This Privacy Policy applies to the mobile application QRForge
(Android package name com.varlextech.qrforge, the "App"),
developed and published by Varlextech Limited ("Varlextech Limited", "we",
"us", or "our"). It explains what information the App handles, how it is
used, the third-party services integrated into the App, and the choices you
have.
By installing or using the App, you agree to the practices described in this policy. If you do not agree, please do not use the App.
1. Summary
- QRForge is an offline-first QR & barcode toolkit. Your scan history, created codes, and settings are stored locally on your device only. Varlextech Limited operates no servers and does not itself collect, transmit, or store your personal data.
- Camera frames and photos you select are decoded on your device and are never uploaded to us.
- The App shows advertising via Google AdMob and offers an optional "Remove Ads" in-app purchase processed by Google Play Billing / Apple StoreKit. These third-party services may collect device and usage data under their own privacy policies, as detailed in Section 5.
- You can delete all data the App stores by clearing the app's storage or uninstalling it.
2. Information stored on your device
QRForge saves the following data locally on your device (in app-private storage) so the App can function and remember your history and preferences:
- Scan history — the decoded text content of codes you scan (which may include URLs, Wi-Fi credentials, contact details, email, phone, SMS, geo, or event data embedded in those codes), along with timestamps and favorite flags. Capped at 100 entries.
- Created history — the payloads of QR codes you generate in the App (text, URLs, Wi-Fi, email, phone, SMS, contact, or geo templates). Capped at 100 entries.
- Settings — theme preference (light/dark/system), haptic feedback toggle, continuous-scan mode, and enabled barcode formats.
- Purchase entitlement — a flag recording whether the "Remove Ads" purchase is active.
This data never leaves your device and is not accessible to Varlextech Limited. It is deleted when you clear the App's data or uninstall the App.
3. Device permissions
The App requests the following device permissions, used solely to provide its features. All processing happens on your device:
- Camera — required to scan QR codes and barcodes. Live preview frames are analyzed in real time on your device; they are not recorded, saved, or transmitted.
- Photo library (read) — used only when you choose to scan a code from an existing photo. The selected image is decoded on-device and is not uploaded. On Android 14+ and iOS, the App accesses only the items you explicitly select where the OS supports limited access.
- Photo library (add/save) — used only when you tap to save a generated QR code image to your photo library.
Denying the camera permission disables live scanning; the generator and history features continue to work. You can grant or revoke permissions at any time in your device settings.
4. Information Varlextech Limited does not collect
We do not ourselves collect, request, or have access to:
- Your name, email address, phone number, or contacts
- Account credentials (the App has no sign-up or login)
- Precise location
- Camera recordings or your photo library (used on-device only, as described in Section 3)
- Payment card details (all payments are processed by the app store)
- Any analytics or telemetry — the App includes no Varlextech Limited-operated analytics, tracking, or crash-reporting service
5. Third-party services
The App integrates the following third-party services. Each acts as an independent data controller and processes data under its own privacy policy.
5.1 Google AdMob (advertising)
QRForge displays banner and interstitial ads provided by Google AdMob (Google LLC). To serve and measure ads, prevent fraud, and cap frequency, the AdMob SDK may collect and process:
- Device identifiers, including the Android Advertising ID (AAID) or iOS Identifier for Advertisers (IDFA, only where you grant App Tracking Transparency permission)
- IP address, from which coarse (city-level) location may be inferred
- Device and app information (model, OS version, screen size, app version)
- Ad interaction data (impressions and taps)
- Diagnostic and crash data related to the ad SDK
Personalized vs. non-personalized ads. Where required (e.g., in the EEA, UK, and Switzerland), consent for personalized advertising is requested through Google's User Messaging Platform (UMP) consent flow the first time you open the App, and can be changed at any time via your device or the consent options presented in the App. On iOS, the App requests App Tracking Transparency authorization before any tracking. You can also limit ad personalization globally via your device's advertising settings (Android: Settings → Privacy → Ads; iOS: Settings → Privacy & Security → Tracking), or reset/delete your Advertising ID. Purchasing "Remove Ads" removes all advertising from the App.
- Google Privacy Policy: https://policies.google.com/privacy
- How Google uses information from apps: https://policies.google.com/technologies/partner-sites
- Google's advertising technology partners: https://support.google.com/admob/answer/9012903
5.2 Google Play Billing / Apple StoreKit (payments)
The optional "Remove Ads" purchase is processed entirely by Google Play (on Android) or the App Store (on iOS) under the store's own terms and privacy policies. The store validates the transaction and the App records only a local flag that the purchase is active. Varlextech Limited never sees or stores your payment card information.
- Google Play Terms: https://play.google.com/about/play-terms/
- Apple Media Services Terms: https://www.apple.com/legal/internet-services/itunes/
6. How information is used
- Core features — scanning and decoding codes, generating QR codes, saving codes to your photo library, and maintaining your on-device history, favorites, and settings.
- Advertising — displaying ads, measuring ad performance, and preventing ad fraud (AdMob).
- Purchases — completing the "Remove Ads" transaction and restoring it across reinstalls (app stores).
For users in the EEA/UK, the legal bases are: performance of the contract (providing the App and the purchases you request), legitimate interests (fraud prevention and non-personalized advertising), and your consent (personalized advertising, where requested).
7. Data sharing and sale
Varlextech Limited does not sell your personal information and does not share data with third parties for their own marketing. The only disclosures are the automatic transmissions made by the embedded SDKs listed in Section 5, which are necessary to show ads and process purchases. Under some US state privacy laws (e.g., California's CCPA as amended by the CPRA), sharing an advertising identifier with an ad network for personalized advertising may be considered "sharing" for cross-context behavioral advertising — you may opt out as described in Section 9.
8. Data retention and deletion
All data the App stores itself remains only on your device and is erased when you clear the App's storage or uninstall it. Third-party providers retain the data they collect for the periods described in their own privacy policies. You may also contact us at varlextechltd@gmail.com to request deletion of any data held about you by our providers, and we will forward or action the request as appropriate.
9. Your rights and choices
Depending on where you live, you may have rights over your personal data, including the right to access, correct, delete, restrict or object to processing, data portability, and to withdraw consent.
- Delete your data: uninstall the App or use "Clear data"/"Clear storage" in your device's app settings — this removes all locally stored history and settings.
- Control permissions: grant or revoke camera and photo access in your device's app settings at any time.
- Control ad personalization: use the consent options in the App (EEA/UK), your device's advertising settings, or reset your Advertising ID at any time.
- Opt out of "sharing"/sale (US states): we do not sell personal data; to opt out of any ad-identifier sharing, disable ad personalization in your device settings or decline consent in the App's consent dialog.
- Purchases: restore or manage purchases via your app store account.
- Contact us: for any privacy request (access, deletion, questions), email varlextechltd@gmail.com. We respond within a reasonable time and will not discriminate against you for exercising your rights.
EEA/UK users may also lodge a complaint with their local data protection authority.
10. Children's privacy
QRForge is intended for a general audience and is not directed at children under 13 (or the applicable age of digital consent in your region). We do not knowingly collect personal information from children. If you believe a child has provided personal information through the App's third-party services, please contact us at varlextechltd@gmail.com and we will work with the relevant provider to delete it.
11. Security
Because all app data is stored locally on your device and Varlextech Limited operates no servers, the primary safeguard is your device's own security (device lock, OS sandboxing). The third-party SDKs used by the App transmit data over encrypted (HTTPS/TLS) connections. No method of transmission or storage is 100% secure, but we select reputable providers and minimize data collection by design.
12. International data transfers
Third-party providers such as Google may process data on servers located in the United States and other countries. Where required, such transfers are covered by the safeguards described in those providers' privacy policies (e.g., Standard Contractual Clauses or adequacy frameworks).
13. Changes to this policy
We may update this Privacy Policy from time to time. Any changes will be posted at this URL with an updated "Effective date". Your continued use of the App after changes take effect constitutes acceptance of the revised policy.
14. Contact us
If you have questions about this Privacy Policy or the App's data practices, contact:
Varlextech Limited
Email: varlextechltd@gmail.com