Privacy Policy

1. Who we are

QR Dynamic is operated by Merriweather Holdings. This policy explains what data we collect, why, and what you can do about it.

2. What we collect

• Account data — your email address and password. Your password is hashed by our authentication provider (Supabase); we never see or store it in plain text.
• Your QR code content — whatever you put into a code: URLs, WiFi network names/passwords, vCard contact details, labels.
• Scan data — when someone scans one of your dynamic QR codes, we log the timestamp, IP address, user agent, device type, browser, and coarse location (country/ region) of that scan, so you can see analytics for your own codes.
• Billing data — payment card details are handled entirely by Stripe; we never see or store your card number. We store your Stripe customer ID, subscription ID, plan, and subscription status.
• Standard server logs — via our hosting provider (Vercel), for operating and securing the Service.

3. Cookies

We use a single session cookie, set by our authentication provider, to keep you signed in. We don't use advertising or tracking cookies.

4. How we use it

• Operate the Service — generate codes, redirect scans, show your analytics
• Process billing and manage subscriptions
• Prevent abuse — rate limiting and fraud/abuse checks on signups and requests
• Respond to support requests you send us

We don't sell your data, and we don't use it for advertising.

5. Who we share it with

We use a small number of service providers ("processors") to run QR Dynamic:

• Supabase — database and authentication
• Stripe — payment processing and billing
• Vercel — hosting, infrastructure, and abuse-rate-limiting
• Brevo — delivering transactional emails (like sign-up confirmation)

Each only receives the data it needs to do its job. We don't share your data with anyone else, and we don't sell it.

6. Data retention and deletion

We keep your data while your account is active. You can delete your account at any time from account settings — doing so permanently removes your QR codes, scan history, API keys, and subscription record. This cannot be undone.

7. Your rights

You can access and export your own QR codes and scan data from your dashboard at any time. You can delete your account (and everything tied to it) yourself, whenever you want. For anything else — a data question, a correction, a request we haven't built self-service for yet — email axis730+support@gmail.com.

8. Children's privacy

QR Dynamic isn't directed at children under 13, and we don't knowingly collect data from them. If you believe a child has given us data, contact us and we'll remove it.

9. Security

We use industry-standard measures to protect your data — encrypted connections (HTTPS) everywhere, access controls on our database, and rate limiting against abuse. No system is perfectly secure, but we take this seriously: this Service has undergone real adversarial security testing, not just a checklist review.

10. Changes to this policy

We may update this policy from time to time. We'll update the "Last updated" date above when we do.

11. Contact

Questions about this policy? Email axis730+support@gmail.com.