QRLife.me

Privacy Policy

Effective date: September 1, 2026 · Applies to the qrlife.me website and the QRLife mobile apps

The short version: We collect what we need to run QRLife — your account info, the content you put on your QR cards, and analytics about how your codes perform. We don't sell your personal information. Your QR cards are public by design when you share them; everything else stays private. You can delete your account and data at any time.

1. Who we are

QRLife.me is operated by Mr Chris Does Stuff LLC, based in Orlando, Florida, USA ("QRLife," "we," "us"). This policy covers the qrlife.me website and the QRLife mobile applications for iOS and Android (together, the "Services").

2. Information we collect

Information you give us

Account information: email address, name, password (stored hashed), and profile details you choose to add.
QR card content: anything you place on your cards — links, contact details, Wi-Fi network names, uploaded files such as PDFs, menus, or resumes, and images. Remember that cards are designed to be shared: whatever you put on a card is visible to anyone who scans or opens it.
Support communications: messages you send us and the contact details you include.

Information collected automatically

Usage and device data: IP address, browser or device type, operating system, pages viewed, and timestamps — the standard logs needed to run and secure a web service.
Scan analytics: when someone scans or opens a QR card, we record the event — including approximate location derived from IP (city level), device type, and time — and show aggregate results to the card's owner (see section 4).
Crash and diagnostic data from the mobile apps, used to fix bugs. This is not linked to your identity.

3. How we use information

To provide, maintain, and improve the Services;
To generate and host your QR cards and show you their performance;
To secure accounts, prevent abuse, and detect malicious or deceptive QR usage;
To respond to support requests;
To send service messages (account, security, major changes). Marketing emails, if we send them, always include an unsubscribe link;
To comply with legal obligations.

We do not sell your personal information, and we do not share it with third parties for their own advertising.

4. QR scan analytics — what card owners see

If you scan someone's QRLife card, the card's owner can see aggregate analytics about that scan: that it happened, roughly where (city-level, from IP), on what kind of device, and when. Card owners do not receive your name, exact location, or contact details from a scan. If you fill out a form or share your contact info through a card, that information goes to the card's owner directly — treat it like handing them a business card.

Service providers: today that is Amazon Web Services (hosting, storage, database, authentication, email) and, for distributing the iOS app, Apple. We use no separate crash-reporting or analytics vendor — any diagnostic data our apps produce is handled by Apple's own store tooling or stays with AWS. Providers are bound by contract to use data only to provide services to us, and the complete list is on our Trust page.
App stores: our apps contain no in-app purchases. Apple distributes the iOS app (and Google Play will distribute the Android app once it is listed); they handle distribution only, process no payments for us, and receive no billing information from us. If we ever charge for a plan, that billing happens on the web — and we never receive your full payment card details.
Legal reasons: if required by law, or to protect the rights, safety, and security of QRLife, our users, or the public.
Business transfers: if QRLife is ever acquired or merged, user data may transfer with it; this policy would continue to apply until changed with notice.

6. Mobile app permissions

Camera: used only to scan QR codes when you open the scanner. Images are processed on the device; we don't store your camera feed.
Photos: used only when you pick an image yourself, or to save a wallpaper you made to your own photo library. The app asks the operating system for its photo picker rather than for access to your library, and it never reads your photos in the background.

You can change any permission at any time in your device settings. The rebuilt apps are the live ones: the iOS app is on the App Store today and the Android app is in review. They request no contacts permission and no location permission at all, and they contain no in-app purchases — cards are created and edited on the web, while the app is a companion portal for viewing your cards and scanning codes into your Wallet.

7. Cookies and similar technologies

One cookie. QRLife sets a single cookie, qrlife_locale, which remembers the language you chose. That is the whole list. Signing in does not use a cookie — your session is held in your browser's local storage and never sent to a third party. We run no analytics product, set no tracking or advertising cookies, and embed no ad pixels, so there is nothing here to consent to and no cookie banner to click. If that ever changes we will update this policy and provide any legally required consent controls before turning anything on.

8. Data retention and deletion

We keep your data while your account is active. If you delete your account, we delete your personal information and your QR cards within 30 days, except minimal records we're legally required to keep (for example, fraud-prevention logs). Backups purge on a rolling basis. Deleted QR cards stop resolving — anyone scanning an old printed code will see that the card no longer exists.

Dormant accounts. If you don't sign in for 12 months we send a reminder. At 24 months without a sign-in your account is archived: sign-in is disabled until you reactivate by verifying your email address, which you can do at any time — there's no deadline. We don't delete archived accounts or their data for inactivity; deletion happens only when you request it, as described above. Your QR codes keep working while an account is archived.

9. Your rights and choices

Depending on where you live (including under the GDPR for EEA/UK residents and the CCPA/CPRA for California residents), you may have the right to access, correct, download, delete, or restrict the processing of your personal information, and to opt out of any sale or sharing of it — noting that we do not sell or share personal information as those laws define it. To exercise any right, email us at privacy@qrlife.me. We will verify the request and respond within the timeframe the applicable law requires. We never discriminate against you for exercising a privacy right. California residents may also designate an authorized agent to make requests on their behalf.

10. Children's privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has created an account, contact us at privacy@qrlife.me and we will delete it.

11. Security

All traffic to QRLife is encrypted with HTTPS, passwords are stored hashed, and access to production data is limited to those who need it. No online service can promise perfect security, but if we ever learn of a breach affecting your personal information, we will notify you as required by law.

12. International users

QRLife is operated from the United States, and your information is processed on servers in the United States. If you use the Services from outside the U.S., you understand your information will be transferred to and processed in the U.S., where privacy laws may differ from those in your country.

13. Changes to this policy

When we make material changes, we'll update the effective date above and notify account holders by email or an in-app notice before the changes take effect. Continued use of the Services after that means you accept the updated policy.

14. Contact us

Mr Chris Does Stuff LLC
Orlando, Florida, USA
privacy@qrlife.me