1. Overview
This policy covers QR Barcode Reader - Generator (also listed in Turkish as “QR Barkod Okuyucu - Oluşturucu”) and this informational website. The app is provided by the developer identified in its Google Play listing.
We do not operate an application backend that receives your scanned content, camera images, contacts or scanning history. This does not mean that every part of the app is offline or that third-party services collect no information.
2. Information processed on your device
Camera and images
The app processes camera frames and images you select or share with it to recognize QR codes and barcodes. The Android scanning model is included with the app. Images are not uploaded to our server for recognition. Temporary image files may be created while processing or sharing.
Code content and history
Scanned and generated content can include URLs, text, product identifiers, Wi-Fi credentials, contact details, phone numbers, messages, calendar events and coordinates. When history is enabled, records are stored in the app’s local database, with information such as the code format, time, name, favorite status and, where enabled, a scan photo.
Saving recognized sensitive content is disabled by default. Recognized Wi-Fi, contact, phone, SMS, email and calendar content is excluded unless you enable the relevant preference. Recognized one-time-password provisioning codes are not saved to history. Detection cannot identify every secret embedded in arbitrary text. Changing a preference does not erase earlier records.
Preferences and purchases
Settings such as language, theme, scanning preferences and history choices are stored locally. When the remove-ads purchase is available and used, the app processes Google Play purchase information to verify ownership and restore the entitlement. A verified purchase receipt is cached locally in encrypted storage. We do not receive your payment-card details.
3. Permissions and device features
- Camera: used to scan codes. You can revoke access in Android settings.
- Photos and files: the system picker provides access to images you select. Saving or sharing an export happens at your request. Older Android versions may request storage permission to save images.
- Location: requested when you use the current-location action in the location picker. The app does not continuously track you or request background location. You can select a location manually instead.
- Contacts: a system contact picker supplies the phone number you choose and, where applicable, a display name. The app does not request access to your entire address book.
- Calendar, Wi-Fi and external apps: requested actions are passed to the relevant Android interface or app. You control whether to complete them.
- Internet and advertising identifiers: network services and the Google Mobile Ads SDK may use network access and advertising-related device capabilities.
4. Third-party services and sharing
Google Mobile Ads (AdMob)
The app integrates Google Mobile Ads for banner, interstitial and optional rewarded advertising. Where required (for example in the EEA and UK), Google’s consent message is shown before ads are requested, and your choice can be changed later under Ad privacy options in the app’s About screen. Watching a rewarded ad is always optional. Depending on the SDK, configuration, consent choices and applicable law, Google may process information including IP address, device or advertising identifiers, approximate location inferred from IP, ad interactions and diagnostic information to deliver ads, measure performance and prevent fraud.
The app does not intentionally attach your scanned text or photos to ad requests. Development builds may use demonstration ads; this is not a guarantee that the SDK makes no network requests. See Google’s Privacy Policy and Google’s advertising information. Device advertising controls are available in Android settings. Advertising and consent availability may differ by app version and region.
Google Play billing
If you buy the remove-ads product, Google Play processes the transaction under its own terms and privacy policy. The app uses purchase status, product information and a purchase token or receipt to validate and restore ownership. An internet connection and the relevant Google Play account are required for purchases and restoration.
OpenStreetMap
Opening the location map requests map tiles from OpenStreetMap servers. Those requests disclose your IP address and requested map area to the map provider. Tiles may be cached on your device. See the OpenStreetMap Foundation Privacy Policy.
Links, search and exports
When you open a website, search for a code, request directions, or share or export content, the selected service or receiving app receives the information needed for that action. A search provider may receive the code or text you search for. Shared or exported files can contain unencrypted personal information, and their recipients’ policies apply. These actions are not automatic background uploads by the app.
Third-party providers may process data in countries other than your own and apply their own retention periods and safeguards.
5. Retention, deletion and your choices
- Local history is kept until you delete it, clear the app’s data or uninstall the app. There is no automatic expiry for all history records.
- You can delete individual records, clear history, disable future history entries and manage saved scan photos in the app. Photo cleanup removes photos, not necessarily the accompanying text records.
- App preferences remain on the device until changed or app data is removed. Purchase verification data can be refreshed or removed when ownership is checked.
- The app disables Android backup for its private app data. Files you export to your gallery, another app or cloud storage are outside that setting and must be deleted separately.
- Clearing local data does not delete information independently held by Google, map providers, receiving apps or other services. Use those providers’ privacy controls for such requests.
Unlimited Pro verification
Unlimited Pro is a one-time purchase that removes ads. To verify or restore it, the app sends its Google Play purchase token, installation public key and proof, and a Play Integrity token over HTTPS to our Cloudflare Worker. The Worker checks purchase status with Google Play and app licensing, app integrity and device integrity with Google Play Integrity. Google and Cloudflare process network and technical information under their privacy policies. Payment-card details, scanned content and photos are not sent to this verification service.
The Worker issues an installation-bound signed entitlement valid for up to seven days offline. This expiry is a verification interval, not a subscription. The app stores that entitlement using Android Keystore-backed encryption and periodically refreshes it; a device restart requires online verification. Purchase tokens and Integrity tokens are processed for the request and are not written to our purchase database or application logs. Short-lived, one-use challenges and rate-limit counters are stored in Cloudflare Durable Objects addressed by a hash of the connecting IP address; expired records are removed by scheduled cleanup. Cloudflare may separately retain operational metadata according to its policies. Refunds may take until the offline entitlement expires to affect access.
6. Security
Private app data is stored within Android’s application storage. Signed purchase-entitlement caching uses Android Keystore-backed encryption. The history database itself is not additionally encrypted by the app, and exported content is not automatically encrypted. Avoid saving or sharing secrets unnecessarily.
No device or transmission method can be guaranteed completely secure. A compromised or rooted device, or a recipient of an exported file, may expose information beyond the app’s control.
7. Children’s privacy
The app is a general-purpose utility and does not provide child accounts or ask users to submit their age or profile information. Parents and guardians should supervise children’s use of scanning, external links, advertising and sharing. If you believe a child’s personal information has been disclosed through a service associated with the app, contact the developer using the details below and, where relevant, the service provider.
8. This website
This site is hosted on Cloudflare Workers. Cloudflare processes request information such as IP addresses and technical request metadata to deliver and secure the website, subject to Cloudflare’s Privacy Policy. Public pages do not include our own analytics, advertising scripts, account registration or contact forms, and do not set application cookies.
The restricted administration panel uses essential secure cookies for initial setup (up to one hour) and authenticated sessions (up to eight hours). Administrator usernames, salted password hashes, session records and published website content are stored in Cloudflare Durable Objects. Login protection temporarily stores hashed IP addresses and attempt counters for 15-minute windows. Expired records are periodically removed; administrator credentials and published content remain until replaced or removed by the site operator. This storage does not receive scanned codes or other app history.
Fonts are loaded from Google Fonts, which receives network request information such as your IP address and browser headers. Google’s privacy policy applies to those requests. Following an external link takes you to a service governed by its own policy.
9. Contact, requests and updates
For privacy questions or requests, use the developer contact details in the app’s Google Play listing, under App support. You can also locate the publisher through the Google Play developer page. Please identify the app as com.autoroun.scan and do not send passwords, Wi-Fi credentials or payment details.
Depending on where you live, you may have rights to access, correct or delete personal information, or object to certain processing. Most app content is held only on your device and cannot be accessed or deleted remotely by us. Requests concerning independently processed third-party data should also be directed to the relevant provider.
This policy may be updated when the app or its services change. The effective date at the top identifies the current revision.