Privacy Policy
This Privacy Policy explains how Nexa (“we”, “us”) handles information when you use the ScanQR app (“the app”) on iOS and Android. The app is built so that what you scan and create stays on your device.
- Codes are read on your device. Your scans, history, generated QR codes and “My QR Profile” are stored only on your device and are never uploaded to our servers.
- No account, no sign-up. We do not ask for your name or email.
- The app is free and shows ads through Google AdMob. Ads may use your device’s advertising identifier, only if you allow it.
- We use Google Firebase Analytics for anonymous usage statistics. We never send the content of your codes to analytics.
- When you scan a product or book barcode, only that barcode number is sent to a public database to look it up.
1. Scanning and link checks
QR codes and barcodes are decoded locally on your device, both from the camera and from photos you choose. Camera frames and photos are not stored or uploaded by us.
The safety warning for links (for example links that point to a raw IP address or imitate a well-known brand) is calculated on your device from the link itself. The link is not sent to us. When you choose to open a link, it opens in your browser or the relevant app, under that service’s own privacy policy.
2. Product and book lookup
When you scan a product barcode (EAN/UPC) or a book ISBN, the app sends only the barcode number to free public databases to show product or book details:
- Open Food Facts and Open Beauty Facts (product name, brand, photo, ingredients, Nutri-Score)
- Open Library (book title, author, publisher, cover)
No personal data is sent with these requests. Like any website, these services can see your device’s IP address when the request is made. Results may be cached on your device to load faster next time.
The “Search web” and “Compare prices” buttons open a search in your browser only when you tap them.
3. Payment QR codes
ScanQR can read and create payment QR codes (for example Pix, UPI, PromptPay, VietQR, SEPA GiroCode, Swiss QR-bill and EMVCo codes). The app only displays the payment details stored in the code, such as the payee, account and amount, and lets you copy or share them. ScanQR does not process payments, does not connect to your bank and never receives your banking credentials. Payment details you scan or enter stay on your device.
4. History, generated codes and “My QR Profile”
The app saves your scan history, the QR codes you create, your generator preferences and the contact details you enter in “My QR Profile” in private storage on your device. This data never leaves your device unless you choose to share or export it. You can rename, favourite or delete items, delete your whole history in the app, and everything is removed when you uninstall the app.
5. Advertising (Google AdMob)
The app shows banner and occasional full-screen ads provided by Google AdMob. To serve and measure ads, AdMob may collect device information such as your advertising identifier (IDFA on iOS, Advertising ID on Android), IP address, approximate location derived from the IP address, device model, OS version and how you interact with ads. Google’s use of this data is described in How Google uses information from sites or apps that use its services.
- iOS: the app asks for permission through Apple’s App Tracking Transparency prompt. If you choose “Ask App Not to Track”, the advertising identifier is not shared and you will see non-personalised ads.
- Android: you can reset or delete your Advertising ID, or opt out of ads personalisation, in your device’s Google settings.
We never share the content of your scans with advertisers.
6. Analytics (Google Firebase)
We use Google Firebase Analytics to understand how the app is used and to improve it. We only log general events, such as “a code was scanned” together with its type (for example URL, Wi-Fi or product), the barcode format, which screen was opened, or which button was tapped. We never log the content of your codes: no links, names, phone numbers, Wi-Fi passwords, payment details or barcode numbers. Firebase also collects standard device data such as an app instance ID, device model, OS version, app version, country and approximate usage time.
7. Permissions and why we need them
| Permission | Why |
|---|---|
| Camera | To scan QR codes and barcodes. Camera images are processed on your device and not saved. |
| Photos | To scan a code from a photo you pick, choose a logo for a QR code, and save QR code images you create. The app only accesses the photos you choose. |
| Contacts | Only to open the “new contact” form when you tap “Add contact” on a scanned contact card. The app does not read your address book. |
| Location (Wi-Fi) | Only when you tap “Connect” on a scanned Wi-Fi QR code. iOS and Android require location access to join a Wi-Fi network. Your location is not stored or shared. |
| Wi-Fi state | To join the Wi-Fi network from a scanned Wi-Fi QR code. |
| Tracking (iOS) | Only for personalised ads, as described in section 5. Optional. |
| Internet | For product and book lookup, ads and analytics. |
You can turn these permissions off at any time in your device settings. Some features will then stop working.
8. Settings stored on your device
The app stores small preferences on your device, such as your chosen language, scan sound on/off and when you were last asked to rate the app. These are not sent to us.
9. Sharing
We do not sell, rent or trade your information. Data is shared only with the service providers listed above (Google AdMob, Google Firebase, Open Food Facts, Open Beauty Facts, Open Library) to run the app, or when required by law. When you use Share, Copy or Export, the content goes to the app or place you choose, under that app’s own privacy policy. Ratings and reviews are handled by Apple or Google.
10. Data retention
Your history, generated codes and profile stay on your device until you delete them or uninstall the app. Analytics and advertising data are kept by Google according to its own retention policies.
11. Your choices and rights
- Delete items or your whole history in the app, or uninstall the app to remove all local data.
- Turn off Camera, Photos, Contacts or Location access in your device settings.
- Limit ad tracking: decline the App Tracking Transparency prompt on iOS, or reset/delete your Advertising ID on Android.
- Depending on where you live (for example under the GDPR in the EU and Switzerland’s FADP, the UK GDPR, the CCPA in California, the LGPD in Brazil, India’s DPDP Act, Thailand’s PDPA or Vietnam’s personal data protection rules), you may have the right to access, correct or delete personal data about you, or to object to its processing. Because we do not hold an account or your scans, we usually have no personal data to return. Contact us and we will help with requests about data held by our providers.
12. Security
Keeping your scans and history on your device is the strongest protection we can offer: there is no copy on our servers to leak. Connections to our providers use encryption (HTTPS). No method is 100% secure, but we work to keep the app safe.
13. Children
The app is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.
14. Changes to this policy
We may update this Privacy Policy from time to time. We will post the new version on this page and update the “Last updated” date above.
15. Contact us
If you have any questions about this Privacy Policy, email us at cs.nexatech@gmail.com.