Privacy policy

1. Who we are

TrueQR is made by Syaafi Labs (Syaafi Labs Enterprise). Questions about this policy: support@syaafilabs.com.

2. Your scans

QR codes are read by Google's ML Kit, which runs on your phone. Camera frames, and the photos you pick or share into TrueQR, are used only to find codes: they are not saved or uploaded. What a code holds is shown to you first, and nothing opens by itself.

3. History

Codes you scan, and codes you make and then save or share, are kept in a history on your phone so you can find them again. Wi-Fi passwords are hidden in the list. The history is left out of Android backups and device transfers, because it can hold Wi-Fi passwords and payment details.

You can delete entries or clear the history at any time, and you can turn off Save history in Settings. Turning it off keeps the codes already saved until you delete them. A code used by a home-screen widget or shortcut is always kept, so the widget keeps working. If you export the history as a CSV file, it is saved to Documents/TrueQR on your phone.

4. Link check and opening links

The link check runs on your phone and sends nothing over the internet. It looks at the address itself for tricks such as look-alike letters, shortened links or app downloads. It is a warning, not a promise that a site is safe.

When you tap Open, the link opens in an in-app browser tab (a Custom Tab), where your browser's own protection, such as Chrome's Safe Browsing, applies. A setting lets you use your default browser instead. For a code that holds plain text, Search the web sends that text to the search engine you chose in Settings (Google, Bing or DuckDuckGo), only when you tap it.

5. Wi-Fi

When you tap Connect on a Wi-Fi code, Android shows its own dialog asking whether to save the network; TrueQR doesn't join networks by itself. On Android 10, the password is copied and Android's Wi-Fi settings open, so you can paste it. Wi-Fi passwords are copied as sensitive, so Android hides them in the clipboard preview.

Apps can't read your saved Wi-Fi passwords. To make a code for your own network, you can pick a screenshot of Android's Wi-Fi share screen instead; it is read on your phone.

6. Contacts and clipboard

Pick a contact uses Android's contact picker: the app can read only the one contact you pick, to fill in the form. TrueQR reads the clipboard only when you tap Paste. Copying a result automatically is off unless you turn it on in Settings.

7. Codes you make

Saved codes go to Pictures/TrueQR (PNG) or Documents/TrueQR (SVG, PDF and bulk ZIP files) on your phone. A logo or background photo you add to a code is copied into the app's private storage. A CSV file you use for bulk create is read on your phone and is not uploaded.

8. Widget and shortcuts

A home-screen widget or shortcut shows one code you chose. Its picture is kept in the app's private storage, not in your gallery. Anyone who can see your home screen can scan it, so the app reminds you when you add a Wi-Fi or payment code.

9. Permissions

Camera: to scan codes. It is used only while the scanner is on screen and is released when you leave it. If you don't allow it, you can still scan from photos.

Vibrate: to buzz when a code is found. You can turn it off in Settings.

The app has no storage, contacts or location permission. Photos come through Android's photo picker, and CSV files through the file picker.

10. Feedback

If you send feedback from Settings, we receive your message, its type, your email if you give it, the app version, Android version, phone model and language. We use it only to answer you and improve TrueQR, keep it for up to 12 months, and never sell or share it. Your IP address isn't stored with it.

11. Ads

The free version shows ads from Google AdMob. To show and measure ads, AdMob may collect your device's advertising ID, your IP address (which gives an approximate location), how you interact with ads, and diagnostic information. Where the law requires it (for example in the EU, the UK and some US states), you are asked for consent first. You can change your choice at any time in Settings › Ad privacy choices. A Premium subscription in the app turns ads off.

How Google uses this data: https://policies.google.com/technologies/partner-sites

12. Purchases

TrueQR Premium is a subscription through Google Play, US$2 a month or US$20 a year. It removes ads and unlocks the generator extras (logo, gradients, background photos, large and print sizes, SVG and PDF, printable sheets and bulk create) and CSV export of history and batches. Google handles the payment and the renewal, and you can cancel any time in Google Play. TrueQR only learns whether your subscription is active.

13. Children

TrueQR isn't directed at children under 13.

14. Changes

When this policy changes, we update this page and the date at the top.