Your Privacy Matters The Most, Explore Our Privacy Policy, Terms And Conditions
Listen To AI Summery Of This Page
Table Of Contents
- 1. Introduction & Scope
- 2. Who We Are
- 3. Our Core Commitment
- 4. Information We Do Not Collect
- 5. How Our Apps Work — Offline & Account-Based
- 6. Data Storage & Security
- 7. Encryption & Data Protection
- 8. Third-Party Services & Sharing
- 9. Cookies & Tracking Technologies
- 10. Your Rights & Data Deletion
- 11. Children's Privacy
- 12. Changes to This Policy
- 13. Governing Law & Jurisdiction
- 14. Contact US
Introduction & Scope
This Privacy Policy (“Policy”) describes how Nexus Software (“Nexus Cloud”, “we”, “us”, or “our”) handles information in connection with our website, platform, and all applications we develop and distribute.
This Policy applies universally to:
- The Nexus Cloud website at nexuscloud.uk
- The Nexus Cloud platform accessible at platform.nexuscloud.uk
- All mobile, desktop, and web applications developed and published by Nexus Cloud, whether distributed through app stores, our website, or any other channel
- Any future products or services released under the Nexus Cloud brand
By accessing or using any Nexus Cloud product or service, you acknowledge that you have read, understood, and agree to the practices described in this Policy. If you do not agree with this Policy, please discontinue use of our products and services.
This Policy is intended to be simple, honest, and easy to understand. We believe you have a right to know exactly how your information is handled, and we have written this document accordingly.
Who We Are
Nexus Cloud is a software development company based in Sri Lanka, operating under the registered business name Nexus Software. We build applications and platform services for general consumers and businesses. Registered Business Name: Nexus Software. Website: https://nexuscloud.uk. Platform: https://platform.nexuscloud.uk. Address: 68/12 Nishshanka Lane, Wehera, Kurunegala, Sri Lanka. Contact (General): +94 778 859 081. Contact (International): +1 555 969 1466. For any privacy-related enquiries, please refer to Section 14 (Contact Us) of this Policy.
Our Core Commitment
At Nexus Cloud, your privacy is not an afterthought — it is a design principle built into everything we create.
Our core commitment to you is as follows:
✔ We do NOT collect personal information about you.
✔ We do NOT store personal information on our servers.
✔ We do NOT sell your data to any third party.
✔ We do NOT share your data with advertisers, brokers, or external organisations.
✔ We do NOT use your data for profiling, targeting, or marketing purposes.
✔ All app data that requires cloud storage is encrypted and secured.
✔ You retain full control over your data at all times.
✔ You can delete your data at any time, either by yourself or by contacting us.
These commitments apply to every Nexus Cloud product, without exception.
Information We Do Not Collect
We want to be completely transparent about what we do not collect. The following categories of information are never collected, stored, or processed by Nexus Cloud in connection with any of our products or services: Personal Identifiers such as full name or display name, email address, phone number, home or mailing address, date of birth or age, national identification numbers, passport or government-issued document information, and profile photographs or biometric identifiers. Device & Network Information such as IP addresses (not logged or stored), device model, manufacturer, or hardware identifiers, operating system version, browser type or version, MAC addresses or similar hardware identifiers, and SIM card or carrier information. Location Data including GPS or precise location coordinates, approximate location derived from IP or network, and location history or movement patterns. Behavioural & Usage Data such as pages or screens visited within our apps, features used or buttons clicked, session duration or frequency of use, search queries made within our apps, and in-app purchase history or browsing behaviour. Communications including messages, notes, or content you create within apps (which stays on your device or in your encrypted personal storage — see Section 6), and support conversations beyond what is necessary to resolve your specific enquiry. Financial Information such as credit or debit card numbers, bank account details, and payment history or transaction records (which are processed by third-party payment providers independently — see Section 8). We do not build user profiles, segment users into advertising audiences, or derive inferences about individuals from any data, and there is no “shadow profile” associated with your use of Nexus Cloud products.
How Our Apps Work — Offline & Account-Based
Nexus Cloud develops two categories of applications, each with different data handling characteristics.
Fully Offline Apps: Some Nexus apps are designed to function entirely without an internet connection and without any account registration. For these apps, no account creation is required, no data is transmitted to Nexus Cloud or any external server, and all data you create or store within the app remains solely on your local device. We have no access to, and receive no copy of, any information within these apps. When you uninstall a fully offline app, all associated local data is removed from your device in accordance with your operating system’s standard behaviour. Each Nexus app’s product page or in-app description will clearly indicate whether it is a fully offline application.
Account-Based Apps: Some Nexus apps offer features that require you to create an account and connect to the internet. These features may include cloud backup of your app data, cross-device synchronisation, access to shared or collaborative features, and storing your settings or preferences across devices. For account-based apps, you will be clearly informed at the point of registration that an account is required for specific features. Account creation may involve an email address or a sign-in method (such as Google or Apple sign-in) for the sole purpose of authenticating your identity within the app. We do not store your email address or sign-in credentials on our own servers. Authentication is handled by trusted identity providers (see Section 8). Your app data (such as saved content, preferences, or files) is stored securely in encrypted cloud storage under an anonymous account identifier — not linked to your name or personal details. You may use account-based apps without enabling cloud features, and core functionality remains available without cloud connectivity where technically feasible.
Data Storage & Security
For apps that store data in the cloud, Nexus Cloud uses trusted, enterprise-grade database infrastructure including Google Firebase and equivalent platforms that meet high security and compliance standards.
KEY PRINCIPLES OF OUR DATA STORAGE:
Anonymous Account Identifiers: Any data stored in the cloud is associated with an anonymous, randomly generated account identifier. This identifier cannot be used to identify you as a person. It is not linked to your name, email address, phone number, or any other personal detail.
Data Minimisation: We store only the minimum data necessary for the app to function as intended. We do not store data speculatively or “just in case” it might be useful later.
No Personal Information in Storage: Personal information is never written into our databases. If an app feature requires authentication, the credential management is handled by the identity provider (e.g., Google or Apple), not by Nexus Cloud’s own storage systems.
Access Controls: Access to our database infrastructure is restricted to authorised Nexus Cloud engineers and is governed by strict access control policies. Databases are not publicly accessible and are protected by network-level security rules.
Data Residency: Cloud data may be stored on servers located in multiple regions depending on the infrastructure provider. Firebase and equivalent platforms operate data centres with strong security certifications (including ISO 27001 and SOC 2). We do not have dedicated agreements for specific data residency at this time; if this is important to you, please contact us.
Retention: App data is retained for as long as your account remains active or until you request deletion. We do not retain user data beyond the purposes for which it was stored. Upon account deletion, data is permanently removed from our live systems within a reasonable period. Infrastructure-level backups, which are retained for a standard rotation window of up to 30 days, are purged as part of the normal backup cycle.
Encryption & Data Protection
All data handled by Nexus Cloud — whether in transit or at rest — is protected using industry-standard encryption practices.
In Transit: All communication between your device and our servers uses Transport Layer Security (TLS). This ensures that data travelling over the internet cannot be intercepted or read by third parties.
At Rest: Data stored in our cloud databases is encrypted at rest using infrastructure-level encryption provided by our database platform (e.g., AES-256 or equivalent). This means that even in the unlikely event of unauthorised physical access to storage hardware, your data remains unreadable.
Authentication Security: For account-based apps, authentication tokens are handled securely. We do not store raw passwords. Authentication flows using third-party identity providers (Google, Apple) rely on those providers’ own secure token systems, which are industry-leading in security.
No Sensitive Personal Data Stored: Because we do not store personal information in the first place, the risk exposure associated with any hypothetical data breach is significantly reduced. There is no personal profile to expose.
Third-Party Services & Sharing
Nexus Cloud does not sell, rent, trade, or share any data with third parties for commercial, advertising, or any other purpose.
However, in order to deliver functional app experiences, we integrate with a small number of trusted infrastructure and platform providers. These are not data-sharing relationships — they are technical service relationships, and they are described below for full transparency.
Google Firebase: Used for cloud database storage and authentication services. Purpose is secure storage of anonymised app data and optional sign-in functionality. Data shared includes an anonymous account identifier and app data you choose to store. No personal information is shared with Nexus Cloud’s systems. Firebase Privacy Policy: https://firebase.google.com/support/privacy
Google / Apple Sign-In (optional): Used for account authentication only. Purpose is allowing you to sign in securely without creating a password. Data shared includes an anonymised token provided by Google or Apple; no personal details are passed to Nexus Cloud’s systems. No personal information is shared. Google Privacy Policy: https://policies.google.com/privacy. Apple Privacy Policy: https://www.apple.com/legal/privacy/
Payment Processors (where applicable): Where Nexus Cloud products include paid features or subscriptions, payments are processed by third-party payment providers (such as Stripe or the relevant app store platform). Nexus Cloud does not receive, store, or process your payment card details. Payment processing is governed entirely by the respective provider’s own privacy policy.
IMPORTANT: None of the above integrations result in your personal information being stored by Nexus Cloud. We do not receive personal data back from these providers beyond what is strictly necessary for the technical function described.
We do not integrate with advertising networks, data brokers, marketing platforms, social media tracking pixels, or any analytics services that identify or profile individual users.
Cookies & Tracking Technologies
Website (nexuscloud.uk & platform.nexuscloud.uk): Our websites do not use advertising cookies, tracking pixels, or third-party analytics scripts that identify individual visitors.
We may use strictly necessary functional cookies for the following limited purposes: maintaining your session state while you are signed in (session cookies, discarded when your browser is closed), and remembering your display preferences (e.g., theme selection) for the duration of your visit. These cookies contain no personal information and are not shared with any third party.
We do not use Google Analytics or equivalent visitor tracking services, Facebook Pixel or social media tracking, advertising or remarketing cookies, or persistent cross-site tracking cookies.
Mobile & Desktop Apps: Native mobile and desktop applications do not use browser cookies. Any local storage used within an app (such as saving your preferences on-device) is handled by the operating system’s standard local storage mechanisms and remains solely on your device.
Your Rights & Data Deletion
You have the following rights with respect to any data associated with your Nexus Cloud account:
Right to Access: You may request a summary of what data (if any) is associated with your account at any time by contacting us at the details in Section 14.
Right to Deletion: You may delete your data in one of two ways. Option A — Self-Service (recommended): Many Nexus apps include a built-in option to delete your account and all associated data directly within the app. Look for “Delete Account” or “Clear Data” within the app’s settings. Option B — Request Deletion: If you are unable to delete your data through the app, contact us (see Section 14) and we will permanently delete all data associated with your account within 14 business days. We will confirm when the deletion has been completed.
Right to Correction: Since we do not store personal information, there is generally no personal data to correct. If you believe app data stored under your account is inaccurate, you may update it within the app or contact us.
Right to Portability: Where technically feasible, we can provide you with an export of the app data stored under your account in a machine-readable format. Please contact us to request this.
Right to Object / Opt Out: Because we do not engage in profiling, marketing, or data-driven decision making about individuals, there is no automated processing to object to. If this changes, we will update this Policy and provide appropriate opt-out mechanisms.
HOW TO EXERCISE YOUR RIGHTS: You may exercise any of the above rights by using the in-app self-service options (fastest), emailing us (see Section 14), or calling us during business hours (see Section 14). We will respond to all requests within 14 business days. We will not charge any fee for exercising your rights. We may ask you to verify your identity before processing a deletion or export request.
LEGAL BASIS (WHERE APPLICABLE): If you are located in a jurisdiction with data protection regulations (such as the European Union’s General Data Protection Regulation (GDPR), the UK GDPR, or equivalent legislation), please note that we process only the minimum data required to deliver the services you have requested (legitimate interest / contractual necessity). Since we do not collect personal information, most regulatory obligations around consent for personal data processing do not arise in our case. We are committed to complying with applicable data protection laws to the extent that our processing activities fall within their scope. If you are an EU or UK resident and believe we have not addressed your rights adequately, you have the right to lodge a complaint with your local supervisory authority.
Children's Privacy
Nexus Cloud products are not directed at children under the age of 13, and we do not knowingly collect any information from children under 13.
If you believe that a child under 13 has created a Nexus Cloud account or has had information associated with an account in error, please contact us immediately at the details provided in Section 14 and we will take prompt action to remove any associated data.
For users between the ages of 13 and 18, we recommend parental or guardian oversight when using account-based features. Since we do not collect personal information, the risk to younger users is minimal, but we encourage responsible and supervised use.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our products, features, or services, updates to applicable laws or regulations, changes in the third-party services we rely upon, and improvements in our security or data handling practices.
WHEN WE UPDATE THIS POLICY:
The effective date at the top of this document will be updated. Significant changes will be communicated via a notice on our website (nexuscloud.uk) and/or within the relevant Nexus apps. For material changes that affect your rights, we will make reasonable efforts to notify you in advance.
We encourage you to review this Policy periodically. Continued use of any Nexus Cloud product after the effective date of a revised Policy constitutes your acceptance of the updated terms.
Previous versions of this Policy are available upon request.
Governing Law & Jurisdiction
This Privacy Policy is governed by and construed in accordance with the laws of Sri Lanka.
Any disputes arising in connection with this Policy, to the extent not resolved informally, shall be subject to the jurisdiction of the courts of Sri Lanka.
Users located in other jurisdictions (including the European Union, United Kingdom, United States, or Australia) acknowledge that Nexus Cloud makes reasonable efforts to comply with applicable data protection laws in those jurisdictions. Where the laws of your jurisdiction provide you with rights in addition to those described in Section 10, we will endeavour to honour those rights to the extent practicable.
Nothing in this section limits the rights you may have under your local consumer protection or privacy laws.
Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or your data, please reach out to us through any of the following channels:
Business Name: Nexus Software (Nexus Cloud)
Website: https://nexuscloud.uk
Platform: https://platform.nexuscloud.uk
Postal Address:
Nexus Software
68/12 Nishshanka Lane
Wehera, Kurunegala
Sri Lanka
Phone (LK): +94 778 859 081
Phone (INT): +1 555 969 1466
Business Hours: Monday – Friday, 09:00 AM – 09:00 PM (Sri Lanka Time). Saturday – Sunday: Closed.
We aim to respond to all privacy-related enquiries within 5 business days and to all data deletion or export requests within 14 business days.