Privacy Policy – QR Business

Effective date: [EFFECTIVE DATE]

QR Business ("the app") is published by Earth Droids Company LLC ("we", "us"), 6101 North Keystone, Ste. 100 #1105, Indianapolis, IN 46220, USA.

Contact: [CONTACT EMAIL]

Summary

What stays on your device

Your projects. Business names, QR contents (links or text), captions and code color are saved in the app's private storage on your device. They are not sent to us and are not included in Android backup or device-to-device transfer. You can delete one project, or all of them, inside the app. Uninstalling the app deletes them too.

QR images and PDF signs. These are created on your device. When you share one, the app hands the file to the app you choose (for example email or a printer app); that app's own privacy policy then applies. Temporary export files are removed from the app's cache after about a day.

Scanning. The scanner is provided by Google Play services. The camera is opened by Google's scanner screen, not by our app, and our app does not ask for camera permission. The app receives only the text of the code you scanned, shows it to you, and does not save it. A link is opened only if you choose "Open link".

Settings. Your dark-mode choice and whether Premium is active are stored on your device and are not backed up. Which of your codes you have released (as one-way hashes of their contents, not the contents themselves) is stored on your device and is not backed up. A random install ID (see "Purchases") is stored on your device too; it is the only app data included in Android backup, as described there.

What leaves your device

Purchases (Premium and code releases)

Payment is handled entirely by Google Play. We never see your card number, payment method or billing address.

To confirm that a purchase is genuine, the app sends our purchase server:

• the app's package name and the product ID (premium_lifetime for Premium, or qr_release for releasing one QR code);
• the Google Play purchase token for the purchase;
• a random install ID that the app creates. It is not your name, email address, advertising ID or a hardware identifier.

Backup of the install ID. So that Premium keeps working when you reinstall the app or move to a new phone, the install ID, and nothing else from the app, is included in Android's backup and device-to-device transfer. If backup is turned on in your device settings, Android stores it with your Google account under Google's own terms; we cannot read that backup. You can turn Android backup off, or delete the backed-up app data, in your device or Google account settings. Without a backup, a reinstall creates a new ID.

Our server sends the purchase token to Google to check the purchase and to acknowledge it. It then stores only a one-way hash of the purchase token, one-way hashes of the install IDs that used it, whether the purchase is active or revoked, and two timestamps. It does not store the token itself, your name, your email address or your order number.

Your IP address is used briefly to limit abusive traffic and is not stored by our code. The server runs on Cloudflare, which processes requests on our behalf and may keep standard short-term technical logs under its own privacy policy.

The app checks again from time to time (at most about once a day while you use it) so that refunds are noticed.

Google sign-in (optional)

Signing in with Google is optional and is not needed for any free feature. If you sign in, Android's Credential Manager and Google handle the sign-in. The app reads your Google display name to show it on screen during that session. It does not save the sign-in token, does not send your name or email address to us, and does not create an account on our servers. You can sign out in the app.

Google Play services

The scanner, billing and sign-in all depend on Google Play services on your device, which Google operates under its own privacy policy. Google's code scanner may download its scanning component the first time you use it, and Google's SDKs may send Google technical and diagnostic data (such as device and app information and performance metrics).

What we do not do

• We do not collect your contacts, photos, files, precise location, microphone audio or messages.
• We do not receive or store the QR codes you create or scan.
• We do not sell personal information, and we do not share it for cross-context behavioural advertising ourselves.
• We do not use analytics or crash-reporting tools of our own.

How long data is kept

• On your device: until you delete it or uninstall the app.
• In your Android backup (install ID only): until you turn backup off or delete the backup; Google manages that storage.
• On our purchase server: purchase-token hashes are kept while the purchase could still need to be recognised (for example to restore Premium after a reinstall or to honour a refund).
• Held by Google: according to Google's policies.

Your rights and choices

• Delete your data in the app: open Projects to delete one project, or use Delete all local projects.
• Ask us: depending on where you live (for example the EEA, the UK, or US states such as California), you may have the right to ask what personal data we hold about you, to have it corrected or deleted, or to object to its use. We hold very little: only the hashed purchase record described above, which we cannot link to you by name. To make a request, email us and, if it concerns a purchase, include your Google Play order number. We will not treat you differently for making a request.
• Purchases and refunds: managed in Google Play.

Where European data protection law applies, we rely on: performing our contract with you (verifying and delivering Premium and released codes) and our legitimate interests (preventing fraud and abuse of the purchase server).

Children

The app is intended for businesses and adults. It is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect personal information from children.

International processing

Google and Cloudflare may process data in the United States and other countries, using the safeguards described in their policies.

Security

All connections from the app use HTTPS. The purchase server keeps hashes rather than raw purchase tokens, and its Google credentials are stored as encrypted secrets. No system is perfectly secure.

Changes

If this policy changes, we will update this page and its effective date. Significant changes will also be noted in the app or its store listing.

Contact