Privacy Policy

1. Who is responsible

The data controller is Garbis Tapacian. Contact: boogieapps.help@gmail.com.

2. What stays on your phone

Everything you put into QR 360 is stored only in the app on your device:

• The codes you create, their content and their designs, including any logos or photos you add. Photos are copied into the app and resized; the originals in your library are not changed.
• Your scan history, favorites and saved styles.
• Your settings.

We cannot see any of this. It is removed when you delete it in the app or delete the app. It is included in your own device backups (iCloud or your computer) like other app data.

Locked notes are encrypted on your phone with the password you choose. The password is never stored, by us or by the app.

3. Camera, photos, location and Face ID

• Camera: used only to read codes. Images are processed on your phone and never saved or sent.
• Photos: when you choose a photo to scan or to use in a design, only that photo is read. QR 360 can also save the images you export to your library, if you allow it.
• Location: used only when you tap "Use my location" while creating a location code, to fill in the coordinates. It is not stored or sent anywhere.
• Face ID, Touch ID or passcode: if you turn on App Lock, unlocking is handled entirely by iOS. QR 360 only learns whether it succeeded.

You can change any of these permissions at any time in your iPhone settings.

4. Crash reports (optional, off by default)

If you turn on "Send crash reports" in Settings, the app sends a short report when something goes wrong, so we can find and fix the problem. A report contains:

• the error message and the technical stack trace
• the screen the app was on, with any identifiers removed
• the app version and build, your iOS version and your device model (for example "iPhone 17 Pro")
• the date and time

A report never contains the content of your codes or scans, your photos, your history, your location or anything you typed. Text that looks like a web address, email address or long number is removed from error messages before sending. Reports carry no identifier, so we cannot link them to you, to your device or to each other.

Reports are stored by our hosting provider, Supabase, in Frankfurt, Germany (EU), and deleted automatically after 90 days.

Purpose: finding and fixing bugs. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time by turning the setting off; reports already sent are deleted on the 90-day schedule.

5. Bug reports and emails

If you report a bug or contact us, the app opens a pre-filled email in your own email app. Nothing is sent until you press Send. You choose whether to include your app version, iOS version and device model.

We receive your email address and whatever you write. We use them only to answer you and fix the problem, and delete the conversation when it is no longer needed. Our email is provided by Google (Gmail). Legal basis: our legitimate interest in supporting the app (Art. 6(1)(f) GDPR).

6. What we do not do

• No accounts or sign-in.
• No advertising and no advertising identifiers.
• No analytics, tracking or profiling, and no third-party SDKs that collect data.
• We never sell or share your information.

7. Links and other apps

When you open a link from a scanned code, it opens in your browser, such as Safari, and the website receives what any website receives, such as your IP address. QR 360 does not contact the address before you choose to open it; the safety check on links runs on your phone.

Actions like calling, texting, emailing, adding a contact or event, or opening Maps hand over to those apps. Their own privacy policies apply.

8. Your rights

Under the GDPR you have the right to access, correct and delete your data, to restrict or object to processing, to data portability and to withdraw consent at any time. Because crash reports are anonymous, we cannot find a particular person's report; they are deleted after 90 days.

To exercise your rights or ask a question, email boogieapps.help@gmail.com. You can also complain to the Commissioner for Personal Data Protection of Cyprus (dataprotection.gov.cy) or the authority in your country.

9. Children

QR 360 is a general-purpose tool and is not directed at children. It does not knowingly collect information from anyone.

10. Changes

We update this policy whenever the app starts handling data differently. The date at the top shows the latest version, and important changes are shown in the app.