Last updated: August 30, 2026
Astrum Computing, LLC ("Astrum," "we," "us") provides QR Reader. This policy describes how QR Reader handles information. It applies specifically to QR Reader for iPhone and iPad.
Information stored on your device
QR Reader stores scan history, created codes, folders, favorites, notes, repeat counts, preferences, and custom QR images on your device. Camera and photo access are used only when you choose to scan a code or select an image. Contact, calendar, Wi-Fi, Face ID, and device-authentication access are used only for the actions you request. Astrum does not receive your address book, calendar, Wi-Fi passwords, photos, or biometric data through those system features.
Optional private iCloud sync
If you enable iCloud sync, your QR Reader library and custom QR images are stored in your private CloudKit database associated with your Apple Account so they can sync between your devices. Apple processes this data under its privacy terms. Turning sync off stops future syncing but does not automatically delete either copy. QR Reader includes a separate action that removes its CloudKit records while preserving the on-device library.
Purchases and subscription services
Apple processes payments. QR Reader uses RevenueCat to verify subscription and legacy purchase access. RevenueCat may process an app-user identifier, purchase history, product identifiers, subscription state, and device or request information needed to provide that service. Astrum does not receive your full payment card details.
QR Reader uses EncoreKit to present and improve subscription offers. EncoreKit may receive the RevenueCat app-user identifier, subscription tier, locale, paywall placement, and interactions with subscription offers. These data are used for app functionality, offer personalization, and analytics, not for cross-app advertising or tracking.
Reliability and remote configuration
Firebase Crashlytics receives crash reports and related diagnostics, such as an installation identifier, device and operating-system information, app state, and technical logs, to help Astrum diagnose crashes. Firebase Remote Config provides app settings such as which supported paywall design to show. QR Reader does not include an advertising SDK and does not use these services to track you across other companies' apps or websites.
Product and book lookups
When you request product or book information, QR Reader sends the scanned barcode or book identifier to the applicable lookup service, which may include Open Food Facts, Open Beauty Facts, Open Products Facts, Open Library, or Google Books. The service receives ordinary network information such as your IP address and may retain request logs under its own policy. QR Reader does not send your saved notes, folders, or complete scan history with the lookup.
Pro online link reputation check
All users receive on-device warnings for characteristics such as unencrypted or shortened links, numeric addresses, encoded domains, embedded credentials, and unusual ports. These local checks do not transmit the scanned URL.
The optional online reputation check is a QR Reader Pro feature. It runs only after a Pro user taps Check Link and sees the transfer disclosure. QR Reader sends the URL without its fragment to an Astrum Cloudflare Worker, which queries Google Web Risk for known malware, phishing or social-engineering, and unwanted software reports. Cloudflare and Google receive ordinary request information, including the URL and IP address. The Worker caches a SHA-256 digest of the URL and its verdict for a limited period; application code does not log the raw URL.
The result is advisory and cannot guarantee that a link is safe.
Support and deletion feedback
If you contact support or use the optional deletion-feedback shortcut, we receive the information you choose to include, such as your email address, message, app version, device model, system version, locale, and an anonymous installation identifier. We use it to respond, diagnose problems, and improve the app.
Sharing, retention, and tracking
Astrum does not sell personal information and does not share it for targeted advertising. We share information only with the service providers described above, when required by law, or to protect rights and security. Providers may process data in the United States and other countries where they operate.
On-device data remains until you delete it or the app. Private CloudKit data remains until you use QR Reader's removal action or manage it through Apple.
Vendors retain data according to their service terms. Astrum retains support communications and diagnostics only as long as reasonably needed for support, security, legal obligations, and app improvement.
Children and changes
QR Reader is not directed to children under 13. We may update this policy as the app or its services change and will update the date above.
Contact
For privacy questions or requests, contact support@astrumcomputing.com.