OpenQR Privacy Policy

Last updated:

This Privacy Policy explains how the OpenQR mobile application (the “Application”) handles information. The Application is provided by Murat Sancak, operating under the name murasanca (“we,” “us,” or “our”).

1. Scope

This Privacy Policy primarily applies to information handled by us through the Application. For completeness, it also describes related processing when you view this policy page or contact us directly. Except for those matters, it does not govern the independent practices of an app store, browser, device manufacturer, operating-system provider, recipient, search provider, website, or other third party that you choose to use.

2. Our Privacy Practice

Except for the Android ML Kit technical metrics described in Section 4, we do not directly collect or receive personal data or usage data through the Application. This includes account details, camera media, contact information, financial information, location data, and scan content. OpenQR does not require an account, and we have not integrated developer-operated advertising, backend servers, behavioral profiling, cloud synchronization, crash reporting, product analytics, social login, or tracking technologies.

We do not receive Google’s ML Kit metrics. We do not disclose, license, monetize, rent, or sell Application-derived personal data that we hold for our own purposes or to data brokers or advertisers. The user-directed actions described below are controlled by you and do not involve us disclosing data that we hold.

3. Camera Permission and On-Device Scanning

OpenQR requests access to your device camera solely to scan supported barcodes and QR codes. Your operating system controls this permission, and you may deny or revoke it through your device settings. Denying camera access prevents the scanning feature from working.

Camera frames and scan recognition are processed locally on your device. We do not receive, record, store, upload, or remotely access camera images, video, or audio. OpenQR does not request microphone access.

4. Google ML Kit Metrics on Android

On Android, the barcode-scanning component included with OpenQR uses Google ML Kit. Google states that input data, including camera images, and scan results are processed on the device and are not sent to Google. ML Kit may nevertheless contact Google’s servers for items such as bug fixes, model updates, and hardware-accelerator compatibility information.

Google states that ML Kit automatically collects API configuration, application information, device information, error codes, event types, feature input and output size, feature version, performance metrics, and per-installation identifiers for diagnostics and usage analytics. Google states that this information is encrypted in transit using HTTPS and is not transferred by Google to other third parties. We do not receive or use these metrics.

Google’s processing is governed by its own privacy terms, may occur outside your country, and may change independently of us. For details, review Google’s ML Kit Android Data Disclosure and ML Kit Terms and Privacy.

5. Scanned Content and Session Memory

Scanned content is processed locally. To let you recall recent results, OpenQR may hold up to eight unique scan results temporarily in the Application’s working memory during the current app session. These results are not written to persistent storage, sent to us, or available to us, and they are cleared when the Application’s process ends.

6. Actions You Initiate

OpenQR lets you choose what to do with scanned content. The following actions are performed only at your direction:

These user-directed actions may cause the selected content and routine connection information, such as an IP address or browser details, to be processed by the chosen third party. We do not receive that information and do not control the third party’s handling of it. Review the applicable third party’s privacy notice before proceeding.

7. Retention and Deletion

We retain no scan data or other Application-derived personal data on our systems. Results kept in session memory are cleared when the Application’s process ends. If you copy, open, search, or share a result, any resulting copy is controlled by your device or the third party you selected and must be managed through that device or service. Google controls the retention and deletion of ML Kit metrics under its own policies; we cannot access or delete those metrics.

8. Platform Services

Your app store, device manufacturer, and operating-system provider may independently process information relating to downloads, updates, security, diagnostics, permissions, or device operation. Their processing is governed by their own terms and privacy notices, and we do not control it.

9. This Policy Page

This policy page is hosted through GitHub Pages and displays an image served through GitHub infrastructure. When you visit this page, GitHub may receive routine request information, such as your browser details, IP address, and the requested resource, under its own privacy notice. We do not place our own advertising, analytics, cookies, or tracking technologies on this page and do not receive GitHub’s visitor logs.

10. Children’s Privacy

OpenQR does not create user accounts or profiles, and we do not intentionally collect personal data from children. On Android, Google ML Kit may process the technical metrics described in Section 4 when the scanning feature is used; camera frames and scan content remain on the device. If you believe information has been provided to us outside the Application by or about a child, please contact us so that we can address the matter appropriately.

11. Communications You Initiate

If you contact us by email or through a third-party service, we will necessarily receive the information you choose to provide, such as your email address, message, and related communication metadata. This information is not collected through OpenQR. Where applicable law requires a legal basis, we process it as necessary to take steps at your request, comply with legal obligations, and pursue our legitimate interests in responding, maintaining security, and protecting legal rights, provided those interests are not overridden by your rights.

Your communication provider and ours may process the message, and we may disclose it to professional advisers or public authorities only when reasonably necessary for the purposes above. A provider may process the communication outside your country subject to its safeguards and applicable law. We do not sell this information or use it for advertising. We keep it until the inquiry is resolved and thereafter only for an applicable legal, recordkeeping, security, or limitation period.

12. Your Privacy Rights

Depending on where you live, applicable law may grant rights concerning personal data, including rights of access, complaint, correction, deletion, objection, or restriction. Because we do not maintain personal data collected through OpenQR, there ordinarily is no Application data for us to access, correct, delete, or export. Requests concerning Google’s ML Kit metrics must be directed to Google because we do not receive or control those metrics. You may contact us about information contained in a direct communication you sent to us or with any privacy question. You may also lodge a complaint with a competent data-protection authority.

13. Security

OpenQR reduces privacy risk by keeping scanning on your device and by not operating a backend that receives scan data. Information held on your device is protected by the safeguards of your device and operating system. Google states that ML Kit metrics are encrypted in transit using HTTPS. Information you direct to another service is protected according to that service’s practices.

14. Changes to This Privacy Policy

We may revise this Privacy Policy to reflect changes to the Application, law, or our practices. The revised policy will be posted on this page with a new “Last updated” date. If a future version of OpenQR begins collecting personal data, we will update this notice and provide any additional notice or choice required by applicable law before or when that collection begins.

15. Contact

Questions or requests concerning this Privacy Policy may be directed to:

OpenQR app icon