PRIVACY POLICY QR Scanner: Barcode Reader
PRIVACY POLICY
====================================
App: QR Scanner: Barcode Reader
Developer / Publisher: [SongNamLabs]
1. Introduction
This Privacy Policy explains how QR Scanner: Barcode Reader ("the App") handles
information when you install and use it on an Android device. The App is a
free, on-device QR and barcode scanner. It is monetized through advertising
served by Google AdMob.
This document describes what is collected, what is stored only on your device,
and what is sent to third parties through the advertising SDK. By using the App
you acknowledge the practices described below.
2. Information We Collect
#2.1 Automatically collected through third-party SDKs
The App integrates Google Mobile Ads (AdMob) and the Google User Messaging
Platform (UMP) to display ads and to collect any consent legally required in
your region. Through these SDKs the following may be collected by Google:
- Advertising ID
- App interaction events used by the ads SDK (ad requests, impressions, clicks)
- Diagnostic data (crashes, performance, error logs of the SDK)
- Approximate (coarse) device or network signals used by ad serving
- Consent status set by you in the consent / privacy options form
The exact data set depends on your consent choice, your region (EEA, UK,
California, etc.), and the current Google AdMob disclosures. The App does not
add any analytics, attribution, crash reporting, push, or user-account SDK.
#2.2 Stored locally on your device only
The App stores the following on your device only and never transmits them off
device:
- Scan history records: raw scanned value, friendly display value, barcode
format, value type, timestamp, favorite flag, and source tag (camera /
gallery / created)
- Created QR codes saved to history
- User preferences: auto-save toggle, vibration, sound, safe-URL warning,
theme mode, ad frequency counter, total scan counter
- QR PNG images you choose to save, written to the device's Pictures folder
via the Android MediaStore
This data lives in a Room database and a DataStore preferences file inside the
App's private storage. We exclude these files from Android cloud backup so
that scan contents (which can include WiFi passwords, contacts, emails, and
URLs decoded from QR codes) do not leave your device.
#2.3 Information we do not collect
The App does not collect or transmit:
- Account, email, name, phone, or other identifying user information
- Files, photos, or videos other than images you explicitly pick from the
gallery to scan a QR / barcode (the picked image is decoded on-device and
not uploaded)
- Precise location, microphone, contacts, calendar, or SMS content
- Health, fitness, or financial data
3. Permissions Used
| Permission | Why Needed | Data Collection Involved? |
|---|---|---|
| android.permission.CAMERA | Live camera viewfinder to scan QR / barcodes | No. Frames are processed on-device by ML Kit; nothing is uploaded. |
| android.permission.INTERNET | Required so AdMob can fetch ads and the consent form | Yes, indirectly through Google's ads SDK. |
| android.permission.ACCESS_NETWORK_STATE | Used by Google Play services / ads SDK to check connectivity | Yes, indirectly through Google's ads SDK. |
| android.permission.VIBRATE | Optional haptic confirmation when a scan succeeds | No |
| com.google.android.gms.permission.AD_ID (auto-added by ads SDK) | Lets AdMob read the user-resettable Advertising ID | Yes, by Google's ads SDK |
| android.permission.ACCESS_ADSERVICES_AD_ID / TOPICS / ATTRIBUTION (auto-added) | Used by the Privacy Sandbox APIs through the ads SDK on supported devices | Yes, indirectly through Google's ads SDK |
The App does not request location, contacts, microphone, storage media access,
notifications, or any background / foreground service.
4. Third-Party Services
| SDK | Data Collected | Purpose | Privacy URL | Compliance Basis |
|---|---|---|---|---|
| Google Mobile Ads (AdMob) v25.x | Advertising ID, app interactions tied to ads, diagnostics, coarse signals (per consent) | Serve banner and interstitial ads inside the App | https://policies.google.com/technologies/ads | Consent in EEA / UK / Switzerland via UMP; legitimate interest / consent elsewhere as required by local law |
| Google User Messaging Platform (UMP) v4.x | Consent status, region signal | Show the legally required consent or privacy options form before any personalised ad request | https://policies.google.com/privacy | GDPR / IAB TCF v2 alignment provided by Google |
| Google ML Kit Barcode Scanning v17.x | None transmitted | Detects QR / barcodes on-device from camera frames or a gallery image | https://developers.google.com/ml-kit/terms | On-device processing only |
The App does not integrate Firebase, analytics, crash reporting, push
messaging, social sign-in, or payment SDKs.
5. Data Retention
- Local scan history and preferences remain on your device until you remove
them with the Settings action "Clear all history", uninstall the App, or
clear App data through Android system settings.
- Data collected by Google through the ads SDK is retained according to
Google's own retention policy linked above; we have no separate retention
database for that data.
6. Data Sharing
We do not sell your information. We do not share scan content with anyone.
The only outbound data flow is the standard ads request that the Google
Mobile Ads SDK sends to Google when a banner or interstitial is loaded. This
flow happens only after the consent / privacy options form, where required,
has been resolved.
7. User Rights & Control
#7.1 In-App Controls
- Settings → Appearance: choose Light / Dark / Follow system theme
- Settings → Scanning → Auto-save history: when off, scans are not added to
the visible history list
- Settings → Privacy → Ad consent: re-open the AdMob privacy options form
when the form is required for your region; toggling here updates Google
consent state, which controls personalised ad requests
- Settings → Data → Clear all history: removes all locally stored scans
- Uninstalling the App removes all local data the App created
#7.2 United States — CCPA / CPRA (California)
You have the right to know, delete, and limit the use or sharing of personal
information. The App does not sell or share personal information for
cross-context behavioural advertising in the CCPA / CPRA sense beyond the
limited disclosures Google's AdMob SDK performs for ad serving. Use the
in-App controls above to manage local data, and use Google's controls
(linked in section 4) to manage advertising preferences.
#7.3 European Economic Area — GDPR
The lawful basis for ad data processing through AdMob is your consent
collected by the UMP form. The lawful basis for purely local features
(scanning, history, theme) is contract performance and legitimate interest.
You can:
- Withdraw or change ad consent at any time through Settings → Privacy →
Ad consent
- Request deletion by removing the app or clearing history from Settings
- Contact us using the address in section 12 to exercise GDPR rights of
access, rectification, erasure, restriction, portability, and objection
#7.4 United Kingdom — UK GDPR
The same rights and controls as section 7.3 apply under the UK GDPR and the
UK Data Protection Act 2018.
#7.5 Indonesia
In line with Law No. 27 of 2022 on Personal Data Protection (UU PDP), you
may request access to and deletion of personal data we control. Because the
App stores its data locally on your device, you can exercise these rights
directly through the in-App controls listed in section 7.1.
8. Children's Privacy
The App is not directed to children under 13 (or the equivalent minimum age
in your jurisdiction). We do not knowingly collect personal information
from children. If you believe a child has used the App in a way that
exposed their data through ads, please contact us using the address in
section 12.
9. Account Deletion
The App does not require an account. To delete the data the App stores
locally:
1. Open the App
2. Go to Settings → Data → Clear all history
3. Optionally uninstall the App or use Android Settings → Apps → QR Scanner:
Barcode Reader → Clear data
Because no account exists, there is no remote profile to delete.
10. Security
- All scan data is stored in the App's private internal storage on your
device.
- The Room database and DataStore preferences file are excluded from
Android cloud backup (`backup_rules.xml` and `data_extraction_rules.xml`)
to keep sensitive QR payloads off Google Drive.
- Network traffic from the ads SDK uses HTTPS managed by Google.
- The App does not enable cleartext HTTP traffic and does not embed any
custom network security configuration that weakens TLS.
No method of electronic storage or transmission is 100% secure. We use
reasonable measures consistent with the App's scope and architecture.
11. Changes to This Policy
We may update this policy when SDKs, regulations, or App features change.
The "Last Updated" date at the top of this document reflects the most
recent revision. Material changes will be highlighted in the Privacy Policy
URL accessible from Settings → Privacy → Privacy Policy.
12. Contact Us
Developer / Publisher: [SongNamLabs]
Email: [makando991@gmail.com]