QR: ScanStash — Privacy Policy

QR: ScanStash is an iPhone app for scanning QR codes and keeping a local visual library of web links. This policy describes the app’s free plan and optional one-time Pro purchase and support communications relating to it. It does not describe the independent privacy practices of websites you open, apps you share with, or the portfolio website hosting this page.

1. Who is responsible

QR: ScanStash is developed by Ahmet Emin Tayfur. For privacy questions or requests, contact support@ahmettayfur.com.

2. Data kept by the app

The app stores your saved web addresses, titles you give them, pinned-card choices and optional page-preview images in its local storage. If scan history is enabled, it also keeps the content of your 20 most recent distinct QR scans and their scan times. Scanning the same content again updates its position. Search text is used on the device to filter your cards and is not saved as a search history.

The app has no user accounts, developer-operated content server, cloud-sync service, AI service, advertisements, or third-party analytics or crash-reporting SDK. We do not receive an automatic copy of your cards, QR contents, search text or preview images.

This describes the app's own behavior. Apple may process App Store, operating-system or diagnostic information under its own settings and privacy policies.

Optional Pro purchase

Apple processes the optional ScanStash Pro payment through StoreKit. The app reads Apple-verified purchase information, including the product and whether the purchase right is valid or revoked, to enable unlimited saved cards. Purchase and restore requests may contact Apple; Apple handles its account, transaction and payment records under its own policies. We do not receive your payment-card number or Apple Account password, and the app does not send purchase receipts to a developer-operated server. Apple may provide the developer with sales, refund and financial reports through App Store Connect.

Your saved URLs, titles, QR contents, searches and preview images are not included in the app’s purchase or restore requests. Restoring a purchase restores the Pro right and does not restore a local card library.

3. Camera and selected photos

Camera access is requested when you choose to scan a QR code. The app analyzes QR codes on the device; it does not record or upload camera video. You can manage camera permission in iOS Settings. Declining access does not prevent manual link entry or the other available intake methods.

Photo scanning uses Apple's system photo picker to access the image you choose. It does not request access to your entire photo library. The selected image is decoded on the device and is not kept as a permanent app image. Its QR content can enter scan history when history is enabled. If the photo is stored in iCloud, Apple's picker may download it according to your Apple settings.

4. Websites and page previews

Scanning or saving a link does not automatically visit it. Opening a card, choosing to go to a scanned link, or requesting a page preview contacts the destination website. The website may receive the requested address, including its parameters, your IP address and normal browser information. It may use cookies or other website storage under its own policy.

Page previews use an in-app WebKit browser with a temporary, non-persistent website-data store. Cookies, cache and website data belong to that browsing session; this WebKit store does not write them to the app's file storage. A preview is created only when you choose to capture the visible page; it is saved locally and may contain personal information visible on that page. It is a stored image, not a live or offline copy of the website. Merely browsing your card library does not load the linked sites or fetch remote preview images.

5. Safari sharing and widgets

The share extension receives the link and any supplied title you explicitly share to QR: ScanStash. It temporarily places that information in a local App Group inbox until the main app imports it. The app and its extensions use this on-device shared area; it is not a developer server.

The Home Screen widget receives a limited local display copy: card identifier, title and an optional small preview image. Its tap link uses the card identifier; the main app looks up the card's current web address. Widget titles and images may be visible to anyone who can view your Home Screen.

Choosing Copy link places the full address on the iOS clipboard. Apple's Universal Clipboard may make copied content available on your other nearby Apple devices, depending on your system settings. Choosing Share link opens the system share sheet. iOS may generate a link preview, which can contact the destination website. The app you then select may process or transmit that address under its own policy. URL parameters may contain private information, so choose the recipient accordingly. The app does not read your clipboard in the background or automatically send links to other people.

7. Retention, deletion and backups

Saved cards remain until you delete them. You can remove or replace a card's preview, remove individual scans, clear QR history, or turn off future scan history. Turning history off does not erase existing scans; deleting a saved card does not clear its separate scan-history entry. Removing a preview or card also requests removal of its app preview file.

The developer cannot access your local library to retrieve or delete it remotely. Removing the app using iOS's Delete App option removes its local app data under iOS's behavior. Offloading the app can retain documents and data. OS-managed website storage, system backups and copies you shared elsewhere are separate from individual card or history deletion.

QR: ScanStash does not offer its own library backup, library restore or cross-device sync service. Apple's device backups may include app data depending on your settings. We do not guarantee recovery after app removal, device loss or replacement. Apple backup handling is governed by Apple and your settings.

8. Support messages and your requests

If you email us, we receive your email address, message and attachments you send through our email provider. We use them to answer your request and follow up on the issue. We keep support correspondence as necessary for that purpose and any applicable legal obligations. Please avoid sending private URLs, tokens or screenshots unless needed, and remove unrelated personal information.

You can contact us to ask about, correct or request deletion of support information we hold, or to exercise rights available under applicable privacy law. Local app data is controlled through your device because it is not available to us remotely.

9. Changes

We will update this policy if the app's data practices change. The date above identifies this version. Changes to data collection, purchase handling or sync features will require updated explanations before they are introduced. Privacy questions: support@ahmettayfur.com.