Overview
NexusCode ("we," "our," or "us") builds phone-based OBD-II diagnostic tools. This policy explains what data we collect, why we collect it, and what control you have over it. We do not sell your data. We do not run advertising trackers. We collect only what the app needs to function.
Data We Collect
The table below summarizes the data categories relevant to the NexusCode app and whether they are collected.
| Data Category | Collected? | Why / How |
|---|---|---|
| Vehicle OBD-II Data | YES | Read from your vehicle via BLE/WiFi OBD adapter. Stored locally on device and optionally synced to your account for scan history. |
| Fault Codes (DTCs) | YES | Stored in our database to provide plain-English explanations and fix guidance. |
| Camera / Photos | NO | The app does not access your camera or photo library. Camera is not required for OBD-II scanning. |
| Location | NO | We do not collect GPS or location data. Vehicle location cannot be determined from OBD-II codes. |
| Device Identifier | YES | Used to associate scans with your account. Stored securely; not used for advertising. |
| Email / Account | YES | Collected only if you create an account. Used for authentication and scan history access. |
| Browser / Usage Analytics | YES | Anonymous aggregate usage stats (pages visited, features used) to improve the product. No personal data, no third-party ad trackers. |
Camera Usage
NexusCode does not use your camera. The app performs OBD-II diagnostics over Bluetooth Low Energy (BLE) or WiFi — no camera, QR scanning, or photo capture is involved in the diagnostic process.
If you encounter any screen in the app requesting camera access, that is a third-party component and not part of NexusCode's core functionality. Do not grant camera access to the app unless you specifically need a feature that requires it.
How We Handle OBD-II Data
When you run a diagnostic scan, the app communicates with your OBD-II adapter (Bluetooth or WiFi) and reads trouble codes from your vehicle's ECU. Here is what happens with that data:
Data Transmission
- Fault codes are sent from your phone to our servers only when you request an AI-powered explanation (for codes not in our local database).
- Data is transmitted over HTTPS — it is encrypted in transit.
- We do not share OBD-II data with third parties for any purpose, including insurance companies, dealerships, or data brokers.
Data Storage
- Stored scans are associated with your account and are accessible only to you.
- You can delete your account and all associated scan history at any time — see the "Your Rights" section below.
- OBD-II data is retained for as long as your account is active. Upon account deletion, data is purged within 30 days.
Vehicle Data on Your Device
- Live scan data stays on your phone during a session unless you explicitly save it to your account.
- Some data may be cached locally for offline functionality — this data remains under your control and can be cleared by clearing the app cache.
Third-Party Services & SDKs
NexusCode uses the following third-party services to provide its functionality:
OpenAI API
- Purpose: AI-powered explanations for fault codes not found in our local database.
- Data sent: The fault code string and a request for plain-English explanation. No vehicle ID, no user identity, no location.
- Privacy: OpenAI processes data under their privacy policy. We do not use OpenAI data for model training.
Polsia Infrastructure
- Purpose: Cloud hosting, database, and authentication services.
- Data handled: Account credentials, scan history, app configuration.
- Privacy: Polsia's infrastructure is operated under their privacy policy.
Web Bluetooth / WebSocket
- Purpose: Direct communication between your browser and the OBD-II adapter (BLE or WiFi).
- Data handled: Raw OBD-II commands and responses exchanged during a scan session. This data flows directly between your device and the adapter — it is not routed through our servers.
We do not integrate advertising SDKs, analytics trackers that profile users, or data-broking services of any kind.
Children's Privacy
NexusCode is not directed at children under 13 and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us at the address below and we will delete it promptly.
Data Security
- All data in transit uses TLS 1.2 or higher.
- Database access is restricted to authenticated application-level connections.
- Credentials are hashed with industry-standard algorithms — we do not store plaintext passwords.
- Access logs are retained for security auditing.
No method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we follow accepted industry practices to protect your data.
Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: Request a copy of the data we hold about you.
- Correction: Request correction of inaccurate data.
- Deletion: Request deletion of your account and all associated data.
- Portability: Request your data in a portable format.
- Objection: Object to certain processing activities.
To exercise any of these rights, contact us using the details below. We will respond within 30 days.
International Data Transfers
If you are located outside the United States, your data may be transferred to and processed in the United States. By using NexusCode, you consent to such transfers in accordance with this policy and applicable law.
Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy in the app and updating the "Effective date" at the top of this page. Your continued use of NexusCode after any change constitutes your acceptance of the revised policy.
Contact Us
NexusCode
If you have questions about this Privacy Policy or our data practices, contact us:
- Email: nexuscode@polsia.app
- Website: https://nexuscode-2.polsia.app