QRScanner — Privacy Policy

Last updated: August 6, 2026

QRScanner is a cloud-synced app: you sign in with a Google account, and your lists are stored in Google's Firebase cloud so they follow you across devices and can be shared with people you invite. This page explains exactly what data the app handles, where it goes, and how to delete it.

Google Sign-In (required)

The app requires signing in with a Google account. Through Google Sign-In / Firebase Authentication we receive your name, email address, and profile picture. Your name is used to show who's signed in and is visible to members of lists you share or join — other members see your display name, never your email address. We don't use your account details for anything else, and we never sell or share them.

Your lists in the cloud

• Lists, items, counts, and notes are stored in Cloud Firestore (a Google Cloud service), tied to your account, and synced live to your devices.
• If you share a list — or join one with an invite code — its contents (items, counts, notes, and members' display names) are visible to everyone on that list. Access is invite-only: nothing you create is ever public.
• List owners and admins can remove members; leaving a list removes your access and your name from its member list.
• Data is encrypted in transit and at rest by Google's infrastructure, and access is enforced by server-side security rules.

Camera

The camera is used only while you're scanning, and all barcode recognition happens on your device (Google ML Kit). No photos or video are recorded, stored, or uploaded — only the decoded text of a code you scan is added to your list.

Product name lookup

When the automatic product-name feature looks up an EAN/UPC barcode, the app sends only the barcode digits to the Open Food Facts public database. No personal or account information is included in these lookups.

Purchases

Premium subscriptions are processed entirely by Google Play. The app receives confirmation of your subscription (a purchase token and plan) so it can unlock premium features. We never see your payment details.

Analytics and crash reports

The app includes Google Analytics for Firebase and Firebase Crashlytics, which collect standard app-usage information (screen views, session counts, device model, a pseudonymous app-instance identifier) and crash diagnostics. We use this to understand which features are used and to fix bugs. It is not used for advertising, and we don't sell data to anyone. The app contains no ads and no third-party advertising SDKs.

Delete your account and data

You can request deletion of your account and all associated data at any time, whether or not you still have the app installed:

• Email bitflip.rocks@gmail.com from the Google account you signed in with and we'll delete your account data — the lists you own, your membership and display name on shared lists, and your authentication record — normally within 30 days.
• Deleting a list you own removes it for all its members. Lists owned by other people are not deleted when your account is; only your membership and display name are removed from them.
• Analytics and crash data are retained per Google's standard Firebase retention periods and are not tied to your name or email.

Children

QRScanner is not directed at children under 13, and we don't knowingly collect personal information from them.

Changes

If this policy changes, the new version will be posted at this address with an updated date above.

Contact

Questions? Email bitflip.rocks@gmail.com.