Privacy policy
In short
Qalkan has no accounts and does not identify you. What you scan and create stays on your device. The app does not track you across apps. The free version shows ads, and nothing you scan, create or keep in your history is ever added to an ad request.
Accounts
There is no sign-up and no sign-in. We do not ask for your name, email or phone number. When you buy Pro, our purchase service creates a random anonymous user id that is not linked to you personally.
What stays on your device
- Scan history: the content, format, type and time of each scan, in a local database. You can turn "Keep scans" off, and then nothing is written.
- Not saved by default: two-step verification codes, Wi-Fi passwords and payment codes. You can switch them on in settings.
- Codes you create and logo images you pick are stored locally.
- Settings stay on the device.
- None of this is included in cloud backups. Deleting the app deletes all of it.
Permissions
- Camera: only to scan codes. Frames are processed on the device, never stored or sent.
- Photo picker: when you scan from an image, only the image you pick is read. We do not ask for library access.
- Biometrics: used for the app lock. No fingerprint or face data reaches the app, only the device's yes or no.
The only content that goes online
When you ask to see where a shortened link really goes, that link is resolved over the network. This happens only when you tap the button, and you are told beforehand. Nothing else you scan or create leaves your device.
Third party services
- Google AdMob (free version only): shows ads. The SDK collects IP address, in-app interactions, diagnostics and device or advertising identifiers. Ads are not personalised and we do not track you. Your content is never added to an ad request. With Pro the ad SDK is never started.
- Google User Messaging Platform: asks for and stores your ad consent where required. You can change it in the app under "Privacy options".
- Google ML Kit (Android only): decoding runs on the device. Per Google's disclosure the library sends diagnostic data such as device model, app version, performance metrics and error codes. Image or code content is not part of it.
- RevenueCat: verifies purchases and restores Pro across devices, using an anonymous id, the store receipt, the product id and the app version.
- Apple App Store and Google Play: handle payment. Your card details never reach us.
The app carries no analytics SDK and we run no server of our own.
Children
The app is not directed at children and does not knowingly collect data from them.
Deleting your data
You can delete history entries one by one or all at once; items in the trash are removed permanently after 30 days. Uninstalling the app removes everything stored on the device. You can withdraw ad consent in settings.
Your rights
Under GDPR and Turkish data protection law you may access, correct and delete your data. Because the app keeps no record that identifies you, most of these rights are exercised directly on your device.
Changes
If this policy changes, the effective date on this page is updated.
Contact
Data controller: NB Bilişim.
For questions, requests and privacy enquiries, write to hello@qalkan.app.