Privacy Policy

Last updated: July 22, 2026

1. Information We Collect

We collect the following information when you use QRly:

  • Account information — your name and email address when you register
  • QR code data — names and destination URLs of QR codes you create
  • Scan data — when someone scans your QR code we record the time, approximate country (derived from IP address), device type, and browser. The raw IP address is used only to determine country and is not stored permanently.
  • Payment information — handled entirely by Safepay; we do not store your card details
  • Usage data — general usage patterns to improve the Service

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service
  • Process payments and manage subscriptions
  • Send transactional emails (password resets, billing receipts)
  • Respond to support requests
  • Improve and develop new features

We do not sell your personal information to third parties.

3. QR Code Scanning

When someone scans a QR code, we collect the following data to provide analytics to the QR code owner:

  • Scan timestamp — date and time of the scan
  • Approximate country — derived from the scanner's IP address via a geo-lookup service. The raw IP address is used transiently for this lookup and is not stored in our database.
  • Device type — Mobile, Tablet, or Desktop, inferred from the User-Agent header
  • Browser — e.g. Chrome, Safari, Firefox, inferred from the User-Agent header

This data is associated with the QR code, not with any individual. We do not store raw IP addresses, names, or any other personally identifying information about people who scan QR codes.

4. Third-Party Services

We use the following third-party services:

  • Safepay — for payment processing. Safepay's privacy policy applies to payment data.
  • ip-api.com — for converting IP addresses to approximate country codes during QR code scans. Only the country code result is stored; the IP address is not retained.
  • Email provider — for sending transactional emails (password resets, billing receipts).

5. Data Retention

We retain your account data for as long as your account is active. Scan history is retained to provide analytics. If you request account deletion, we will delete your data within 30 days.

6. Cookies

We use session cookies to keep you logged in. We do not use tracking cookies or third-party advertising cookies.

7. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and data
  • Export your data

To exercise any of these rights, contact us at support@qrly.app.

8. Security

We implement industry-standard security measures to protect your data. Passwords are hashed and never stored in plain text. All data is transmitted over HTTPS.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact

If you have any questions about this Privacy Policy, contact us at support@qrly.app.