binQR — Privacy Policy

Data we collect

Account data: your email address and account identifiers when you sign in with a magic link.
Magic-link and session metadata: hashed sign-in tokens and session records used to keep you signed in.
Scan analytics: privacy-safe usage data for QR codes — hashed IP addresses, hashed user agents, and hashed visitor identifiers. We never store raw IP addresses or raw device fingerprints.
Transactional email payloads: encrypted content of emails we deliver to you (for example magic-link messages).
Purchase evidence: encrypted receipts from Apple, Google, or Stripe used to validate your subscription.
Hosted file content: PDFs and images you upload for delivery through your QR codes.
QR code and team content: QR code names, destinations, routing rules, designs, and team names and memberships you create.

How we use and share data

We use this data only to run binQR: signing you in, serving your QR codes and hosted files, showing your analytics, and validating your subscription. Hosted files are visible to anyone who scans or opens their short link, and team content is visible to members of that team. We do not sell your data, show ads, or track you across other companies' apps or websites. The app itself contains no third-party analytics or advertising SDKs.

How long we keep data

Data category	Retention
Scan events and scan aggregates	400 days
Email-delivery records	90 days
Billing provider-event ledger (account-independent, no personal profile)	90 days
Hosted file content	Until you delete or replace the file
Background-job history	7 days
Account data	Until you delete your account

Your rights

You can erase your account and all of its data at any time from the app's settings (Settings → Account → Delete account). Erasure removes your account, your QR codes, hosted files, and encrypted purchase evidence — nothing account-scoped is retained after deletion.

For access, correction, or portability requests — or any other data-subject request — contact us at legal@binqr.io.