Privacy policy

1. What stays on your Mac

Static QR creation, design templates, CSV batch processing and QR image decoding are performed on your Mac. QR Studio stores settings, saved templates and exported files locally. These local workflows do not require a QR Studio account.

QR content, Wi-Fi passwords, contact-card details, logos, imported CSV files and scanned images are not uploaded to our account service as part of these local workflows. If you choose a cloud-synced folder for files, the sync is handled by the provider you selected. Opening a decoded link or choosing to share a file sends information to the destination or app you choose.

2. Account and dynamic-link information

If you create or use a QR Studio account, the service processes your email address, account identifier, authentication information and account-related requests. Passwords are stored as password hashes. The Mac app uses Keychain for session credentials.

When you create or manage dynamic links, we store the destination URLs, short-link identifiers and associated link records tied to your account. This allows printed QR codes to continue working and lets you manage their destinations and reports. Account and dynamic-link features require communication with our servers.

3. Dynamic-link visits and service logs

When someone opens a QR Studio dynamic link, our redirect service receives technical information including the IP address, time of access, browser/user-agent, operating system, device type and referring domain when the browser supplies it. We use this information to provide visit counts and link analytics, operate redirects and investigate abuse or service problems.

The owner of a dynamic link can access reports for that link, including visit details made available by the service. IP addresses and other request information are not inherently anonymous. Websites reached through a dynamic link have their own privacy practices.

Hosting infrastructure may also retain request and security logs when you use the website or account API. We do not request precise device location as part of QR creation or scanning.

4. Support, usage and diagnostics

If you email us, we receive your email address, message and any files or diagnostic information you choose to include. We use these to investigate and answer your request.

We may receive app usage, crash and performance information made available through Apple's distribution and diagnostic services, subject to your Apple settings. Such reports help us understand aggregate usage and fix technical issues. Avoid including passwords, activation codes or private QR content in a support message unless it is necessary to explain the issue.

5. Permissions you control

• Camera: used when you choose camera scanning. Decoding is performed locally.
• Screen capture: used when you choose to scan a selected area of your screen.
• Files: used for files or folders you select for import, scanning, logos, templates and export.
• Contacts: used when you choose an action that saves decoded contact information to your address book.

You can review or revoke macOS permissions in System Settings. Revoking a permission can make the related feature unavailable.

6. Why we use information

We process account and saved-link data to provide the service you request, including authentication, link management and analytics. We process support messages to respond to you. Security and operational information is used to protect the service, prevent abuse and maintain reliability.

Where data-protection law requires a legal basis, these uses rely on providing the requested service, legitimate interests in security and reliable operation, and consent where applicable. You can withdraw consent for processing that relies on it without affecting earlier lawful processing.

The app does not include advertising SDKs. Account and saved-link data are not used for cross-app targeted advertising or shared with advertising data brokers.

7. Service providers and destinations

Hostinger provides the website and hosting infrastructure. Apple operates the Mac App Store, app distribution, purchase handling and platform services. Email infrastructure processes account-service and support communications. Providers process the information needed to deliver their respective services.

Apple handles payment details for Mac App Store purchases; QR Studio does not receive your full payment-card details. We may disclose information when legally required or when necessary to investigate abuse and protect the service.

Providers may process information in countries other than yours. Where applicable, cross-border processing is subject to the safeguards required by data-protection law. See Apple's privacy information and Hostinger's privacy policy for their practices.

8. Retention and deletion requests

Account and saved-link records are retained while needed to provide the account and keep dynamic links functioning. Visit records are retained for link reporting, security and service operation. Support correspondence is retained as needed to resolve requests and related issues. Retention also takes account of legal obligations, dispute resolution and backup cycles.

To request deletion of an account, associated links or personal information, email support@qrstudio.io, preferably from the account's email address. We may need to verify ownership before processing a request. Removing dynamic links can stop printed QR codes from redirecting. Data that must be kept for legal or security reasons, or in backups pending replacement, may not be removed immediately.

9. Your rights

Depending on your location and applicable law, you may request access to your personal information, correction, deletion, a portable copy, or restriction of processing, and object to processing based on legitimate interests. You may also complain to your local data-protection authority. Send requests to support@qrstudio.io; we will handle them within the time required by applicable law.

10. Children

QR Studio is a general-purpose utility, not a service designed specifically for children. If you believe a child has provided personal information without appropriate permission, contact us so we can investigate and handle it as required by applicable law.

11. This website and policy updates

These privacy and contact pages do not include analytics or advertising scripts and do not set advertising cookies. Normal hosting request logs may still be generated. External pages and services linked from this website are governed by their own policies.

We may update this policy as the service or its data practices change. The date at the top identifies the current version. Material changes will be communicated where required.