QR & Barcode Toolkit Privacy Policy
Effective November 7, 2026
In short: the codes you scan and create stay on your device. There is no account and no QR & Barcode Toolkit server, so we never receive your codes, links, contacts or Wi-Fi passwords. The free version shows ads from Google AdMob, which collects some device data as described below. Premium turns ads off.
Who we are
QR & Barcode Toolkit ("the app") is published by the developer shown on its Google Play and App Store pages ("we"). For any privacy question, email maximumunlimited@gmail.com.
Your codes stay on your device
- Camera. The app uses the camera only while the Scan screen is open, to detect QR codes and barcodes. Camera images are not saved or sent anywhere.
- Code detection runs on your device (Google ML Kit on Android, Apple's frameworks on iOS). The content of a code is not uploaded.
- Photos. Scanning a code from an image, or adding a logo to a QR code, uses the system photo picker, so the app only sees the image you pick. Saving a code to your gallery only adds that image; the app does not read your photo library.
- History and favorites are kept in a database in the app's private storage on your device. Wi-Fi passwords are removed before saving unless you turn on "Keep Wi-Fi passwords in history". You can delete single items or clear everything in Settings.
- Links. Scanned links are never opened automatically. The app shows a preview with basic warnings, checked on your device, and opens a link only when you tap it.
- Backups. On Android, your history and settings can be included in your device's Google backup if you have turned backup on, like other apps' data. On iPhone and iPad, they can be included in your iCloud or computer backup. We cannot read these backups.
- Sharing. Codes leave the app only when you tap Share or Save, and only to the app, person or place you choose.
Data collected by services in the app
We don't operate any servers or analytics of our own. The app includes these third-party components:
Google AdMob (free version)
To show ads, measure them and prevent fraud, the Google Mobile Ads SDK may collect and share with Google:
- your IP address, which can be used to estimate your general location;
- device identifiers, such as the advertising ID and app set ID;
- interactions with the app and with ads (for example app launches and ad taps);
- diagnostic information (for example app launch time and performance).
Data is sent encrypted. Where the law requires it (for example in the EEA, the UK, Switzerland and some US states), the app asks for your choice before ads load, and you can change it any time in Settings → Ad privacy choices. On iPhone, the app asks for permission before the advertising identifier (IDFA) can be used. You can also reset or delete your advertising ID in your device settings. Learn how Google uses this data at policies.google.com/technologies/partner-sites.
With Premium, no ads are requested.
Google ML Kit (Android)
Barcode detection runs on your device. ML Kit sends Google basic usage and performance metrics (device model and OS version, app name and version, a per-installation identifier that does not identify you, processing time and error codes). It does not send camera images or the content of your codes. See ML Kit's terms.
RevenueCat (purchases)
Premium is bought through Google Play or the App Store, which process the payment; we never see your payment details. To confirm which purchases you own and restore them on a new device, the app uses RevenueCat. It receives a random, anonymous app user ID, your purchase receipts and basic device information (such as OS version and country). It does not receive your name, email or codes. See RevenueCat's privacy policy.
Children
The app is not directed at children under 13, and we do not knowingly collect personal information from children.
Keeping and deleting your data
Your history and favorites stay on your device until you delete them in the app, use Settings → Clear all history, or uninstall the app. Because we don't hold your data, we can't access, export or delete it for you. For ad data held by Google, use your device's ad settings and Google's My Ad Center.
Your rights
Depending on where you live (for example under the GDPR or US state laws), you may have rights to access, correct, delete or object to the use of personal data. Contact us at the address above and we will help, including by pointing you to the right provider for data held by its services.
Changes
If this policy changes, we will update it here and change the date at the top.