← QRish

Privacy policy

Effective 8 August 2026

QRish helps you identify and locate physical things using QR labels. This policy explains which personal data QRish processes when you use the website or iPhone app.

Data we process

  • Account details such as your email address, name, and Apple or Google account identifier.
  • Your inventory, including book ISBNs and catalog details, descriptions, tags, photos, maps, and other content you add.
  • Scan history and location, accuracy, and photo metadata only when you choose to share them.
  • Messages an anonymous finder chooses to send to an owner.
  • Device push tokens, session records, and limited security and diagnostic information.

Why we use it

We process this data to provide QRish: signing you in, synchronizing your inventory, resolving QR labels, recording changes, showing maps, relaying finder messages, sending requested notifications, preventing abuse, and supporting account recovery. QRish does not sell personal data, show targeted advertising, or use third-party tracking SDKs.

Location, camera, NFC, and Bluetooth access

QRish asks before accessing your camera, NFC reader, photos, Bluetooth, or precise location. NFC reads only the link stored on a sticker after you start a scan. Denying a permission does not prevent ordinary inventory browsing. A scan can be recorded without coordinates, and location is uploaded only after you take an action that requests it. Permissions can be changed in iPhone Settings.

Service providers

QRish uses service providers only where needed to operate the product:

  • Apple and Google for optional sign-in, and Apple for push-notification delivery.
  • Hosting, database, object-storage, and email-delivery providers for the QRish service.
  • Google Gemini when you explicitly request photo analysis, including book-detail recognition and choosing the likely cover from selected photos, or another AI-generated suggestion.
  • Open Library when you request book details or a cover by ISBN.
  • OpenStreetMap tile services when a map is displayed.

These providers may receive the content or technical details necessary for that request, such as an IP address, device token, email address, map area, selected photo, or ISBN. QRish does not give them inventory data for their own advertising.

Retention and security

Account and inventory data remains until you delete it or your account. Short-lived sign-in challenges and handoff tickets expire automatically. Security logs and backups may remain for a limited period before rotation. QRish uses encrypted transport, hashed session credentials, access controls, and provider tokens that are scoped to the app.

Your choices and rights

You can correct account and inventory details in QRish, export a database as JSON or CSV, control each thing's visibility, revoke device permissions, sign out, and permanently delete your account in Account Settings. Depending on where you live, you may also request access, correction, restriction, portability, or erasure of personal data, or object to processing.

Contact

For privacy questions or requests, email privacy@qrish.app. For product help, visit QRish Support.

Changes

Material changes will be posted on this page with a new effective date. If a change requires consent, QRish will ask before applying it to your data.