This Privacy Policy describes how the Scanly: QR Code Scanner mobile application ("the App", "we", "us") handles information when you use it. The App is an offline-first QR & barcode scanner and generator that runs primarily on your device.
The following stays on your device and is not transmitted to us:
This data is stored using the operating system's standard local storage (MMKV key-value store) and a local SQLite database with full-text search. Uninstalling the App removes it. Scan history is capped at 500 non-favorited entries and can be cleared from Settings → Clear history at any time.
| Permission | Why |
|---|---|
| Camera | Capture and decode QR/barcodes in real time. Frames are processed on-device and are not recorded or transmitted. |
| Photo library / Gallery (read) | Let you import an existing image so the App can decode a code embedded in it. The image is read locally and not uploaded. |
| Storage / files (Android, scoped) | Save a generated code as an image, or export scan history as a CSV file to a location you choose. |
| Vibration | Provide a short haptic confirmation when a scan succeeds (if enabled). |
| App Tracking Transparency (iOS) | Prompt for permission to use the advertising identifier so AdMob can show personalized ads. Declining limits ads to non-personalized. |
The App does not request location, microphone, contacts, calendar, or background-location permissions.
To support advertising, the App integrates the following Google service:
Personalized ads only run when you grant consent through the Google User Messaging Platform (UMP) prompt that appears on first launch in jurisdictions where consent is required (GDPR for the EU/UK and equivalent regimes worldwide). On iOS, the App Tracking Transparency (ATT) prompt is presented as part of the same UMP flow. If you decline, AdMob serves only non-personalized ads.
The App does not use Firebase Analytics, Firebase Crashlytics, or any other first-party analytics SDK. We do not receive scan contents, generated-code contents, search queries, or any custom event payloads.
The App relies on services from Google LLC, Apple Inc., and Google Play. Their privacy practices are governed by their own policies:
We do not control and are not responsible for the practices of these third parties.
We do not sell your personal information as defined by the CCPA or any equivalent regime. The App has no backend, so we have nothing to share with anyone — the only data flow off the device is the AdMob SDK acting on Google's behalf, as described in Section 2.3. We may disclose information if required by law, legal process, or to protect rights and safety.
Depending on where you live (e.g. EEA, UK, California), you may have the right to:
You can reset your advertising identifier at any time from your device settings (Android: Settings → Google → Ads; iOS: Settings → Privacy & Security → Tracking).
The App is rated 13+ general audience. We do not knowingly collect personal information from children under 13 (US COPPA) or under 16 (some EU member states under GDPR). The App is not configured for "Tag for Child-Directed Treatment" or "Tag for Users under the Age of Consent in Europe." If you believe a child has provided information, contact us and we will assist.
App data lives on your device; protection is governed by your device's OS-level encryption and lock-screen security. The AdMob SDK transmits data to Google over HTTPS/TLS. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
AdMob may process data in countries outside your own, including the United States. By using the App, you understand that information used for advertising may be transferred to and processed in those countries.
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest revision. Continued use of the App after changes means you accept the updated policy.
Questions or requests about this policy or your data:
Bilgehan Coskun
appfactory.acc@gmail.com