Last updated: 13 November 2026
This policy covers the nexplorer app for Android (package app.nexplorer) as distributed on Google Play.
nexplorer asks for All files access (MANAGE_EXTERNAL_STORAGE) because managing files across the whole
shared storage — browsing, copying, moving, renaming, deleting, compressing and encrypting — is its core function.
Files are read and changed on the device only when you ask for it. Storage analysis, folder sizes, thumbnails and search run on the device.
When you add a network place (SMB, SFTP, WebDAV, FTP / FTPS, S3-compatible storage or a Synology NAS), nexplorer connects directly from the device to the server you entered. The address, user name and settings are stored in the app's private storage on the device. Passwords and keys are encrypted with a key held in the Android Keystore (AES-256-GCM) and are excluded from device backups, so they never leave the device.
For S3-compatible storage, the access key and the secret key you enter are stored the same way and are sent only to the storage endpoint you chose. Plain FTP (without FTPS) and plain HTTP WebDAV are not encrypted: the password and the files can be read by others on the network path. nexplorer uses them only if you choose them.
If you connect a Synology NAS by QuickConnect ID, nexplorer asks Synology's QuickConnect service where the NAS can be reached. When the NAS is not on the same network, the connection may pass through Synology's relay servers, as in Synology's own apps. That service is operated by Synology under its own privacy policy.
When you connect a Google account, nexplorer asks for the https://www.googleapis.com/auth/drive scope so it can list,
open, upload, rename, move and delete your Drive files — the same operations it offers for files on the device.
nexplorer's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
When you connect a Microsoft account, nexplorer asks for Files.ReadWrite (your OneDrive files),
User.Read (only to show the account name next to the connection) and offline_access (to stay signed in).
Sign-in happens on Microsoft's page in the browser; nexplorer never sees your password. The refresh token is encrypted on the device
like other passwords, and OneDrive data goes directly between your device and Microsoft's servers.
When you connect one of these accounts, nexplorer gets access to the files in it so it can list, open, upload, rename, move and delete them, and reads the account's email address only to show it next to the connection.
While nexplorer is open, it announces itself on the local network (mDNS / NSD) under the device's name so your other devices running nexplorer can find it. It stops when the app is closed. Devices connect only after you pair them with a 6-digit code and approve the pairing on the other screen; after that, all traffic between them is encrypted end to end (AES-256-GCM) and files are offered only with your approval. Nothing passes through the internet or any server.
The purchase and the payment are handled by Google Play; nexplorer never sees your payment details. To check that the subscription is valid, the app sends our verification server: the purchase token Google Play gave it, a random identifier of the installation (created by the app; it does not identify the device or you), and a Play Integrity token that confirms the app was installed from Google Play. The server asks Google whether the subscription is valid and returns a signed confirmation to the app. The server does not store this data and does not write it to logs, and it is not passed to anyone other than Google. The confirmation is kept on the device only. No information about your files, connections or use of the app is sent.
REQUEST_INSTALL_PACKAGES) — to let you install an APK file you open in the file manager.
Android asks you to confirm every installation.com.android.vending.BILLING) — to buy and restore the nexplorer Pro subscription through Google Play.When a file has to be copied to open it (for example an image from a server), the copy is kept in the app's private cache and removed later. Encrypted files and encrypted folders are encrypted and decrypted on the device; their passwords are not stored by the app.
Remove a connection in the app to delete its saved details. Uninstalling nexplorer deletes all of its settings, saved connections and the Keystore key. You can also revoke access at any time at myaccount.google.com/permissions (Google) and account.live.com/consent/Manage (Microsoft), and in the account security settings of Dropbox and pCloud.
nexplorer is a general-purpose tool and is not directed at children.
If this policy changes, the new version will be posted on this page with a new date. A change that affects what data the app handles will be made before the app version that requires it is released.