Privacy Policy for QRCreator: Secure QR Generator
Effective date: November 7, 2026
Last updated: November 7, 2026
This Privacy Policy explains how AppMaven ("we", "us") handles information when you use the QRCreator: Secure QR Generator Android app (the "App", package name com.appmaven.qrcreator). Please read it together with our Terms of Service.
At a glance
- The QR codes you create, their names, categories and images stay on your device. AppMaven has no server that receives them, and the App has no account.
- The camera is used only to scan QR codes, and scanning happens on your device.
- Password-protected QR content is encrypted on your device. Your password is never stored or sent.
- The App shows ads through Google AdMob and uses Google Analytics for Firebase. These Google services collect device identifiers, approximate location from your IP address, app interactions and diagnostics.
- The App has no in-app purchases. You can delete saved QR codes at any time in the App.
1. Who is responsible
AppMaven is the developer of the App and is responsible for the information described in this policy that we control. Contact: hacong86@gmail.com. Google acts under its own terms and policies when it provides advertising, consent and analytics services.
2. Information stored on your device
- QR content you enter: text, links, contact cards (vCard), Wi-Fi details, email, SMS, phone numbers, locations or calendar events that you type to create a QR code. The App does not read your device's contacts, calendar or location to do this; you type the details yourself.
- Saved QR codes: the content, the name and category you give each code, the creation date, and the QR image file. They are kept in the App's private settings and in the App's own folder on your device.
- Design choices: colors, size and a logo image if you choose one. The logo is picked through Android's file picker, and the App reads only the image you select.
- Settings: your language choice and a counter of how many codes you have saved, used to space out full-screen ads.
We do not transmit this content to an AppMaven server. The App turns off Android's automatic app backup, so this data is not copied to your Google account backup by the App.
3. Password-protected QR codes
When you set a password, the App derives an encryption key from it (PBKDF2 with SHA-256) and encrypts the QR content with AES-GCM on your device. Only the encrypted content is placed in the QR code and in your saved list. The password itself is not stored or transmitted. If you forget it, neither you nor we can recover the content.
4. Camera and scanning
The App asks for camera permission only when you use the scanner. The camera image is processed on your device to read the QR code and is not stored or sent by the App. The scanned content is shown to you first. It is copied to the clipboard only if you tap Copy, and it is opened in another app (for example a browser, phone or email app) only if you tap Open. You can turn off camera permission at any time in Android settings; the rest of the App keeps working.
5. Sharing QR codes
When you share a QR code, the App passes the image to the app you choose through Android's share menu. What happens next is governed by that app or recipient. We do not receive a copy.
6. Advertising (Google AdMob)
The App shows banner ads on the main and saved-codes screens and a full-screen ad after you save several codes, using the Google Mobile Ads SDK. According to Google's data disclosure for this SDK, it automatically collects and shares:
- Approximate location estimated from your IP address (the App does not request GPS location);
- App interactions, such as app launches, taps and ad views;
- Diagnostics about app and SDK performance;
- Device or other identifiers, such as the Android advertising ID and app set ID.
Google uses this information for advertising, measurement, analytics and fraud prevention, and states that it is encrypted in transit. Learn more in How Google uses information from sites or apps that use its services.
6.1 Consent
The App uses Google's User Messaging Platform (UMP). Each time the App starts, it checks with Google whether a consent message is required in your region, such as the European Economic Area, the United Kingdom or Switzerland. When it is, the message appears before ads load, and ads are requested only when Google's tool allows it. Your choice is stored on your device by Google's tool. When available for your region, you can review or change it through Privacy options in the App's menu; the change applies the next time you open the App. Choosing non-personalized ads does not necessarily stop all ads or all ad-related processing.
6.2 Advertising ID
You can reset or delete your advertising ID in Android settings (usually Settings → Privacy → Ads, or Settings → Google → Ads; names vary by device).
7. Analytics (Google Analytics for Firebase)
The App includes Google Analytics for Firebase to help us understand how the App is used and to improve it. The App does not send custom events or your QR content to Analytics. The SDK automatically collects events such as first open, sessions, screen views and app updates, together with an app-instance identifier, device model, operating system, language, app version and approximate location derived from your IP address. Because the App also includes advertising, Analytics may collect the Android advertising ID. Analytics runs independently of the advertising consent choice described above. Resetting or deleting your advertising ID in Android settings limits its use. See Google's description of Analytics data and Firebase privacy information.
8. Permissions
- Camera: to scan QR codes (section 4).
- Internet and network state: to load ads, check consent requirements and send analytics.
- Advertising ID: used by the Google Mobile Ads SDK and Analytics (sections 6 and 7).
- Storage (Android 9 and older only): to save QR images on older Android versions.
The App does not request access to your location, contacts, calendar, microphone or phone calls.
9. How we use information
- To create, save, scan, protect and share QR codes at your request, on your device.
- To show ads that keep the App free, and to measure ads and prevent fraud (through Google).
- To understand App usage, fix problems and improve the App (through Google Analytics for Firebase).
- To answer you if you contact us, and to comply with legal obligations.
10. Legal bases (EEA, UK and Switzerland)
Where data protection laws such as the GDPR apply, we rely on your consent for personalized advertising and the related use of identifiers, our legitimate interests in measuring and improving the App, delivering non-personalized ads, security and fraud prevention, and legal obligations where the law requires processing. You can withdraw consent at any time through Privacy options.
11. Sharing and sale of information
AppMaven does not sell your personal information for money. Information is received by Google as described in sections 6 and 7. Under some US state laws, such as the California CPRA, using advertising identifiers for personalized ads may be considered "sharing". You can limit this by deleting or resetting your advertising ID in Android settings and through Privacy options where available. We may also disclose information if the law requires it.
12. Retention and deletion
- Saved QR codes stay on your device until you delete them. You can delete each code from the saved-codes screen, which also removes its image file. To remove all saved codes at once, clear the App's storage in Android settings or uninstall the App. We cannot recover deleted codes.
- Codes you shared or printed are outside the App; delete them where you sent or saved them.
- Google data collected by AdMob, UMP and Analytics is kept and deleted by Google under its policies and our Analytics settings. Because the App has no account, AppMaven cannot link this data to you by name or email.
- Emails to support are kept in our mailbox as long as needed to handle your request. You can ask us to delete them.
The App does not create accounts, so there is no account to delete.
13. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, to withdraw consent and to complain to a data protection authority. Most App data is only on your device and under your control. For data held by Google, use Google's privacy tools. For anything else, contact us at hacong86@gmail.com; we will not treat you differently for using these rights.
14. Children
The App is not directed to children under 13 (or the minimum age of digital consent in your country, if higher), and we do not knowingly collect personal information from them. If you believe a child has provided personal information to us, contact us and we will take appropriate steps.
15. International processing
Google may process information in countries other than your own, including outside Vietnam and the EEA, using the safeguards described in its own policies, such as Standard Contractual Clauses.
16. Security
Saved data stays in the App's storage on your device and is protected by your device's own security. Password protection adds encryption to the QR content you choose to protect. Google states that its SDK data is encrypted in transit. No method of storage or transmission is completely secure, so protect your device with a screen lock and choose strong passwords for protected codes.
17. Changes to this policy
We may update this policy when the App or the services it uses change. The date above shows the latest version. Material changes may also be announced in the App or on the store listing.
Contact
Developer: AppMaven
App: QRCreator: Secure QR Generator (com.appmaven.qrcreator)
Email: hacong86@gmail.com
Support: appmavenstudio.com/support
Related: Terms of Service · App page · Google Privacy Policy