Privacy Policy - QRScan Pro

1 Introduction

Welcome to QRScan Pro ("we," "our," or "us"), developed by Xypher Labs. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application available on the Google Play Store (package: com.xypher.qrscanpro).

We are committed to protecting your privacy and ensuring transparency in how we handle your data. By using QRScan Pro, you agree to the collection and use of information as described in this policy. If you do not agree, please discontinue use of the app.

2 Information We Collect

We collect the following categories of information:

Camera Access: We access your device camera solely for scanning QR codes and barcodes in real time. The camera feed is processed locally on your device and is never recorded, stored, or transmitted to external servers.

Photo Gallery Access: Only when you explicitly choose to scan a QR code from a gallery image. The image is processed locally and not uploaded to any server.

Scan & Generation History: QR codes you scan or generate are stored locally on your device only. This data is not uploaded to our servers.

App Preferences: Settings such as theme, language, scan sound, vibration, and consent state are stored locally on your device.

Advertising Identifiers & Ad Data: Through Google AdMob (see Section 4), we collect:

Your Advertising ID (a resettable identifier you control via Android Settings)
IP address and approximate location (city or country level only)
Device type, OS version, app version, language, and timezone
Ad interactions (impressions, clicks, view-throughs)

Analytics & Crash Data: Through Firebase, we collect anonymized:

App usage patterns and feature interactions
Device type, operating system version, and app version
Crash reports, stack traces, and performance metrics
General geographic region (country level)

Consent State: Your GDPR/CCPA consent choices are stored locally and shared with Google's User Messaging Platform (UMP) per applicable regulations.

3 How We Use Your Information

We use the collected information for the following purposes:

To provide and maintain QR code scanning and generation functionality
To store your scan and generation history for quick access and reference
To remember your app preferences and settings across sessions
To serve relevant advertisements (personalized only with your consent)
To analyze app performance, identify bugs, and improve user experience
To respect your consent choices (e.g., showing personalized vs. non-personalized ads)
To comply with legal obligations under GDPR, CCPA, and other applicable laws

4 Advertising & Google AdMob

QRScan Pro is a free, ad-supported application. We use Google AdMob to display advertisements, which include:

Banner ads — small, anchored ads at the bottom of certain screens
Interstitial ads — full-screen ads shown at natural transition points
App open ads — shown briefly when you return to the app from background
Rewarded ads — optional ads you may choose to view in exchange for unlocking specific in-app features

AdMob may use your data to deliver and measure ads, and may share data with its partners as described in Google's Privacy Policy. AdMob's collection of an Advertising ID is governed by Google's Advertising ID policy.

Personalized vs. Non-Personalized Ads:

EEA, UK, and Switzerland: We obtain your explicit consent through Google's User Messaging Platform (UMP) before serving personalized ads, in accordance with the General Data Protection Regulation (GDPR) and ePrivacy Directive. If you decline, you will see only non-personalized ads (limited targeting based on context, not your profile).
California and other regulated US states: You may opt out of the "sale" or "sharing" of your personal information for advertising purposes via the in-app consent dialog.
Other regions: Personalized ads may be served by default, subject to your device's Advertising ID settings.

You can withdraw or change your consent at any time via Settings → Privacy Options within the app (where applicable to your region).

5 Third-Party Services

We use the following third-party services to operate the app:

Google AdMob — advertising (see Section 4) · Privacy Policy
Google User Messaging Platform (UMP) — consent management for GDPR/CCPA compliance
Google Analytics for Firebase — anonymized usage analytics · Privacy Policy
Firebase Crashlytics — crash and error reporting
Google Play Billing — in-app purchases (where offered)
Google ML Kit — on-device barcode and QR code detection. ML Kit processes images locally on your device and does not transmit camera data to Google's servers.

Each service is bound by its own privacy policy. By using QRScan Pro, you also agree to the privacy practices of these third parties as they apply to data shared with them.

6 Data Storage & Security

Your scan history, generated codes, and app preferences are stored locally on your device using Android's standard storage mechanisms (Room database and DataStore Preferences). This data is not uploaded to our servers.

Data shared with third-party services (AdMob, Firebase) is transmitted over HTTPS / TLS-encrypted connections and is governed by their respective security practices.

While we implement industry-standard security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security and ask you to take reasonable precautions to protect your device.

7 Data Sharing & Disclosure

We do not sell your personal information. We share data only in the following circumstances:

With third-party services listed in Section 5, strictly to operate the app (e.g., serving ads, crash reporting)
For legal compliance — if required by law, court order, or governmental request
To protect rights and safety — to detect, prevent, or address fraud, security, or technical issues
With your explicit consent — for any other purpose disclosed at the time of collection

8 Data Retention & Deletion

All locally stored data (scan history, generation history, preferences) can be deleted at any time:

Through the app's Settings (clear history, reset preferences)
By uninstalling the app, which removes all locally stored data
By clearing the app's storage via Android's system settings

Anonymized analytics and crash data collected by Firebase is retained according to Firebase's data retention policies (typically 14 months for default Analytics events). Advertising data retention is governed by Google AdMob's policies.

9 Your Rights Under GDPR (EEA, UK, Switzerland)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights under the GDPR / UK GDPR / Swiss FADP:

Right of access — request a copy of personal data we process about you
Right to rectification — correct inaccurate or incomplete data
Right to erasure ("right to be forgotten") — request deletion of your data
Right to restrict processing — limit how we use your data
Right to data portability — receive your data in a structured, machine-readable format
Right to object — opt out of certain types of processing, including direct marketing
Right to withdraw consent — revoke consent at any time via Settings → Privacy Options
Right to lodge a complaint — with your local data protection authority

To exercise these rights, contact us at the email below. We will respond within 30 days.

10 Your Rights Under CCPA / CPRA (California & Other US States)

If you are a resident of California, Virginia, Colorado, Connecticut, Utah, or other regulated US states, you have the following rights:

Right to know — what categories of personal information we collect, use, and share
Right to delete — request deletion of your personal information
Right to opt out of "sale" or "sharing" — available via the in-app consent dialog or Settings → Privacy Options
Right to limit use of sensitive personal information
Right to non-discrimination — we will not deny service or charge different prices for exercising your rights

We do not sell personal information in the traditional sense, but the use of advertising identifiers and the sharing of data with AdMob may qualify as "sharing" under California law. You may opt out at any time.

11 Children's Privacy

QRScan Pro is intended for users who are at least 13 years of age (or 16 years in EU member states where the GDPR sets a higher digital consent age, or such other age as required by your jurisdiction).

The app is not directed at children, and we do not knowingly collect personal information from children below the applicable age of consent. If you believe a child has provided us with personal information, please contact us and we will take prompt steps to delete such data.

Parents and guardians are encouraged to supervise their children's use of any mobile application.

12 International Data Transfers

The third-party services we use (Google AdMob, Firebase) may process your data on servers located outside your country of residence, including in the United States. These transfers are governed by the third parties' compliance frameworks, including the EU-US Data Privacy Framework and Standard Contractual Clauses (SCCs) where applicable.

13 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. Changes will be posted on this page with a revised effective date.

For material changes, we will make reasonable efforts to notify you through the app or other appropriate means. We encourage you to review this policy periodically. Continued use of the app after changes constitutes acceptance of the updated policy.

14 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at:

Email: xypherlabs.dev@gmail.com

Developer: Xypher Labs

App package: com.xypher.qrscanpro

Terms & Conditions: https://xypherlabsdev.github.io/BarCodeScannerTermsConditions-Public/