QRSentry ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our QR code security scanning service.
1. Information We Collect
1.1 Information You Provide
- QR Code URLs: URLs extracted from QR codes you scan using our service
- Account Information: If you create an account, we collect your email address and authentication credentials
1.2 Automatically Collected Information
- Scan History: Timestamps and results of URL security scans
- Device Information: Device type, operating system, and app version
- Usage Data: How you interact with our service
- Firebase Analytics: Anonymous usage statistics collected via Firebase
2. How We Use Your Information
We use the collected information for the following purposes:
- Security Analysis: To analyze URLs for potential security threats (phishing, malware, etc.)
- Service Improvement: To improve our threat detection algorithms and user experience
- Statistics: To generate aggregated, anonymous statistics about threats detected
- Communication: To send you service-related notifications
- Legal Compliance: To comply with legal obligations and protect our rights
3. Data Storage and Security
3.1 Firebase Cloud Services
Your data is stored using Google Firebase services, which provide:
- Encrypted data transmission (HTTPS/TLS)
- Secure cloud storage with access controls
- Regular security audits and compliance certifications
3.2 Data Retention
- Scan History: Stored locally on your device and synced to Firebase
- Cached Results: URL check results are cached for 24 hours
- Malicious URL Database: Blacklist entries are retained for 30 days, then automatically removed
3.3 Data Deletion
You can delete your scan history at any time through the app settings. Cached data is automatically deleted after 24 hours.
4. Third-Party Services
We use the following third-party services:
4.1 PhishTank
We use PhishTank's publicly available database to identify phishing URLs. No personal data is shared with PhishTank.
PhishTank Privacy Policy: https://www.opendns.com/privacy/
4.2 URLhaus
We use URLhaus (abuse.ch) database to identify malware distribution URLs. No personal data is shared with URLhaus.
URLhaus Terms: https://urlhaus.abuse.ch/api/
5. Data Sharing and Disclosure
We do NOT sell your personal information. We may share information in the following circumstances:
- With Your Consent: When you explicitly agree to share information
- Legal Requirements: When required by law, court order, or government request
- Safety and Security: To protect the rights, property, or safety of QRSentry, our users, or the public
- Anonymous Statistics: We may share aggregated, non-identifiable data about threats detected
6. Your Rights and Choices
You have the following rights regarding your personal information:
- Access: Request a copy of your personal data
- Correction: Update or correct your information
- Deletion: Request deletion of your account and associated data
- Opt-Out: Disable analytics or certain data collection features
- Data Portability: Request your data in a portable format
To exercise these rights, please contact us at privacy@qrsentry.app
7. Children's Privacy
QRSentry is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
8. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from your jurisdiction. By using QRSentry, you consent to the transfer of your information to our facilities and third-party service providers.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the new Privacy Policy on this page
- Updating the "Last Updated" date
- Sending you a notification (if you have an account)
Continued use of QRSentry after changes constitutes acceptance of the updated Privacy Policy.
10. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: