PRIVACY-POLICY(7)
QR Toolkit ("we", "our", or "the app") is operated by DJUMP, MB. This Privacy Policy explains how we collect, use, and protect your information when you use QR Toolkit.
1. Information We Collect
| data type | purpose |
|---|---|
| email address | account creation and authentication |
| display name | user profile display within the app |
| scan and generate history | core app functionality — storing your scan and creation history |
| push notification token | sending push notifications (opt-in only) |
| device identifier & app usage | product analytics via PostHog (linked to your account when you are signed in) to improve the app |
2. Information We Do Not Collect
- No payment or credit card information — all payments processed by Apple (App Store) or Google (Google Play) via RevenueCat.
- No access to your photo library unless you explicitly save a QR code to your gallery.
- Camera access is used solely for QR code scanning and is never recorded or stored.
3. How We Use Your Information
- Provide core app functionality (scanning, generating, saving QR codes).
- Authenticate your account and sync data across devices.
- Send push notifications you have opted into.
- Analyze app usage and improve the experience.
4. Data Storage and Security
Your data is stored on Supabase with row-level security (RLS) — only you can read your own rows. All traffic is over HTTPS. We do not sell, rent, or share your personal data with third parties.
5. Third-Party Services
- Supabase — authentication and database hosting.
- RevenueCat — subscription and payment management.
- PostHog — product usage analytics (linked to your account when signed in).
- Vercel — cookieless website analytics (page views only).
- Apple / Google — OAuth sign-in providers.
6. Your Rights & Account Deletion
You may view, update, or delete your personal data at any time.
To delete your account and data:
- In the app: open Settings → Delete Account and confirm.
- By email: write to start@djump.io from your account email address and we will delete your account for you.
What is deleted: your account, profile (email address, display name), your entire scan and generate history, and your push notification token are permanently removed from our database immediately (cascade delete). Residual copies in encrypted backups are purged within 30 days.
What may be retained: de-identified, aggregate usage analytics that can no longer be tied to you, and any records we are legally required to keep. Payment records are held by Apple or Google, not by us — request their deletion through your Apple or Google account.
7. Children's Privacy
QR Toolkit is not intended for children under 13. We do not knowingly collect personal data from children under 13.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by updating the effective date above.