This policy explains what the QRZee app and qrzee.app collect, why, and what control you have. It applies to the mobile app, the website, and the short links we generate. The data controller is Jaxongir Yuldashev, contactable at support@qrzee.app.
| Data | Why | When |
|---|---|---|
| Email address, display name, account identifier | To create and secure your account | Only if you register |
| Scan history, generated codes, folders | To sync your library across your devices | Only if you are signed in; sync can be left off |
| Short-link scan events (timestamp, coarse location derived from IP, device type, referrer) | To produce the scan analytics shown for your dynamic links | When someone scans a trackable link you created |
| Subscription status and purchase identifiers | To unlock paid features and restore purchases | If you subscribe |
| Advertising identifier and ad interaction data | To serve ads on the free tier | Free tier only |
| Camera and photo library access | To scan codes and to pick or save images | Only after you grant permission |
We do not run a third-party analytics or crash-reporting SDK in the app. We do not collect your contacts, precise GPS location, health data, or browsing history outside the Service. Camera frames are decoded locally and are not transmitted to us or stored.
If you use Sign in with Apple you may choose to hide your email address, in which case Apple gives us a private relay address instead of your real one. We only ever receive your name and email address, and the name only on your first sign-in. We do not use Sign in with Apple data for advertising.
The free tier shows ads served by Google AdMob, which may use your device's advertising identifier to select ads and limit repetition. Where required by law we ask for your consent first, and you can decline personalised ads and still use the app — you will simply see less relevant ads. Subscribing removes ads entirely. You can reset or limit your advertising identifier in your device settings at any time.
These providers act on our instructions under their own terms. Data may be processed on servers outside your country, including the United States, under appropriate safeguards such as the European Commission's standard contractual clauses where applicable.
Where the GDPR applies, we rely on: contract (providing the account and paid features), consent (personalised advertising, optional permissions), legitimate interests (keeping the Service secure and functioning), and legal obligation (tax and accounting records).
Short links you have already printed or distributed keep resolving even after an app update, including links on our legacy domain.
Depending on where you live, you may have the right to access, correct, export, or delete your data, to object to or restrict processing, to withdraw consent, and to complain to your data protection authority. Account deletion is available directly in the app under Settings. For anything else, email support@qrzee.app and we will respond within 30 days.
The Service is not directed at children under 13 (or the minimum age in your country), and we do not knowingly collect their personal data. If you believe a child has given us data, contact us and we will delete it.
Data is encrypted in transit. Access to production systems is restricted. No system is perfectly secure, so please use a strong, unique password and keep your device locked.
We will update the date above when this policy changes, and give in-app notice for material changes.