Support
N E X A D E V I N

Loading

Privacy Policy

Official Privacy Statement for CertyWallet

Application Name: CertyWallet
Developer / Entity: Nexadevin
Official Website: https://www.nexadevin.com
Effective Date: September 26, 2026
Last Updated: September 26, 2026

1. Introduction

Nexadevin ("Nexadevin", "we", "our", or "us") operates the CertyWallet mobile application ("CertyWallet", "Application", or "App").

CertyWallet is designed to allow users to manage and access digital certificates, credentials, documents, and related wallet information through a mobile application.

This Privacy Policy explains what information CertyWallet may access, collect, use, store, disclose, retain, and delete. It also explains the choices available to users regarding their personal information.

We aim to collect only information that is reasonably necessary to provide, maintain, secure, troubleshoot, and improve the Application.

2. Information We Collect

The information collected by CertyWallet depends on the features you use and the permissions you grant.

Data Category Examples Purpose Shared With
Account Information Name, email address and account identifiers. Account creation, authentication, account management and essential service communications. Service providers required to operate the Application, where applicable.
Authentication Information Authentication tokens and information required to maintain a signed-in session. Secure authentication and session management. Authentication and infrastructure providers, where applicable.
Certificates and Credentials Digital certificates, credentials, certificate metadata and related wallet data. To provide certificate and credential management functionality. Only service providers required to provide the requested functionality, where applicable.
Documents and Uploaded Content Documents, images or other content that you intentionally upload or import. To store, display, process or manage content requested by you. Infrastructure or storage providers, where applicable.
QR Code / Scanning Information QR codes scanned using the device camera. Importing certificates, credentials, identifiers or other supported information. QR information processed locally is not intentionally shared by us unless required by the feature being used.
Device Information Device model, operating system version, application version and technical information. Application compatibility, security, troubleshooting and service stability. Analytics, crash reporting or infrastructure providers, where applicable.
Diagnostic Information Crash reports, error information and application performance information. Detecting errors, diagnosing crashes and improving application reliability. Crash reporting and analytics providers, where applicable.
Usage Information Application interactions, feature usage and technical events, where analytics functionality is enabled. Understanding application performance and improving features. Analytics providers, where applicable.

Information You Provide Directly

We may collect information that you voluntarily provide when you create an account, sign in, manage your wallet, upload content, import certificates, contact support, or otherwise use features of CertyWallet.

Information Collected Automatically

Depending on the services enabled in the Application, certain technical information may be collected automatically, such as device type, operating system, application version, crash information, diagnostic information, and application usage information.

Information We Do Not Intentionally Collect

CertyWallet does not intentionally collect precise location information, contacts, SMS messages, call logs, or microphone recordings unless a future feature specifically requires such access and the applicable disclosures and permissions are provided.

3. How We Collect Information

We may collect information through the following methods:

  • Information you enter when creating or managing your account.
  • Information you provide when contacting customer support.
  • Certificates, credentials, documents or other content that you intentionally import or upload.
  • Information obtained when you authenticate using supported authentication providers.
  • Technical information generated when the Application operates on your device.
  • Crash and diagnostic information collected through supported diagnostic services.

4. How We Use Information

We use information collected through CertyWallet for purposes that include:

  • Creating and maintaining user accounts.
  • Authenticating users and maintaining secure sessions.
  • Providing certificate and credential management features.
  • Storing and displaying user-requested content.
  • Processing QR codes and supported imports.
  • Providing customer support.
  • Sending essential service-related communications.
  • Detecting, preventing and investigating security issues.
  • Diagnosing application crashes and technical problems.
  • Monitoring application performance.
  • Improving application functionality and reliability.
  • Complying with applicable legal obligations.

We do not use personal information for purposes that are incompatible with the purposes described in this Privacy Policy without providing appropriate notice or obtaining consent where required by applicable law.

5. How We Share Information

We do not sell or rent your personal information.

We may share or provide access to information with service providers that process information on our behalf when such access is necessary to operate CertyWallet.

Service Providers

Depending on the features enabled in the Application, service providers may include cloud infrastructure, authentication, analytics, crash reporting, storage, security, hosting and communication providers.

Legal Requirements

We may disclose information where reasonably necessary to comply with applicable law, legal process, court orders, governmental requests, or to protect the rights, security, property, users, or services of Nexadevin.

Business Transfers

If Nexadevin undergoes a merger, acquisition, restructuring, financing, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to applicable privacy requirements.

6. Google Sign-In and Google API Data

CertyWallet may provide Google Sign-In as an authentication option.

If you choose to authenticate using Google, CertyWallet may receive basic account information made available through the authorization process, such as your name, email address, profile identifier, and OpenID Connect authentication information, depending on the permissions granted.

Google account information is used for authentication, account identification, account creation, and related account-management purposes.

Google API Services User Data Policy

CertyWallet's use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy , including its Limited Use requirements.

We do not use Google user data for advertising purposes unless such use is separately permitted and disclosed in accordance with applicable policies.

7. Device Permissions

CertyWallet requests device permissions only when necessary for supported features.

Camera Permission

Camera access may be requested when you use QR-code scanning or another feature that requires the camera.

When used for QR-code scanning, camera frames are processed for the scanning operation. CertyWallet does not intentionally store or upload camera frames as photographs unless a specific feature clearly requires you to capture and submit an image.

Biometric Authentication

CertyWallet may support the biometric authentication mechanism provided by your device operating system.

The Application does not receive or store your device's underlying biometric template. Biometric verification is performed through the operating system's supported biometric authentication mechanism.

You can control application permissions through your device's operating-system settings.

8. Analytics, Crash Reports and Diagnostics

CertyWallet may use analytics and crash-reporting technologies to understand application performance and diagnose technical problems.

Firebase Analytics

If Firebase Analytics is enabled in the Application, certain technical and usage information may be processed by Google Firebase for analytics and application improvement purposes.

More information about Google's handling of Firebase data is available in the Firebase Privacy and Security documentation .

Firebase Crashlytics

If Firebase Crashlytics is enabled, crash reports may include technical information such as application version, device information, operating system information, crash traces and other diagnostic information relevant to identifying and resolving application problems.

We use such information for debugging, reliability, security, and application improvement.

9. Data Storage and Security

We use reasonable technical and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, loss, or destruction.

Depending on the type of information and the architecture of the Application, safeguards may include encrypted network communication, access controls, authentication controls, secure server infrastructure, logging, monitoring, and appropriate application-level security mechanisms.

Information transmitted between the Application and our servers is protected using secure communication protocols appropriate for the service.

Important: No method of transmission or electronic storage can be guaranteed to be completely secure. We therefore cannot guarantee absolute security of information.

Access to personal information is limited to authorized personnel, contractors, or service providers who require access to perform legitimate operational functions.

10. Data Retention

We retain personal information only for as long as reasonably necessary to provide the requested services, maintain accounts, comply with legal obligations, resolve disputes, enforce agreements, maintain security, prevent fraud, or protect the integrity of our services.

Account Data

Account information is generally retained while your account remains active, unless a longer retention period is required for legitimate legal, security, fraud-prevention, or regulatory purposes.

Certificates and User Content

Certificates, credentials, documents, and other user content may be retained while the corresponding account or feature remains active, subject to the user's deletion requests and applicable retention requirements.

Diagnostic and Crash Information

Diagnostic, analytics, and crash information may be retained according to the retention practices of the applicable service provider and for the period reasonably necessary for troubleshooting, security, analytics, and service improvement.

Where information is no longer required for legitimate purposes, we take reasonable steps to delete, anonymize, or otherwise dispose of it securely.

11. Account and Data Deletion

If CertyWallet allows you to create an account, you can request deletion of your account and associated personal information.

In-App Account Deletion

If the account deletion feature is available in your version of CertyWallet, you can initiate deletion from:

Settings > Security & Account > Delete Account

Follow the confirmation steps displayed by the Application.

Web / Email Deletion Request

You may also request account and associated data deletion by contacting:

support@nexadevin.com

Please use the subject: Data Deletion Request - CertyWallet

We may need to verify ownership of the account before processing a deletion request in order to prevent unauthorized deletion requests.

What May Be Deleted

Subject to applicable legal and security requirements, an approved deletion request may result in deletion of:

  • User account information.
  • Authentication-related account information.
  • Certificates and credentials associated with the account.
  • User-uploaded content associated with the account.
  • Other personal information associated with the account.

Information That May Need to Be Retained

In limited circumstances, certain information may need to be retained for legitimate purposes such as fraud prevention, security, legal compliance, dispute resolution, or regulatory requirements. Where retention is required, we will retain only the information reasonably necessary for that purpose and for the applicable retention period.

Deletion Processing Time

We aim to process verified deletion requests within a reasonable period. Unless a longer period is required by law or necessary for a legitimate security or legal purpose, deletion requests will normally be processed within 14 days.

Deleting the Application from your device does not necessarily delete your account or server-side information. To request deletion, use the in-app deletion option or contact us using the method above.

12. Children's Privacy

CertyWallet is not intended for children under the age of 13.

We do not knowingly collect personal information from children under 13 without an appropriate legal basis or required parental involvement.

If you believe that a child has provided personal information to us, please contact us at support@nexadevin.com .

13. Your Privacy Choices and Rights

Depending on your location and applicable law, you may have rights regarding your personal information, including the ability to:

  • Request access to personal information we hold about you.
  • Request correction of inaccurate information.
  • Request deletion of your account and associated information.
  • Request information about how your data is processed.
  • Withdraw consent where processing is based on consent.
  • Control device permissions through your operating system.
  • Object to or restrict certain processing where applicable.

The availability of particular rights depends on applicable laws and the circumstances of the processing.

To exercise a privacy right, contact us using the details provided in the Contact Us section.

14. International Data Processing

Depending on the infrastructure and service providers used by CertyWallet, information may be processed or stored in countries other than the country in which you reside.

Where required by applicable law, we take appropriate measures designed to provide appropriate protection for personal information transferred across jurisdictions.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the Application, our services, applicable laws, security practices, or data-processing activities.

When we make changes, we will update the "Last Updated" date displayed at the beginning of this policy.

We encourage users to periodically review this Privacy Policy to understand how their information is handled.

16. Contact Us

If you have questions, concerns, privacy requests, or requests relating to your personal information, please contact us:

For account deletion requests, please use the subject "Data Deletion Request - CertyWallet" so that we can identify and process your request efficiently.