QR app privacy policy

Scanning, photos and saved work

Camera frames, imported images, decoded QR/barcode content, counts, product names, local location labels, card designs, palettes and local history are processed on your device for the tasks you choose. Camera access is requested for scanning. The system photo picker gives the app only the images you select. Saving an image uses add-only Photos access. Contact and calendar actions use the system editor after your choice; we do not upload your address book. A count-session location is a text label, not GPS tracking.

Optional usage measurement

Usage measurement starts off in a new 2.0 installation. If you enable it in Settings, Google Analytics for Firebase receives limited task categories, app lifecycle/session information, an app-instance identifier and technical app/device information. General location can be derived from IP information; the app does not request GPS access. Our custom events do not contain QR content, URLs you scan, photos, product names, Wi-Fi passwords or count-session location labels. Turn measurement off in Settings to stop future collection and reset the local analytics identity; this does not promise immediate removal of previously aggregated reports. Analytics retention follows the configured Google Analytics retention settings.

Optional public menus

Choosing Publish sends the menu and the business name, description, address, phone and products you entered to our Cloudflare-hosted service. These fields become public to anyone with the menu link. Unpublish removes the hosted content; a technical ownership marker can remain to prevent takeover of the same link. Your local menu can remain on the device. Editing credentials are stored in this device's Keychain and are not included in in-app backup files. Do not publish private details without the right to share them.

Optional events and guest pages

Publishing sends the names, date and place you confirm to Cloudflare. The event link is public. Guests can provide their name, attendance answer and party size. Guest photos, when the service supports uploads, are stored for owner review and appear in the public gallery only after approval. Event owners can delete the event and uploaded photos using their owner access. Event access expires after 30 days; a daily cleanup removes expired records and associated content. Losing the owner credential can prevent self-service management; contact support with the public event link for help. Do not include the private owner link in a public QR.

Optional AI artwork

Before AI generation, the app asks you to confirm sending your written image description to Cloudflare Workers AI. Your QR destination is encoded on the device and is not included in the generation request. Our service does not store the prompt or generated picture in its application database; it keeps aggregate daily usage counts for limits. Cloudflare processes the request under its own service and privacy terms, including operational/security metadata and applicable exceptions. Do not enter sensitive personal information in a prompt.

Advertising and tracking

Live advertising is disabled in the prepared 2.0 release. Its development build has a separate, explicit Google test-ad screen; this is absent from Release. That screen checks Google UMP privacy choices before any advertising request, offers a choice before rewarded ads and provides privacy options when required. UMP/test-ad use can involve IP-based general location, device/app identifiers, ad interactions and technical diagnostics handled by Google. The 2.0 implementation does not request Apple's tracking permission or use IDFA-based cross-app tracking. Earlier store versions may contain AdMob advertising and Firebase measurement with different controls. See Google's privacy policy for those services. Any future live-ad rollout requires updated choices and disclosures.

Exports, backups and external destinations

Sharing, printing, calling, opening a link or saving to a file provider sends the selected output to the destination you choose. Those destinations have their own policies and may use the internet. In-app backup files are not encrypted and can contain private code content, Wi-Fi passwords, contact details and full card photographs. Use a trusted storage location. The app does not automatically upload backups; a selected provider may sync them. Menu/event libraries and their owner credentials are currently excluded from the in-app backup.

Hosting, security and retention

Cloudflare hosts our site and optional public services, using request/network data for delivery, security and rate limits. Event rate limits use hashed network identifiers with short expiry; public-menu ownership markers remain separate from content. Local work remains until you delete it or remove the app, subject to operating-system/device backup behavior. Provider and legal/security retention can differ from the app's content lifecycle. We do not sell QR content or send code payloads to advertising/analytics services.

Your choices and requests

Use Settings to turn usage measurement off; use Unpublish/Delete for hosted content you control. You can delete local records and backups separately. For access, correction, deletion or privacy questions, email hello@minilabs.app with the public item link and app version if relevant. Do not send Wi-Fi passwords, private owner credentials or unnecessary personal information. Requests may require proportionate ownership verification. This app is a general utility and is not directed at children; optional public publishing should be used responsibly.

Service providers

Google Analytics/Firebase and, in test advertising or earlier versions, Google AdMob/UMP operate under Google's privacy practices. Cloudflare provides website hosting, Workers/D1 services, optional R2 photo storage and Workers AI. These services may process data outside your country. Changes to actual data use will be reflected here and in the app/store disclosures.

Google privacy · Cloudflare privacy · Workers AI data use

QR app privacy policy · Privacy choices

hello@minilabs.app