Privacy Policy

Last updated: August 2026

GQRLY ("we," "our," or "us") operates the GQRLY mobile app, website, and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read it carefully.

1. Information We Collect

We collect the following categories of information:

  • Account Information: When you create an account, we collect your email address and authentication credentials (via Google OAuth).
  • Links & QR Codes: The destination URLs you create, custom slugs, campaign names, and associated QR code images.
  • Analytics Data: When someone clicks your short link or scans your QR code, we automatically collect:
    • Timestamp of the interaction
    • Approximate geographic location (country derived from IP address)
    • Device type (mobile/desktop), operating system, and browser
    • Referrer/source information (when available)
    • IP address (used temporarily for geolocation and bot detection, then discarded or anonymized)
  • Usage Data: App interactions, feature usage, and error logs for product improvement.

We do not collect precise GPS location, contacts, messages, or other sensitive device data.

2. How We Use Your Information

  • Provide, maintain, and improve the Service
  • Create and manage your short links, QR codes, and campaigns
  • Generate analytics dashboards and reports for your links
  • Detect and filter automated bot traffic to ensure data accuracy
  • Communicate with you about your account, security updates, and (with consent) product announcements
  • Enforce our Terms of Service and prevent abuse
  • Comply with legal obligations

3. Data Sharing & Third Parties

We do not sell your personal data. We share information only in these cases:

  • Service Providers: Firebase (authentication, database, analytics, crash reporting), Google Play Billing (subscriptions). These providers process data on our behalf under strict data processing agreements.
  • Legal Requirements: When required by law, court order, or to protect our rights and user safety.
  • Anonymous/Aggregated Data: We may share anonymized, aggregated statistics that cannot identify any individual.

4. Bot Detection & IP Handling

To provide accurate analytics, we temporarily process IP addresses to:

  • Derive country-level location (city-level only for Pro users)
  • Identify and filter automated traffic (bots, crawlers, monitoring services)
  • Prevent abuse and fraud

IP addresses are not stored in raw form for analytics. After geolocation lookup, they are either discarded or stored in hashed/anonymized form solely for fraud prevention (90-day retention).

5. Data Retention

  • Account Data: Retained while your account is active. Deleted within 30 days of account deletion request.
  • Links & QR Codes: Retained while your account is active. Deleted on account deletion.
  • Analytics Data: Aggregated analytics retained indefinitely for historical reporting. Raw event logs retained for up to 2 years.
  • Fraud/Security Logs: Retained up to 90 days after anonymization.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data (via account deletion in Settings)
  • Export your data (links and analytics)
  • Object to or restrict certain processing
  • Withdraw consent where processing is based on consent

To exercise these rights, use the Delete Account feature in the app or contact us at privacy@gqrly.cc.

7. Children's Privacy

The Service is not directed to children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us personal data, contact us and we will delete it.

8. Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), encryption at rest (Firebase), access controls, and regular security reviews. However, no internet transmission or storage is 100% secure.

9. International Transfers

Our infrastructure is hosted on Google Cloud (Firebase) in the United States. By using the Service, you consent to the transfer of your data to the U.S. and other countries where our service providers operate, which may have different data protection laws than your jurisdiction.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date and, for significant changes, via in-app notification or email. Continued use of the Service after changes constitutes acceptance.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

privacy@gqrly.cc

GQRLY — Smart Links & QR Codes