Privacy Policy

Last updated: October 16, 2026 · Applies to the Android app Nearby Storage Share (package com.nearbyshare)

1. The short version

No accounts, no servers, no ads, no analytics. We do not run any server that receives your files or personal data.
Files and settings stay on the phones and PCs that use the app. Devices talk to each other directly - over Bluetooth / Wi-Fi when they are near each other, or over the same Wi-Fi or hotspot network - never through a server of ours.
When you host, other people's files are stored on your phone, and you (the owner of that phone) can see and delete them. When you upload to someone else's phone, that person can see and delete your files.
We do not sell your data, and we do not share it with advertisers or data brokers.
You can erase everything by deleting the app's data or uninstalling it.

2. Who is responsible

Nearby Storage Share is provided by Sk Jasimudin (Todayintech Solution) ("we", "us"). Because the app has no accounts or servers, we do not receive or hold the files, names or settings described below. They are held on your own devices, and on the devices you connect to.

3. Information the app handles

Information	Where it is kept	Why	Leaves the phone?
Device name (defaults to your phone's model; you can change it) and a random device ID created by the app	On your phone	So hosts and guests can recognize each other	Yes - sent to the devices you connect to. While sharing is on, a host's name and ID are also visible to nearby devices that are scanning, and are broadcast on the local Wi-Fi/hotspot network so other devices there can find it
Pairing keys for hosts and guests you approved	On your phone, encrypted with a key held in the Android Keystore	To prove it is the same device on reconnect, without asking you to pair again	Only during pairing, over the encrypted connection
Fingerprints of the TLS certificates of devices you paired with over a Wi-Fi/hotspot network	On your phone or PC (a host keeps its guests' fingerprints; a guest keeps its hosts')	To recognise a device when it reconnects and to detect impersonation	Only during pairing, to the device you are pairing with
Windows app: this PC's name, a random device ID, its TLS key and certificate, and the list of paired hosts with their last network address	In the folder `%APPDATA%\NearbyStorageShare` on your PC	To identify this PC, reconnect without a code and show your paired hosts	Only the name, ID and certificate are shown to a host you connect to
Windows app as a host: the list of paired guest devices with their permissions and limits, file records, transfer history and a security log	In the folder `%APPDATA%\NearbyStorageShare\host` on the host PC (a small SQLite database)	To enforce permissions and storage limits and to show you what happened	Only what a connected guest needs (its own files and limits)
Windows app as a host: files guests upload	Hidden under `%APPDATA%\NearbyStorageShare\host\shared_storage`, or in the folder the host chose (one subfolder per guest)	The purpose of the app	Only to the guest that uploaded them
Files you share or upload, and folders you create	On the host's phone: in the app's private storage, or in a folder the host chose	The purpose of the app	Only to the host or guest you are connected to
File details: name, size, folder, SHA-256 checksum, dates	On the host's phone (and the guest's transfer list)	To list files, check them for corruption and enforce limits	Only to the connected device
Permissions and limits for each approved device (read, upload, overwrite, delete, storage limit, expiry)	On the host's phone	To enforce what each guest is allowed to do	The guest is told what it may do
Transfer history (file name, size, which device, result, error text)	On each phone involved	To show progress and history	No
Security log (e.g. "pairing approved", "permission denied") with time stamps	On the host's phone	So the host can review activity	No
Temporary copies of files you open or preview	In the app's cache on the phone that opened them	To open the file in another app	No; removed automatically after about a day
Settings (storage limit, who may connect, default permissions, chosen folder)	On your phone	To remember your choices	No

The app does not read your contacts, messages, photos (except files you pick), microphone, camera or precise location, and it does not create an advertising ID or a user profile.

4. What the other person can see

If you are the host: you can see the name and random ID of each phone that connects, the names, sizes and dates of the files it stores, and its activity in the security log. In "Visible folder" mode its files are saved in a folder you chose with their real names, so you and any app with access to that folder can read, change or delete them.
If you are a guest: the host can see your device name, your random ID, and the names, sizes and contents of the files you upload. Only upload what you are comfortable with that person having. The host can delete your files at any time.
Guests are kept apart: one guest cannot see another guest's files through the app.

5. Android permissions and why we ask

Permission	Reason
Bluetooth (scan, advertise, connect), Nearby Wi-Fi devices, Wi-Fi and network state / change	To find and connect to nearby phones directly.
Internet / network access and Wi-Fi multicast	To connect directly to phones and PCs on the same local network and to find them. The app does not contact any server of ours, and it sends your files only to the device you connect to.
Location (approximate and precise)	Android and Google's Nearby technology require this permission to scan for nearby devices on many versions. The app does not read, store or send your location.
Notifications	To show hosting status, connection status and transfer progress (0-100%). Optional: transfers work without it.
Foreground services	To keep hosting, an active connection or a transfer running while the app is not on screen. You always see a notification and can stop it.
Access to a folder you pick	Only if you choose "Visible folder" or save/open files. Android asks you each time; the app can only reach the folder you select.

6. How data is protected

Devices connect either through Google's Nearby Connections (encrypted) or over the local network using TLS (versions 1.2/1.3) with a certificate on each device. When two devices pair for the first time, both show the same 6-digit code that you compare before approving; after that each device recognises the other by its pinned certificate. The code is derived so that an attacker in the middle cannot make the two screens agree.
After pairing, each device proves its identity with a shared secret on every reconnect. The secret is stored encrypted with the Android Keystore.
The host checks every request against what that guest is allowed to do, so a modified app cannot do more than the host permits. Files are checked with a SHA-256 checksum, and incomplete uploads never appear as finished files.
Backups are switched off for the app's data so files and keys are not copied to cloud backups or transferred to a new phone automatically.
The app does not add its own encryption to files at rest. In private storage they are protected by Android's app sandbox and your phone's own storage encryption. No method of storage or transmission is completely secure.

7. Third-party services

The app uses Google Play services (Nearby Connections) to find and connect to nearby devices. This is a Google component on your phone and is governed by Google's Privacy Policy; Google may process connection-related information as described there. We do not control it. The app contains no advertising or analytics libraries and no other third-party data collection. See the open-source notices for the libraries used.

8. What we do not do

We do not collect, receive or store your files, device names or usage data on any server.
We do not sell, rent or trade personal information, and we do not use it for advertising or profiling.
We do not track you across apps or websites.

9. Keeping and deleting data

Data stays on a phone until you delete it. In the app you can delete files (where permitted), revoke or block a device, clear finished transfers, or stop sharing at any time.
On a PC, delete the folder %APPDATA%\NearbyStorageShare (and uninstall the app) to remove everything the Windows app holds.
To remove everything the app holds on a phone, use Android Settings → Apps → Nearby Storage Share → Storage → Clear data, or uninstall the app.
Files you uploaded to another person's phone are on their device; ask them to delete them, or delete them yourself if the host allowed deleting.
If you chose a visible folder, files in it are ordinary files and stay there until deleted, even if you uninstall the app.

10. Your choices and rights

Because we do not hold your data on any server, you control it directly on your devices as described above. If you are in India, the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 apply to personal data where relevant, and you may have rights to obtain information about your personal data, to have it corrected or erased, to withdraw consent, and to have a grievance addressed. People in other regions (for example under the GDPR, UK GDPR or the California Consumer Privacy Act) may have similar rights. To exercise a right or raise a concern, write to contact@todayintech.in; we will acknowledge your request and respond within 30 days.

11. Children

The app is not intended for anyone under 18. Under Indian law a minor cannot enter into a binding contract and a parent or legal guardian's consent is needed to process a child's personal data, so a parent or guardian should install and manage the app for a minor. We do not knowingly collect personal information from children. Because the app lets people store files on each other's phones, a parent or guardian should supervise any use by a minor.

12. Changes to this policy

If the way the app handles data changes, we will update this page and the "Last updated" date. Significant changes will also be described in the app's release notes.

13. Contact

Sk Jasimudin (Todayintech Solution)
Email: contact@todayintech.in
This is also the contact for privacy complaints and grievances; we reply within 30 days.