NexusAGI
Privacy Policy
This policy explains what NexusAGI does with your information. NexusAGI is a service for chatting with a rule-and-knowledge assistant, on this website, in the NexusAGI Android app and on the command line. NexusAGI is provided by Vasa Serafin, an individual developer based in Australia (“the developer”, “we”). The developer is the controller of the personal information described here. Contact: vasa_serafin@hotmail.com.
This is the one privacy policy for NexusAGI. It covers the website, the command line and the NexusAGI Android app (package com.vasaserafin.nexusagi); the app-specific details are in Android app below.
What we collect and why
| Information | Why | Required? |
|---|---|---|
| Account: username, a password hash (never the password), display name, optional two-factor secret | To create and secure your account and sign you in | Yes, to have an account |
| Your chat messages and the replies, grouped in chat sessions | To answer you and show your chat history, and to keep a sealed copy of each exchange for training and improving NexusAGI | Yes, to chat |
| Training copy of every chat exchange (your message, the reply, language, account type, session id, time), for free and paid accounts alike | To train and improve NexusAGI. Stored sealed (encrypted) on our own servers and never sold or used for advertising | Yes, for every account while you chat |
| Feedback you send: helpful / not helpful, comments, and the message and reply they are about | To correct and improve NexusAGI | No |
| Devices and sign-ins: device label, browser/device type, IP address, times | To show your signed-in devices, protect against abuse and enforce free-use limits | Yes, recorded automatically |
| Usage counts: tokens used per session and per day | To apply plan limits and show your usage | Yes |
| Subscription state reported by Google Play | To switch off ads and unlock plan features | Only if you subscribe |
| Free try on the website: a random device cookie and a usage counter, no account | To limit the free pass per device | Only if you try without an account |
| Browser storage: language choice, intro seen, ad-consent choice (see the Cookie Policy) | To remember your settings | No |
| Advertising data collected by Google when ads are shown to free accounts and you have agreed | To show ads | No (see Cookies) |
We do not collect your precise location, contacts or payment card details. Payments are handled entirely by Google Play. If you use the optional owner-verification feature in the Android app, the Android app section describes the camera and microphone use.
Training copies of chats
Every chat exchange, whether you use a free or a paid account, is also kept as a sealed (encrypted) training copy on our own servers in Serbia. It holds your message, the reply, the language, your account type, the chat session id and the time. It does not hold your password or sign-in tokens. We use these copies only to train and improve NexusAGI. Please do not put passwords, card numbers or other secrets into a chat. Deleting your account removes your chats and account link; training copies already made are kept without your account name where we can detach it, and we may keep them where the law allows.
How replies are produced
Replies are produced by NexusAGI’s own rules and knowledge on servers run by the developer. We do not sell your conversations and do not use them to build advertising profiles. Feedback you send may be reviewed by the developer and may become a correction to NexusAGI’s rules.
Legal bases (GDPR / UK GDPR)
We process account, chat and device data to perform our contract with you (providing the service) and for our legitimate interests in security, fraud and abuse prevention and improving the service. We use advertising cookies and similar technology only with your consent, which you can withdraw at any time. Where law requires it, we process data to meet legal obligations.
Who we share it with
- Google Play – processes subscriptions and tells the service whether a subscription is active.
- Google (AdSense) – only on free accounts, only when ads are switched on, and only after you accept the ad cookies. Google then acts under its own privacy policy. Paid accounts do not load web ads, and the website’s ad script is separate from the ads in the Android app (see Android app).
- Google (AdMob) – in the Android app, free accounts only, with consent where required (see Android app). Google then acts under its own privacy policy.
- Service providers that host or help run the service.
- Cloudflare cdnjs – on larger screens the home page loads the three.js graphics library from cdnjs.cloudflare.com for the animated background, so Cloudflare receives your IP address and browser details with that request. No script from it is loaded on phones.
- Authorities, if the law requires it or to protect people from serious harm.
We never sell personal information.
Where it is stored and how long we keep it
Your data is stored on servers located in Serbia, run by or for the developer. This is a cross-border disclosure: the developer is based in Australia, so personal information of Australian users is held outside Australia. Under Australian Privacy Principle 8 we take reasonable steps to make sure the hosting is handled consistently with the Australian Privacy Principles, and the developer remains accountable for it under the Privacy Act 1988. For users in the EU/EEA and UK, storing data in Serbia is an international transfer: it takes place on the basis of the safeguards required by GDPR / UK GDPR Chapter V (such as standard contractual clauses) where no adequacy decision applies. Some of the recipients above (for example Google) are also based outside your country, and we rely on their transfer safeguards. We keep your account, chats and feedback while your account exists. Sealed training copies are kept in the training inbox until NexusAGI has learned from them and are then handled as described in the Training copies section. When you delete your account (see Delete your account) the account, its sign-ins, trusted browsers, profile, reply styles, chat history and feedback are removed straight away (feedback is kept only as an anonymous correction that no longer points to you). We may keep a minimal record where the law requires it or to prevent fraud or abuse, including billing records and security logs.
Your rights
Depending on where you live (principally Australia, under the Privacy Act 1988 and the Australian Privacy Principles, and also the EU/EEA and UK under GDPR / UK GDPR) you can ask to access the information we hold about you, correct it, delete it, restrict or object to its use, receive a copy in a portable form (signed-in users can download their own profile, chats and feedback with the account export, which includes the newest 200 messages of each chat), and withdraw consent. To use a right, contact us at vasa_serafin@hotmail.com or use the deletion page. We may need to confirm it is you first. If you are unhappy with our answer you can complain to us, and you may also complain to your regulator: the Office of the Australian Information Commissioner (oaic.gov.au), the UK Information Commissioner’s Office (ico.org.uk), or your local EU data protection authority.
Android app
This section covers the NexusAGI Android app, published by Vasa Serafin, an individual developer based in Australia. It describes what the app does today; where something is not yet switched on it says so.
- Two servers, both run by the developer: your NexusAGI (by default nexusagi.thetooltuckshop.rs, changeable in the app’s settings) and NexusHub (api.thetooltuckshop.rs) for sign-in, the coin ledger and the chat hop. There is no third-party backend. Everything is sent over HTTPS, and release builds refuse unencrypted connections except to the device itself.
- Advertising (free accounts only): the app contains Google’s Google Mobile Ads (AdMob) SDK and Google’s User Messaging Platform (UMP) consent SDK. Free accounts see a banner between messages and an occasional full-screen ad; any paid plan removes all ads. Where the law requires consent (the EEA, the UK and similar), the UMP consent form is shown before any ad is requested, and the ads SDK is started only once consent allows ad requests. Settings → Plan and ads shows “Privacy options” where you can change your choice. When ads are shown, Google collects data under its own policy, shared with Google for advertising, analytics and fraud prevention: your advertising ID, your IP address (so approximate location), device and app information, ad interactions and crash/performance diagnostics. You can reset or delete the advertising ID in your Android settings. The Google Play Data safety form and the advertising-ID declaration are completed to match this section.
- No other analytics: apart from Google’s ads SDK the app has no analytics SDK, no crash reporter and no notifications. If that changes, this section and the Data safety form are updated before the release that changes it. The app does nothing until you sign in.
| What the app collects | Why | Where it goes | Optional? |
|---|---|---|---|
| Install identifier: a random id made on first launch (not the Android advertising id, IMEI or serial) | To tie this installation to your account, list your devices and keep a coin ledger | Your NexusAGI and NexusHub | No |
| Account name and session token | To sign you in. The token is kept in Android EncryptedSharedPreferences, or in memory only if that is unavailable, never in plain text | Stays on the device; sent as an authentication header | No |
| Messages you send in chat and in a mirrored terminal | They are the content of the feature; NexusAGI needs them to answer | Your NexusAGI and NexusHub | No |
| Device model, Android version, app version | Shown in your sign-in device list so an unfamiliar sign-in is visible | Your NexusAGI | No |
| IP address | Recorded by the server against a sign-in for the same device list; the app never sends an address itself | Your NexusAGI | No |
| Device-key account: a public key (the private key stays in the Android Keystore), the install id and a trial key | To create a free account with no typing, one account per installation, and to prevent abuse (per-IP limits) | Your NexusAGI and NexusHub | No |
| Advertising ID, IP address, device and app information, ad interactions and diagnostics, collected by Google’s Mobile Ads SDK (free accounts only) | To show and measure ads, and for fraud prevention | Google (AdMob), under Google’s policies; consent via UMP where required | Yes (you can decline in the consent form or reset the advertising ID) |
| A short voice sample and a few front-camera frames | Owner verification only (see below) | Your NexusAGI, for one decision | Yes |
| Subscription state from Google Play Billing | To tell whether the optional subscription is active. Google Play is the seller and holds your payment details; the developer never sees them | Google Play; the resulting flag is reported to NexusHub | Yes |
Camera and microphone. The camera is also used to scan a QR code, which stays on your device, and the microphone for voice input, which is processed by your device or Google’s speech service and is not collected by NexusAGI. Apart from those, the app declares the camera and microphone permissions for owner verification, where the person holding the phone proves to their own NexusAGI that they are its owner before owner-only content is shown. It happens only when you start a verification. The server sends a flash pattern; the screen plays it back as light while the app records a short audio sample and a few still frames from the front camera. Audio and frames are held in memory only (never written to a file, the gallery or a cache), sent once over HTTPS to your NexusAGI, which answers yes or no, and are not kept afterwards. The result is valid for the session only. The app stores no face template, voiceprint or biometric profile. You can decline both permissions: the app keeps working and only the owner-verified pages stay out of reach. Where owner verification is not switched on for your NexusAGI, the Verify page says so and nothing is uploaded.
Permissions the app declares for ads: the advertising-ID permission (added by Google’s ads SDK). Permissions the app does not ask for: location, contacts, SMS or call log, external storage, accessibility service, background location, and any permission to run commands on a computer (the terminal mirror can read and send a message only).
Keeping and deleting: messages, sign-in rows and the coin ledger stay on the server so message history and the device list work; the sign-in ledger keeps a limited number of rows per account and device. Signing out clears the session on the device. To remove your account and its rows, use Delete your account.
Children: the app is not directed at children, is not in a Google Play “designed for families” programme and has no content or feature aimed at them.
Children
NexusAGI is not directed at children under 13, and we do not knowingly collect their information. If you believe a child has given us information, write to us and we will delete it.
Security
Passwords are stored as hashes, sessions use random tokens, connections use HTTPS, and new browsers must be approved from a signed-in device before they get full access. No online service is perfectly secure; tell us at once if you suspect a problem.
Changes
If we change this policy we update the date below and, for important changes, try to tell signed-in users. Last updated: 10 October 2026.