Privacy Policy

1. Introduction

This Privacy Policy explains how EveryQR (the “App”) handles information when you use its Android application. QR and barcode scanning, image and PDF processing, code creation, and the local library run on your device. No EveryQR account is required. The app does not send your camera frames, imported documents, or code contents to a scanning or generation server.

2. Information, permissions, and local storage

• Camera: permission is requested for live scanning. Frames are processed on your device and are not saved as camera photos by the scanner. You can decline or revoke permission and still use file imports and code creation.
• Files: Android pickers and temporary sharing permissions provide access to the image or PDF you select. EveryQR does not request broad storage, media-library, contacts, or location permission. Network permissions are included by its online-service dependencies.
• History and drafts: saved code contents, designs, favorites, categories, drafts, and settings are stored locally. Codes can contain sensitive information, including Wi-Fi passwords and contact details. You can control automatic history recording and delete saved records in the app.
• Exports and backups: files go to the destination or app you choose, which may be a cloud provider. Exported codes, CSV files, and manual backup files can expose their contents; keep them private. Removing the app does not remove copies you exported or shared.

Local data remains until you delete it, clear Android app data, or uninstall the app, subject to device backup and restore. Android backup rules allow settings and language in system backups. On Android 12 and later, device-to-device transfer can also include the local database; the configured cloud backup excludes that database. Actual backup behavior depends on Android and the device manufacturer.

A system picker may retrieve a cloud-backed file from its provider. Offline processing requires the file to be available on your device.

3. Analytics, diagnostics, and third-party services

Bundled Google ML Kit reads barcodes locally without downloading a model. Its SDK can send operational and device diagnostics to Google separately from EveryQR’s analytics controls. See ML Kit’s privacy information.

Firebase Analytics and Crashlytics support usage measurement and error diagnosis. App events use a fixed vocabulary, such as scan started or code exported, without code contents or filenames. Crash handling removes exception messages and causes before forwarding stack information; Firebase may also process technical device, app, and installation information.

Analytics and crash reporting are independently changeable in Settings. They start off until you choose in consent-required or unknown regions. They can default on elsewhere when matching SIM and network country evidence establishes the region. They are disabled in debug builds. Turning them off stops future app collection; pending crash reports are deleted and disabling analytics resets its local analytics state. This does not itself delete data already held by providers.

Firebase Remote Config fetches feature, promotion, and ad configuration independently of those two switches. It uses Firebase installation information and network requests. Google Play may also handle in-app update checks and review flows. See Firebase privacy and retention information and Google’s Privacy Policy.

4. Advertising and purchases

The free version supports Google AdMob ads and Google’s User Messaging Platform for consent and privacy options. Requests depend on configuration, entitlement, and consent eligibility. Google may process IP addresses, approximate location inferred from IP, app interactions, diagnostic data, and SDK identifiers for advertising and fraud prevention. EveryQR removes Android Advertising ID permissions and does not attach QR contents to ad requests. This does not make ads anonymous. Where available, use the app’s ad privacy options to revisit your choices. Pro removes ads. See Google’s ad SDK disclosures.

When configured, RevenueCat and Google Play Billing check offerings and purchase entitlements and process purchases and restores. RevenueCat uses an anonymous app user identifier and purchase, app, and operating-system information; its automatic device-identifier collection and diagnostics are disabled in the app. EveryQR does not receive your payment-card details. These services do not receive QR contents from the app. See RevenueCat’s privacy policy and Google’s Privacy Policy.

5. Support and external services

Sending in-app feedback transmits your message and optional email through Web3Forms to the app operator. Bug reports can also include app version, Android version, and device model if you enable diagnostics. The form does not attach files or saved codes automatically; avoid putting sensitive content in the message. See Web3Forms’ privacy policy.

Opening a code’s link, map, dialer, email, or payment action shares the relevant information with the selected app or destination. Web links open manually by default. An optional, risk-confirmed camera setting can open eligible HTTP(S) links automatically. Those destinations apply their own policies.

6. Data retention and deletion

Local records remain on your device as described above. Online service providers retain information according to their privacy policies and the applicable service settings. Support messages are delivered to the support mailbox.

To ask about information submitted through feedback or support, or to request access or deletion, use the contact address below. Local-only code records must be deleted on your device. Removing local records does not remove exported files, shared copies, or information held by external services; requests to those services may need to be made separately.

7. Your choices

You can manage camera permission through Android settings, control history recording and delete saved records in the App, and change analytics and crash-reporting preferences in Settings. Where available, ad privacy options let you revisit advertising choices. Disabling a service stops future collection as described above; it does not automatically erase information already held by a provider.

8. Security

Codes, exports, and backups may contain sensitive information. Protect your device and review the content and destination before sharing. No method of electronic storage or transmission can guarantee absolute security.

9. Changes to this policy

This Privacy Policy may be updated when the App or its information practices change. Updates will appear on this page with a revised effective date.

10. Contact information

For questions about this Privacy Policy or requests concerning information submitted to EveryQR support, email [email protected].