EN
Download app
Back to home

Privacy Policy

Last updated: October 7, 2026

Introduction

QR Maker is operated by North Plus Studio (“we”, “us”, “our”). This Privacy Policy explains what information the QR Maker app (bundle id com.northplusstudio.qrapp) and our public web pages at qrmaker.com.tr collect, how we use it, and the choices you have. North Plus Studio is a trading name of DRIPAND LTD.

QR Maker is offline-first. Everything you create and scan is designed to stay on your device. Your data only leaves your device if you choose to create an account, sync to the cloud, or publish content. We do not sell your data, and we do not embed third-party trackers.

By using QR Maker you agree to this policy. If you do not agree, please do not use the app.

Data stored on your device

The following stays on your device and never leaves it unless you explicitly opt into an account or cloud sync:

  • QR codes you generate, including their content, styling, and settings.
  • Scan history and the results of scans you perform.
  • App preferences such as your theme, language, and layout choices.

This data is held in a local database that is encrypted at rest by your operating system. When you scan a code, camera frames are processed entirely on your device and are never uploaded to us.

You remain in control of this data. You can remove it by using the in-app Backup/Delete tools or by uninstalling the app.

Optional account & cloud sync

You can use QR Maker fully offline. If you choose to create an account or use cloud features, we process the following on our backend:

  • Your email address and display name.
  • Content you choose to sync or publish, including synced QR codes, dynamic-link destinations, digital cards (at /c), bio pages (at /@username), custom pages (at /p), and events.

Please note that bio pages and digital cards are public at their shared URLs — anyone with the link can view them. Only publish information you are comfortable making public.

Dynamic links & analytics

When someone scans or opens a dynamic link (/q/{code}), we record limited, aggregated analytics so you can understand how your links perform:

  • A timestamp of the visit.
  • A coarse country, derived from a hashed IP address (optionally using MaxMind GeoLite2).
  • A device type, inferred from the user-agent string.

Raw IP addresses are never stored — they are always hashed. Analytics are aggregated, de-duplicated over a 24-hour window, and bot-filtered. If you use the event lead scanner, any lead voice notes you record are uploaded to our backend storage so they are available to you.

Ads & subscriptions

Ads are off by default. Third-party services are only used when explicitly enabled or consented to:

  • AdMob — Google AdMob is used only if the operator enables ads. Your advertising identifier (IDFA on iOS) is accessed only after you grant consent through the UMP consent flow and iOS App Tracking Transparency (ATT). If you decline, you will only see non-personalized ads. Premium removes all ads.
  • RevenueCat — used to manage subscriptions. Billing is handled by the App Store or Google Play; we never see your card details.
  • Sign in with Google / Apple — optional, used only for authentication if you choose to sign in.
  • Google Safe Browsing — optional, used for server-side URL-safety checks when that feature is enabled.

We do not collect crash or diagnostics data today.

Permissions

QR Maker requests device permissions only when a feature needs them, and sensitive data accessed this way is used only for the action you take and is not sent to our servers:

  • Camera — to scan QR codes and barcodes; frames are processed on-device.
  • Contacts — only when you choose to add a scanned contact.
  • Calendar — only when you choose to add an event to your calendar.
  • Photos — only when you save an image or scan from a photo.
  • Precise location — only when you choose to drop a pin or add location data.

You can review and change these permissions at any time in your device settings.

Legal basis & your rights

Depending on where you live, your personal data is protected by the EU/UK GDPR and, in Türkiye, by the Personal Data Protection Law (KVKK, Law No. 6698). We process personal data on the basis of your consent, the performance of our services to you, and our legitimate interests in operating and securing QR Maker.

You have the right to:

  • Access the personal data we hold about you.
  • Rectification of inaccurate or incomplete data.
  • Erasure of your data.
  • Restriction of processing.
  • Objection to processing.
  • Portability of your data.

To exercise any of these rights, email us at privacy@qrmaker.com.tr. You also have the right to lodge a complaint with your local data protection authority.

Data retention

We keep your personal data only for as long as necessary. Data stored on your device remains until you delete it or uninstall the app. Account and synced data are retained while your account is active.

When you request account deletion, your account is closed immediately and your data is permanently erased within 30 days of your request (never more than 90 days). You can cancel the deletion and restore your account by signing in again before the erasure date. After erasure, we keep only non-personal records: anonymized abuse reports about content you published, aggregate statistics that contain no personal identifiers, and a minimal internal tombstone (your former account id and the date it was erased).

Account deletion

You can delete your account and its server-side data at any time. In the app, go to Settings → Account → Delete account, re-authenticate, and confirm. Your account closes immediately: public bio pages, digital cards, dynamic QR links, and tracked links stop working right away, and your data is permanently erased within 30 days as described above. If you no longer have the app, email us at privacy@qrmaker.com.tr to request deletion. For full details, see the account deletion page.

Children

QR Maker is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us so we can remove it.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the date at the top of this page and, where appropriate, notify you within the app.

Contact

For privacy questions or to exercise your rights, email privacy@qrmaker.com.tr. For general support, email support@qrmaker.com.tr.