Privacy policy

Scope

This notice covers package io.nexalune.securedesk, its on-device tools, the provisioning API, and traffic processed while its optional free VPN is connected. The eventual publisher will be the organization identified on the Google Play listing.

What an active route processes

Nexalune uses Android VpnService and WireGuard to carry IPv4 traffic through Bucharest, Romania. Routing necessarily processes the device's source IP, destination addresses, DNS questions, and packet contents in transit. Those values are used only to forward the requested connection and are not logged, retained, inspected for profiling, sold, or shared for advertising.

The endpoint uses a local Unbound resolver with query logging disabled. IPv6 is blocked while the IPv4-only route is active so traffic cannot bypass it.

Material handled on this device

Nexalune's file navigator, search, PDF renderer, Office/OpenDocument parser, duplicate comparison, cleanup review, and package inspection run locally. File names, paths, document bodies, metadata, hashes, and cleanup selections are not uploaded to the VPN node or website host.

APK packages

Nexalune can inspect APK packages already chosen from local storage. It does not download APKs. After a separate explanation and explicit user action, Android's Install unknown apps control and system package installer govern the selected-file handoff. The app does not silently install, self-update, or modify other packages.

Peer record and deletion

The app sends a randomly generated WireGuard public key to link.nexalunevpn.com. The node retains that key and a private tunnel address until the user chooses the in-app profile-deletion control. The matching private key is encrypted on the Android device and is never sent to the policy website. Source-IP logs, connection timestamps, bandwidth totals, visited destinations, traffic contents, and DNS logs are not retained.

Choices and requests

No account is required. Users may disconnect, revoke Android permissions, remove the server peer in the app, or uninstall. Because route logs and local document data are not collected, there is no corresponding history to export or delete. Questions should ultimately go to a monitored address at this domain; that mailbox is not yet configured because publisher details remain outstanding.

Services and recipients

The VPN runs on an isolated BitLaunch-arranged virtual server in Bucharest, Romania. Cloudflare supplies DNS and hosts this website, policy, and reviewer videos; Cloudflare does not operate the VPN tunnel. The app includes no advertising, analytics, crash-reporting, social, billing, or account SDK. Personal data is not sold.

Children and changes

The service is not directed to children under 13. A material policy change will be posted at this URL with a revised effective date.