Privacy Policy

Nexa — voice assistant for Android (fi.nouri.nexa) · Last updated: 11 November 2026

1. Who is responsible

Nexa is developed by Ho.nour. Contact: ho.nouri.fi@gmail.com. Because Nexa does not collect personal data on any server of ours, we act only as the publisher of the app; for data sent to Google (see section 4), Google is the provider of that service under its own terms.

2. Versions of Nexa

Nexa is published in several app stores. They work the same way, with these differences:

3. Data that stays on your phone

The following is stored only in Nexa’s private app storage on your device. It is not uploaded anywhere by Nexa and is deleted when you uninstall the app or clear its data.

• Your notes, tasks and the facts you asked Nexa to remember.
• Settings, including Nexa’s name, greeting, voice, language and your Gemini API key.
• Names Nexa learned for your apps (for example that “Blu” means a particular app).
• “Only my voice” voice print (optional): if you enrol your voice, Nexa stores a numerical voice signature computed on the phone from five short recordings. The recordings themselves are not kept. It is used only on the phone to check whether a call or command is spoken by you.
• “Teach your call” (optional): the text forms of Nexa’s name that the offline recogniser heard when you trained it, and a voice signature of those calls. No audio is kept.
• Wake-word diagnostics: a short local log (last 60 lines) of whether the name listener is running and of very short phrases (up to four words) it heard, so you can see why Nexa did or did not wake. It never contains longer speech. You can view and clear it in Settings → System.
• Game progress of the built-in “Nexa Pet” game (coins, items, needs, outfits).
• Crash report: if Nexa crashes, the technical error is kept locally and shown to you in the app; it is not sent anywhere.

The text of a conversation is held only in memory while Nexa is running; Nexa keeps no chat history.

4. Data sent to Google (online brain)

If you choose the online brain and enter your own Gemini API key, then only while a conversation is active, Nexa sends to Google’s Gemini API (generativelanguage.googleapis.com):

• the audio of what you say and the messages you type;
• the results of actions Nexa performs for you (for example “alarm set for 7:00”, a contact name it found, your tasks when you ask for them, things you asked it to remember so it can use them);
• camera images, only while you have asked Nexa to look and the camera screen is open;
• web search results Nexa reads for you (versions with Accessibility);
• Google Play version: when you ask about the screen you are on (for example “what does this page mean?”), the text and a picture of the current screen that Android hands to the default assistant when you open it. Android gives this to Nexa only when you open Nexa as your assistant; it is kept in memory for at most 10 minutes and sent to Gemini only when you ask about the screen;
• in versions with Accessibility, and only when a task needs it: the text of the screen, a picture of the screen when you ask Nexa to look at it, and notification contents only when you ask, one time.

Before the first online conversation Nexa shows a screen explaining this and asks for your agreement; if you do not agree, you can use the offline brain, which sends nothing. The data goes straight from your phone to Google, using your key; it never passes through the developer. Google processes it under the Gemini API Additional Terms and the Google Privacy Policy. With a free (unpaid) key, Google may use the content to improve its products and human reviewers may read it; Google states that this does not apply to users in the EEA, Switzerland and the UK. Do not tell Nexa passwords, card numbers or other secrets while the online brain is on. Google’s Gemini API is for people aged 18 or over, so the online brain is meant for adults.

5. Downloads

Some components are downloaded once and then work offline:

• the offline speech recognition model and the Persian voice, from nouri.fi (Nexa’s own server);
• the voice-check model, from GitHub; the optional offline AI model (Gemma), from Hugging Face.

Like any download, the server sees your IP address and the file requested. On nouri.fi this appears only in the standard web-server log, used to keep the server running, and is deleted after 14 days. Nothing else is sent.

6. Accessibility service (not in the Google Play version)

In versions that include it, Nexa uses Android’s Accessibility API only to carry out what you ask by voice: open and read the screen, tap, type, scroll and go back, in the app you are using. It is turned off until you enable it yourself in Android settings.

• Nexa does not record the screen and does not keep what it reads.
• Notification contents are hidden from it, unless you ask, and then only once.
• Before anything that sends, pays, buys, deletes or posts, Nexa asks you to confirm.
• Sensitive apps: when you open a banking, payment, password or 2-factor app (detected on the phone, or on your own block list), Nexa switches itself off completely — no listening, no screen access — until you leave that app.

7. Microphone and camera

• The microphone is used during a conversation. If you turn on calling Nexa by name, a foreground service (with a permanent notification) listens for the name offline, on the phone; nothing is recorded or sent while it waits for the name.
• Floating avatar (Google Play version): if you allow “display over other apps”, Nexa shows its avatar over other apps while it is on, with a permanent notification, so you can start it with one tap. It does not read or record anything on screen.
• The camera is used only when you ask Nexa to look, with an orange “Nexa is looking” label on screen; closing it stops the camera at once.

8. Reporting an AI answer

On the Activity page you can report an inappropriate answer from Nexa. This opens your e-mail app with the selected answer filled in, addressed to the developer; nothing is sent unless you send that e-mail yourself.

9. Calls, messages, contacts and other apps

For calls, SMS, calendar events, maps and web searches, Nexa opens the right app with the details filled in; you press call, send or save. Nexa does not send SMS or place calls by itself. Contacts are read on the phone only to find the person you asked for. If you choose a helper AI app (for example ChatGPT), a question is passed to that app only when you ask, and that app’s own privacy policy applies.

10. Purchases (Google Play version)

Game coin packs are sold through Google Play Billing. Payment is handled entirely by Google; Nexa receives only a confirmation that the purchase was completed, and adds the coins to your game on the phone. Nexa never sees your payment details. Other versions do not offer purchases.

11. Children

Nexa is not directed at children. The online brain relies on Google’s Gemini API, which is for people aged 18 or over.

12. Security

Data stored by Nexa is kept in Android’s private app storage, which other apps cannot read. Connections to Google and to the download servers use HTTPS.

13. Your choices and rights

• Delete any note, task or remembered fact in the app; change or remove your Gemini API key; forget your voice print in “Only my voice”.
• Turn any permission off in Android settings, stop Nexa from its main button, or uninstall it to erase everything it stored.
• Because the developer holds no personal data about you, there is nothing for us to export or delete; for data sent to Google, use Google’s privacy tools. You may still contact us with any question.

14. Changes

If this policy changes, the new version will be published on this page with a new date.