Privacy Policy

Last updated: July 13, 2026

QRAFT ("the app") is a QR code generator published by Essential Dev Team. This policy explains exactly what data the app does and does not handle. The short version: the core app collects nothing and works entirely on your device.

1. No account, no tracking

QRAFT has no user accounts, no login, and no analytics or advertising SDKs. We do not collect, sell, or share any personal information. We do not track you across apps or websites.

2. Every QR code is generated on-device

Every QR code (URL, text, Wi-Fi, email, phone, SMS, contact, location, calendar event) is created entirely on your device. The content you type to build a static code never leaves your device and is not transmitted to us or anyone else. Only the optional dynamic-codes feature uses a hosted backend, as described in section 7.

3. Saved history

Codes you choose to save are stored locally on your device only. They are never uploaded. Deleting a code, or deleting the app, removes that data.

4. Photo library

If you export a QR code to your Photos, the app requests permission to add that single image. QRAFT never reads, browses, or uploads your existing photos.

5. Location (when in use)

If you create a location-type QR code, the app can ask for permission to use your location while the app is in use, solely to fill in your current coordinates for that code. This is optional — you can always enter coordinates manually — and your location is used on-device to build the code; it is not sent to us.

6. Purchases

The optional one-time Pro Unlock is processed entirely by Apple via the App Store. We never see or store your payment details. Apple’s privacy policy governs that transaction. There are no subscriptions and nothing auto-renews.

7. Static codes: no backend

Static QR codes are created entirely on your device. Nothing you enter to build them is ever transmitted to us, and there are no analytics or trackers involved.

8. Dynamic codes & accounts (optional, subscription)

If you choose to create dynamic codes (an optional, subscription feature), the following applies:

• Backend: dynamic QR codes and scan analytics are powered by Supabase, a hosted backend service (privacy policy: supabase.com/privacy). Your dynamic code destinations, scan counts, and analytics are stored there under your anonymous account.
• Account: you sign in with Apple or email so your codes are saved to your account and reachable from any device. We store your account identifier and email.
• Your codes: the destination URL and label you set are stored so the code can redirect.
• Scan data: when someone scans your dynamic code, we record a timestamp, an approximate country/city, and the device/browser type (from the request's user-agent). To derive the approximate country/city, the scanner's IP address is processed transiently by ipwho.is, a third-party IP geolocation service. We do not store raw IP addresses, precise location, names, or any personal identity of the people scanning.

This data exists only to power your editable redirects and scan analytics, and is tied to an anonymous code identifier. If you only ever make static codes, none of this applies to you.

9. Account & data deletion

The app includes an in-app delete account function that permanently removes your account, your dynamic codes, and their scan analytics from our backend. You can also request deletion at any time by emailing essentialdevteam@gmail.com.

10. Children

QRAFT is not directed at children under 13 and does not knowingly collect data from them.

11. Changes

If this policy changes, the updated version will be posted at this URL with a new date.

12. Contact

Questions? Email essentialdevteam@gmail.com.