Privacy Policy
1. Your data stays on your phone
Veriscan reads QR codes and barcodes from the camera preview, and from photos, screenshots or PDF files you pick yourself. Camera frames and images are decoded entirely on your device (Google ML Kit, on-device) and are never saved or uploaded. The content of the codes you scan or create, your history, folders and notes stay in the app's private storage; cloud backup of that storage is disabled, and we operate no servers that receive your content. Exports (CSV, PDF, PNG, SVG) only leave the phone if you share them.
Link Safety Check. The basic check runs on your phone from the link itself. With the deep check (Veriscan Pro), the app follows short links to their final page by sending header-only requests directly to the servers named in the link — never through our servers. Those servers see an ordinary request from your IP address, as they would if you opened the link. Requests are never sent to IP addresses or local network names, and you can switch this off in Settings → Follow short links.
2. Permissions
- Camera — asked when the scanner first opens; used only while the scanner or batch scan is on screen.
- Photos — no permission: pictures are chosen through Android's Photo Picker and only the one you pick is shared with the app. PDFs and CSV files are opened through the system file picker.
- Wi-Fi, contacts, calendar — no permission: Veriscan hands the scanned details to Android's own "save network", "add contact" and "add event" screens, where you confirm.
- Notifications — free users only, can be turned off: one short note a day.
- Internet — ads, analytics, purchases and consent. Your content is never sent.
3. Analytics and crash reports (Google Firebase)
With your consent where required, we use Google Analytics for Firebase and Firebase Crashlytics to understand how the app is used and to fix crashes. We log anonymous events such as “paywall viewed” or “purchase completed”, plus device model, OS and app version, approximate region and an app-instance identifier. We never log your content; the app enforces this with an allow-list of event parameters. Crash reports contain the error type and stack trace only. Firebase Remote Config is used to tune paywall and ad settings.
4. Advertising (Google AdMob and Unity Ads)
The free version shows ads: one slim banner on the History screen, an occasional full-screen ad when you return to History after saving a created QR code or exporting, and an optional rewarded ad you can choose to watch to unlock batch scan for an hour. Ads never appear on the scanner or next to a scan result, never on onboarding or the paywall, and never in the first two minutes of first use. Veriscan Pro removes all ads.
Ads are served by Google AdMob, with Unity Ads competing through AdMob mediation and serving the banner directly. These partners may collect the advertising ID, device and usage information and approximate location derived from your IP address to serve and measure ads. See Google's and Unity's privacy policies.
5. Your choices (GDPR, UK GDPR, Swiss FADP, US state laws)
In the EEA, the UK and Switzerland, Veriscan asks for your consent through Google's consent message (IAB TCF) before personalised ads or analytics are used. If you decline, ads are non-personalised and analytics stays off. In US states with privacy laws (such as California, Virginia, Colorado), you can opt out of the “sale” or “sharing” of personal information and targeted advertising. You can change your choice at any time in Settings → Privacy choices.
Legal bases (GDPR): consent for analytics and personalised ads; performance of a contract for the features you use and for purchases; legitimate interest for crash diagnostics where consent is not required. You may request access, deletion, correction or portability of data we control, object to processing, or lodge a complaint with your supervisory authority. California residents (CCPA/CPRA): we do not sell personal information for money; ad partners may receive identifiers as described above, which you can opt out of in Privacy choices. We do not discriminate against users who exercise their rights.
6. Purchases
Subscriptions and the lifetime purchase are processed by Google Play. We never receive your payment details; Google tells the app whether Pro is active.
7. Retention and deletion
Your content remains on your device until you delete it or uninstall the app. Analytics data is retained by Google for up to 14 months. See how to delete your data.
8. Children
Veriscan is not directed to children under 13 (under 16 in the EEA) and we do not knowingly collect their data.
9. Changes
We will update this page if our practices change and revise the date above.