sends a signed server-side verification (SSV) callback to Nexora's backend. The callback can contain an ad unit identifier, reward details, callback timestamp, transaction identifier and an app-generated opaque reward reference used to associate the reward with a protected tool/account allowance. The backend verifies the callback, rejects duplicate or unverified rewards, and maintains relevant usage/reward records. Your private PDF or image contents are not part of the reward callback.

No sale of your personal files. ZarMas Tech does not sell your notes, scanned files, photos, OCR text or recordings to advertisers. Advertising-related processing by Google and its partners is governed by their respective policies and the privacy choices available to you.

19. Analytics and Tracking

Nexora does not need the contents of your private notes, scanned documents, OCR text, clipboard history or recorded audio to measure advertising or Power Tool access.

However, Google AdMob processes ad interaction and diagnostic data; Google Play can provide install, stability, crash/ANR and purchase-related reports; and Google Cloud/Firebase processes necessary account, security, billing and service-operation information. These activities must not be understood as “no analytics or diagnostics of any kind.”

ZarMas Tech does not use your local private tool content to create a separate cross-app advertising profile. If dedicated analytics/crash-reporting tools are added later, this policy should be updated before or alongside that change.

20. Purchases and Nexora Pro

Nexora offers optional lifetime Nexora Pro functionality through Google Play Billing.

• Google Play handles checkout and payment information.
• Nexora and its HTTPS verification service process purchase identifiers, purchase tokens and related transaction/entitlement data to confirm access, prevent fraud and support restore/recovery of eligible purchases.
• Nexora may store local entitlement information so verified Pro access continues to function appropriately when offline, subject to security and validation rules.
• Nexora's protected Power Tools check server-side usage permissions for non-Pro users, as described above.
• We do not receive your complete payment-card details from Google Play.

Deleting local app data or a Google-linked Power Tool identity does not automatically delete or cancel a purchase held by Google Play. Purchase-history retention by Google is governed by Google's policies. Contact us if you have questions about data associated with Nexora's verification backend.

21. Notifications, Reminders and Alarms

Nexora may request notification permission for features including:

• Alarms
• Timers
• Tasks
• Reminders
• Save for Later reminders

Alarm configuration and reminder information are primarily stored locally and used to schedule notifications on your device.

Nexora may also use Android boot-related functionality so scheduled alarms or notifications can be restored after a device restart.

22. Sensors and Device Capabilities

Some Nexora utilities may use device hardware or system information, including:

• Compass sensor
• Flashlight
• Device information
• Network status
• Wi-Fi information
• Time zone
• Storage information

These capabilities are used to provide the feature you select.

They are not used by ZarMas Tech for cross-app advertising or behavioral profiling.

23. Information We Do Not Require

For most everyday tools, Nexora does not require a Nexora username or password, real name, home address or bank login credentials.

Exception: Google Sign-In is required for certain protected Power Tools. In that case, Google/Firebase may process your Google-linked identifier and profile information, including your email address where supplied by the identity provider. Google Sign-In may create a Firebase Authentication user record for this optional feature; no separate Nexora username/password registration is required.

Google Play separately handles information necessary to purchase or restore Nexora Pro. Do not put account passwords, payment-card data or other secrets into general-purpose notes, clipboards or file names.

24. Sharing of Information

ZarMas Tech does not sell your private notes, documents, recordings, clipboard contents or calculator inputs.

Information may be transferred to service providers or third parties for specific purposes, including:

• Google/Firebase: optional Google Sign-In, Firebase Authentication, App Check/Play Integrity, Google Cloud Run/Firestore, and secure tool-usage verification.
• Google Play: in-app purchases, entitlement validation, app delivery and stability reporting.
• Google AdMob/UMP and participating ad partners: ad delivery, advertising-related identifiers, user choices, advertising measurement and rewarded-ad verification.
• User-selected information services: weather, currency exchange, world information, network tests and website-preview requests, which may involve a location query, requested record or standard network metadata.
• User-initiated sharing: destinations you select when exporting or sharing files, text, links or SOS information.

We may disclose information if required by applicable law or needed to protect users, address fraud or enforce legitimate service security. Independent services process information according to their own policies. Not all of the transfers above occur for every user; they depend on the features and services used.

25. Data Retention

Local data. Notes, settings, histories and other locally stored information normally remain on the device until you delete the relevant item, clear Nexora's app data, uninstall the app or the operating system removes them. Exported copies may remain wherever you saved or shared them.

Firebase sign-in records. If you use Google Sign-In for protected Power Tools, a Firebase Authentication account record is created and may remain until deletion is requested and completed or the account is otherwise removed. Our verified account-deletion workflow removes the eligible Firebase Authentication identity after processing the request.

Protected tool ledgers. The backend maintains identity-derived hashed per-tool records for lifetime free-use status, daily reward allowances, successful operations, pending rewards and anti-replay verification. Daily counters may reset without immediately deleting the underlying records. Upon a verified account-deletion request, the deletion workflow removes the associated Power Tool usage/reward records within its deletion scope. Short-lived operations may expire before a deletion request without automatically clearing every diagnostic or independently retained record.

Account-deletion processing. A verified request is accepted for automatic background processing; acceptance does not itself mean deletion has finished. The deletion page can check whether the Firebase Authentication identity has been removed and display completion when that status is verified. Some operational, security or deletion-processing metadata may be retained where needed for legitimate security, abuse prevention, legal or service-integrity purposes.

Purchase records. Google Play and the Nexora verification service may retain records needed to establish entitlements, process refunds, prevent fraud, handle support requests or comply with legal obligations.

Third-party logs/advertising records. Google and other external services apply their own relevant retention and deletion rules. We do not promise a specific automatic deletion period for backend records where one has not been independently established. You may submit a deletion request as described below, subject to data needed for legal, security or other permitted obligations.

26. Deleting Your Data

Information on your device: Delete records through their individual tools, clear Nexora app storage in Android Settings, or uninstall the app. Account deletion does not remotely delete notes, documents, recordings, other local app content or files you exported to another location; you must remove those separately.

Google-linked Nexora account and associated server records: If you previously signed in with Google for protected Nexora Power Tools, you can request permanent deletion of your eligible Google-linked Nexora Firebase Authentication identity and associated in-scope Power Tool usage/reward records through our account-deletion website:

Use the same Google account associated with Nexora. The website verifies the Google identity and checks that an eligible Firebase account already exists; merely visiting the website or signing in to check eligibility does not delete the account. After reviewing the irreversible-deletion information and affirming the confirmations, you can submit the deletion request.

Processing and confirmation: Accepted requests are processed automatically using a protected background deletion service. A request being accepted or queued is not confirmation that deletion has finished. The website checks the deletion status and provides a completion message when removal of the Firebase Authentication identity has been verified. Processing may require additional time or assistance if a service error occurs.

Data covered: This workflow is designed to remove the eligible Firebase Authentication identity and associated server-side Power Tool usage records, reward intents and reward transactions within the account-deletion scope.

Data not automatically deleted or that may be retained: The request does not delete your underlying Google account, Google Play purchases or Google's purchase history. Nexora may retain purchase-verification and entitlement-related records, as well as information legitimately needed for security, fraud prevention, legal compliance, or service operations, where applicable. Google, advertising partners and other independent services handle their own records under their respective policies. Locally stored or exported information is not removed remotely.

If you cannot use the website: Contact support@zarmastech.com with the subject “Nexora Data Deletion Request”. We may require appropriate account-ownership verification before assisting; an email address alone does not prove ownership.

For other privacy requests, please use the contact information below.

27. Data Security

Nexora uses reasonable technical safeguards appropriate to its features, including:

• Encrypted HTTPS communication for Nexora-managed remote requests.
• Android app-private storage and encrypted storage for certain sensitive local information.
• Scoped selection of user-chosen files rather than unrestricted storage access where possible.
• Firebase authentication and app-attestation verification for protected Power Tool access.
• One-way identity-derived hashes in server-side Power Tool usage ledgers rather than raw user email addresses in those records.
• Server-side verification of eligible AdMob rewards and Google Play purchases.
• Permission requests linked to relevant feature usage.
• Release and anti-abuse controls intended to reduce invalid access and replayed rewards.

No security measure can eliminate all risk. Protect your device and Google account, and use care when exporting or sharing sensitive content.

28. Children's Privacy

Nexora is a general-purpose utility application and is not specifically designed or marketed as a service for children.

Nexora does not knowingly operate an account system designed to collect personal information from children.

Parents or guardians should supervise a child's use of features that can access files, the internet, location or external applications where appropriate.

29. Your Choices and Controls

You can:

• Use general utilities without signing in, where those features do not require authentication.
• Choose whether to sign in with Google for eligible protected Power Tools.
• Review and adjust Google UMP consent/privacy options when required and available.
• Manage advertising preferences or reset/delete the advertising ID using Android controls, where supported.
• Decline or revoke optional permissions through Android Settings; some features may then be unavailable.
• Delete locally stored notes, files, recordings, history, preferences or Nexora app data.
• Export or share content only when you choose to do so.
• Request deletion of your eligible Google-linked Nexora account and associated in-scope server records at https://zarmastech.com/nexora/delete-account/, even if you have uninstalled the app.
• Contact us to request access, correction or assistance with deletion of eligible server-side account-related data, subject to applicable verification and legal requirements.

Your rights may vary based on the laws of your location. We will consider eligible privacy requests under applicable law.

30. Changes to This Privacy Policy

Nexora may evolve over time.

We may update this Privacy Policy when:

• New features are introduced;
• Data-handling practices change;
• New third-party services are added;
• Advertising or monetization behavior changes;
• Legal or Google Play requirements change.

When material changes are made, the Last updated date at the top of this policy will be revised.

You should review this page periodically for updates.

31. Contact Us

For privacy questions or requests about Nexora's use of information, please contact:

Nexora — One app. Built around you.