Secure NDEF Filesystem Privacy Policy
Effective 1 November 2026. This privacy policy applies to the Secure NDEF Filesystem Android app and its Wear OS companion app ("Secure NDEF"), published on Google Play by QTComs, Inc.
Summary
- We collect no personal data. The app has no internet permission, so it cannot send anything to us or to anyone else over the network.
- No account, no advertising, no analytics, no tracking, and no third-party code that reports usage.
- Your files live on your NFC tags. Decrypted files exist only in the phone's memory while the app is open.
- Uninstalling the app deletes everything it stored on the phone.
Who we are
QTComs, Inc. (7491 NW 40th St, Chiefland, FL 32626, USA) publishes Secure NDEF Filesystem. Privacy questions: appsupport@qtco.ms.
What the app does
Secure NDEF Filesystem stores small files on NFC tags and implants, optionally encrypted with your password and your phone's security hardware.
Data the app handles
| Data | Where it is | Why |
|---|---|---|
| The files you create | On your NFC tag (encrypted if you choose), and decrypted only in the phone's memory while the app is open; cleared when the app goes to the background | So you can read and edit them |
| Your password | Never stored; used only to derive the encryption key while reading or writing a tag | To encrypt and decrypt your files |
| Encryption keys for the optional TEE and StrongBox layers | In your phone's secure hardware; they cannot be exported, not even by us | Device-bound encryption |
| Rolling Backups (off by default) | Encrypted copies of what you write to tags, in the app's private storage, encrypted again with a key that never leaves the phone | So you can recover a tag you overwrote |
| Your settings (theme, data protection options) | On your phone | To work the way you chose |
Data that leaves your phone
We receive none of it. - Your NFC tags, when you write to them: the files you chose, encrypted as you set. - Your watch. The watch app shows the number of files, the space used, the protection layers and whether the tag is in sync; never file names or contents. This uses the Wear OS Data Layer in Google Play services: over Bluetooth, or, when the watch isn't reachable that way, through Google's servers, end-to-end encrypted with keys that only your phone and watch hold. - Android backup, if you use it: only the app's settings. Tag contents, decrypted files, Rolling Backups and hardware keys are never backed up.
We do not sell, share or transfer data to any third party.
Permissions
- NFC: to read and write your tags.
- Biometrics: only if you choose to protect a hardware layer with your fingerprint or face.
- Vibration, for feedback.
Security
Files are encrypted with AES-256 behind your password (PBKDF2, a fresh salt on every write), and optionally with AES-256-GCM keys held in the phone's secure hardware. Decrypted data is kept in memory only and cleared when the app goes to the background; screenshots and recent-app previews are blocked; the clipboard is never read.
Retention and deletion
Files stay on your tags until you change or wipe them (Wipe Tag in the app). Everything else stays on your phone until you delete it: uninstall the app or clear its storage in Android's settings. We hold no copy, so there is nothing for us to delete. Your password cannot be recovered, and hardware keys exist only on the phone that made them.
Children
The app is not directed at children under 13, and it collects no personal information from anyone.
Your rights
Depending on where you live (for example under the GDPR in Europe or the CCPA in California), you may have rights to access, correct or delete personal data a company holds about you, and to complain to a data protection authority. We hold no personal data from this app; if you have a question, write to appsupport@qtco.ms.
Changes to this policy
If this policy changes, we will update this page and its effective date. If the app ever starts to collect data, this policy and the app's Google Play listing will say so before it does.
Contact
QTComs, Inc. · 7491 NW 40th St, Chiefland, FL 32626, USA · appsupport@qtco.ms · https://qtco.ms
About the app: Secure NDEF Filesystem. Other policies: Privacy at QTComs.