QRCoder

Legal

Privacy Policy

Last updated: July 23, 2026

The short version: QRCoder works fully offline. We do not collect, transmit, or have access to anything you scan, generate, or store in the app — including passwords you use to encrypt QR codes.

1. Overview

This Privacy Policy explains how QRCoder ("the App", "we", "us") handles information when you use our mobile application for iOS and Android. QRCoder is designed as an offline-first tool: there is no backend server in the current version of the App, no user accounts, and no analytics or advertising SDKs that read your scanned or generated content.

2. Information We Do Not Collect

  • We do not collect the content of QR codes or barcodes you scan or generate.
  • We do not collect your scan history, favorites, or saved records.
  • We do not transmit any content to our servers — because there are none in this version of the App.
  • We do not use third-party analytics or advertising SDKs to track your behavior inside the App.
  • We never upload or persist decrypt passwords for encrypted QR codes unless you explicitly opt in (see §4).

3. What Is Stored, and Where

All data created by using QRCoder — scan history, generated codes, batch records, and app settings — is stored locally on your device using an on-device SQLite database. This data never leaves your device unless you explicitly choose to share, export, or copy it using your device's native share sheet, clipboard, or contacts integration.

Uninstalling the App removes this locally stored data, subject to your device's own backup behavior (e.g. iCloud or Google account device backups, which are controlled by your operating system, not by QRCoder).

4. Encrypted QR Codes and Saved Passwords

QRCoder lets you protect QR code content with a password, using PBKDF2 key derivation and AES-256-GCM encryption performed entirely on your device. We never see or transmit this password.

If you explicitly tap "save this password" after a successful decrypt, the password is encrypted with a random master key and stored in your device's secure hardware-backed keychain/keystore (via flutter_secure_storage) — never in plaintext, and never in the App's regular database. This only happens when you take that specific action; it is never automatic.

5. Camera and Photo Library Access

QRCoder requests camera access to scan QR codes and barcodes in real time, and photo library access only if you choose to scan a code from an existing image. These permissions are used exclusively to perform on-device scanning and are never used to collect, upload, or analyze photos or camera data for any other purpose.

6. Contacts Access

When saving a scanned vCard to your contacts, QRCoder shares a temporary .vcf file through your device's native share sheet. QRCoder does not read, browse, or store your existing contacts.

7. Children's Privacy

QRCoder does not knowingly collect personal information from anyone, including children, because the App does not collect personal information at all in its current form.

8. Future Changes

If QRCoder introduces optional networked features in the future (for example, a paid dynamic QR code service), this Privacy Policy will be updated in advance to describe exactly what data such a feature would send, and any such feature will be opt-in.

9. Contact Us

If you have questions about this Privacy Policy, please contact us at [email protected].