🔒 Key Highlights
- All scanned QR codes, created QR codes, and history are processed and stored only on your device — never sent to our servers.
- Camera permission is used solely to scan QR codes and barcodes. We do not record, store, or transmit camera feed or images.
- When you scan a URL, QR Craft may send that URL to Google Safe Browsing to check for threats. This is optional and can be disabled in Settings.
- We do not sell, rent, or trade your personal information with any third party.
- No account or sign-in is required. There is no cloud sync.
Overview
QR Craft (“App”) is published by Epsilon Developers, an independent software publishing brand operated by Satyam Kushwaha & Anurag Mahajan (“Developer,” “we,” “us,” or “our”).
This Privacy Policy explains how information is collected, used, stored, processed, disclosed, and protected when you use the App. By downloading, installing, accessing, or using the App, you acknowledge that you have read, understood, and agreed to this Privacy Policy.
1Data We Collect
QR Craft is designed as a local-first tool. Most data never leaves your device.
| Data Type | What it includes | Where it goes |
|---|---|---|
| A. Scan History | Raw value, QR type, timestamp, source (camera or gallery), favourite flag | Local SQLite DB |
| B. Created QR Codes | Label, QR type, encoded value, creation timestamp, favourite flag, dot style, template | Local SQLite DB |
| C. App Settings | Theme preference, scan feedback settings, URL behavior preference, safe browsing toggle | Local SharedPrefs |
| D. URL Safety Check Data | When enabled, URLs scanned by the App are submitted to the Google Safe Browsing API to check for phishing, malware, and deceptive content | Google Safe Browsing |
| E. Advertising Data | Android Advertising ID (AAID), device model, OS version, app interaction events, approximate location (country/region) | Google AdMob |
| F. Subscription Data | Purchase status, subscription plan, product identifiers. Payment information is processed by Google Play and is never collected or stored by us. | Google Play Billing |
| G. Technical / Diagnostics | Device model, Android version, crash reports, performance logs | On-device / aggregate |
2Local Storage & Security
The App stores all user-generated data locally on your device using Android local storage technologies including SQLite databases and SharedPreferences. All data remains under your control inside the App’s private sandbox directory, which is not accessible to other apps.
Data Deletion
You may delete locally stored information by using Settings → Clear History within the App, or by uninstalling the App. Uninstalling removes all App data as required by Android’s app sandbox model.
3How We Use Information
- QR Scanner: Camera frames are processed in real time on-device to detect QR codes and barcodes. No camera images or video are stored or transmitted.
- Gallery Scan: When you select an image from your gallery, it is analyzed on-device for QR codes. The image is not stored or transmitted.
- Scan History: Successful scan results are saved locally so you can review past scans. Saved only on your device.
- QR Creator: QR codes are generated entirely on-device. The data you encode is not transmitted to any server.
- Batch Scan: Multiple QR codes scanned in a session are held in memory and displayed in the batch panel. They are saved to local history or exported as CSV — no server involved.
- CSV Export: Your history can be exported as a CSV file and shared via the Android share sheet. The file is created locally and shared only at your explicit request.
- URL Safety Check: When enabled and a URL QR code is scanned, the URL is submitted to the Google Safe Browsing API to check for phishing and malware. This can be disabled in Settings → URL Safety.
- Advertising: Google AdMob displays ads in the free version. This requires sharing your Android Advertising ID with Google.
- In-App Purchases: Subscription transactions are handled entirely by Google Play Billing. We receive only a subscription status flag and product ID.
4App Permissions
| Permission | Used for | Not used for |
|---|---|---|
CameraCAMERA |
Live QR code and barcode scanning via the device camera | Recording video, taking photos, storing or transmitting camera feed |
| Storage / Media (version-dependent) |
Reading images from your gallery for QR scanning; saving generated QR code images; exporting CSV history | Accessing personal photos, documents, or other non-App files |
VibrationVIBRATE |
Optional haptic feedback when a QR code is detected | Any use beyond scan detection feedback |
InternetINTERNET |
Google Safe Browsing URL checks (optional), Google AdMob ads (free version), Google Play Billing subscription verification | Uploading your scan history, QR codes, or personal data to any server |
5Advertising
The free version of QR Craft displays advertisements provided by Google AdMob. No advertisements are shown to active Premium subscribers.
Google AdMob may collect and process information including:
- Android Advertising ID (AAID) — a resettable identifier for interest-based advertising
- Device model and Android version
- Approximate location (country/region — not precise GPS)
- App interaction events and advertising performance metrics
- IP address for ad delivery
Such information is governed by Google’s privacy policies. We do not control how Google AdMob processes the information it collects.
Opting Out of Personalised Ads
You may opt out of personalised advertising at any time by going to Settings → Google → Ads → Delete advertising ID on your Android device, or by upgrading to QR Craft Premium to remove all ads entirely.
6URL Safety Checking
When you scan a QR code that contains a URL and URL safety checking is enabled in Settings, QR Craft submits that URL to the Google Safe Browsing API to check whether it is associated with phishing, malware, or other threats.
You may disable URL safety checking at any time in Settings → URL Safety. When disabled, no URLs are sent to Google and the feature shows a “Safety unavailable” status.
7Third-Party Services
📊 Google AdMob
Displays in-app advertisements in the free version. May collect Advertising ID and usage signals.
Google Privacy Policy ↗🛒 Google Play Billing
Processes subscription payments. We never receive your payment card or billing details.
Google Play Terms ↗🛡 Google Safe Browsing
Used to check URLs for phishing and malware threats. Only active when enabled in Settings.
Google Privacy Policy ↗📦 Google Play Services
Underlying Android platform services for purchase verification and core functionality.
Google Privacy Policy ↗8In-App Purchases
QR Craft offers an optional Premium upgrade — a monthly subscription (with a 7-day free trial for eligible new users) or a one-time lifetime purchase — to remove ads and unlock premium features. All transactions are processed exclusively by Google Play Billing.
- We receive only the subscription status (active or inactive), the product ID, and a purchase token. We never see or store your payment card number, billing address, or bank details.
- Premium status is stored locally on your device and verified against Google Play on each app launch.
- For refund requests, contact Google Play support directly, as all billing is managed by Google.
9Data Retention
All information generated by the App remains locally stored on your device and is retained until:
- Deleted by you through in-App settings (e.g., clearing scan history);
- Deleted by uninstalling the App.
Server-side records, where applicable (e.g., aggregate crash diagnostics), are retained only as long as reasonably necessary for operational and security purposes.
10Legal Basis for Processing
Where the GDPR, UK GDPR, India’s Digital Personal Data Protection Act (DPDPA), or other applicable data protection laws apply, processing is carried out on the following bases:
- User Consent: For permissions you explicitly grant (camera, storage) and for advertising data processed by Google AdMob.
- Contractual Necessity: Processing required to deliver the App’s core features you have requested.
- Legitimate Interests: Processing to improve App performance, detect misuse, and maintain App security.
- Legal Obligations: Processing required to comply with applicable laws.
11Your Rights
Since virtually all QR Craft data lives locally on your device, you have direct control:
Delete your data
Settings → Clear History removes all scan and creation history instantly.
Access your data
All data is visible within the App in the History screen.
Opt out of ads
Reset your Android Advertising ID in device privacy settings, or upgrade to Premium.
Disable URL safety
Turn off URL Safety in Settings to stop URLs being sent to Google.
Revoke camera
Revoke camera permission at any time in Android Settings. History and creation still work.
Contact us
For data requests: contact@epsilondevelopers.xyz
12Children’s Privacy
The App is not directed toward children under 13 years of age, or the minimum legal age required in your jurisdiction. We do not knowingly collect personal information from children. If we become aware that information has been collected from a child in violation of applicable law, we will take reasonable steps to delete such information. Contact us at contact@epsilondevelopers.xyz if you believe a child has used the App.
13International Data Transfers
Information may be processed in countries outside your country of residence, including by third-party service providers such as Google (AdMob, Play Billing, Safe Browsing). Where required by applicable law, appropriate safeguards will be implemented.
14Security
We implement commercially reasonable technical and organizational safeguards designed to protect information processed by the App. However, no method of electronic storage or transmission can guarantee absolute protection. Users remain responsible for maintaining the security of their own devices.
15Changes to This Policy
This Privacy Policy may be updated periodically. When we do, we will update the “Last updated” date at the top of this page and post a notice within the App for material changes. Continued use of the App after a policy update constitutes acceptance of the revised policy.
16Contact
Epsilon Developers
Independent Software Publisher
Operated by Satyam Kushwaha & Anurag Mahajan
Country: India
For privacy-related questions, requests, or concerns:
✉️ contact@epsilondevelopers.xyz