PluraScan Privacy Policy

This Privacy Policy applies to the PluraScan Android app and to support communication related to it, provided by Hangzhou Zhenxu Technology Co., Ltd. under the Zhenxu Dev brand ("we", "us").

It describes how the current release handles information. Where this policy differs from the company-wide Zhenxu Dev privacy policy, this policy applies to PluraScan.

• No personal account is required for normal use. Optional access codes can be provided for complimentary Pro access.
• Barcode recognition runs on your device. Camera frames and the images you pick are not uploaded.
• Scan results, history, generated codes and settings are stored on your device; Android system backup or device transfer may copy supported data as explained in section 5.
• We do not show ads and do not use the advertising ID.
• Limited diagnostic, usage and purchase information is sent to Google and RevenueCat as described below; usage and crash statistics can be turned off in Settings.

PluraScan requests the camera permission only to recognize QR codes and barcodes in real time. Frames are analyzed in memory on your device and are not recorded, stored or uploaded.

You can deny or revoke the camera permission in your system settings at any time; you can still recognize codes from images.

When you recognize codes from a picture, PluraScan uses the Android system photo picker. The app only receives the image you select and does not request permission to read your photo library. The image is processed on your device and is not uploaded.

Scan history, generated QR codes, QR style templates, custom logos and app settings are stored in the app's private storage on your device.

PluraScan supports Android system cloud backup and device-to-device transfer to help you move to a new device. Depending on your device, system settings and backup provider, scan history, QR style templates, custom logos and app settings may be backed up and restored. History may include sensitive content such as Wi-Fi passwords and contact details. WebDAV account settings and credentials are excluded because their Android Keystore encryption key cannot be transferred. Your system backup provider, rather than us, handles these copies under its own privacy policy; backup availability, limits and encryption depend on that provider and your device. You can manage system backups in Android settings. Uninstalling the app or deleting local records does not necessarily delete existing system backups, WebDAV backups or exported files; manage those copies separately with the relevant provider.

Scanned content can be sensitive. Depending on the code, history may include web addresses, Wi-Fi network names and passwords, contact details, email or SMS content, locations, calendar events or ID card data.

• You can turn off "Auto-save scan history" in Settings so that scan results are not saved.
• You can delete individual records or use "Clear History" in Settings.
• Uninstalling the app or clearing its storage deletes all local data, unless you kept your own backup.

"Back Up Data" creates a ZIP file containing your history, settings, QR styles and logos. History export (CSV, Excel, JSON or TXT) creates a file with your scan records. You choose where these files are saved through the system file picker, for example local storage or a cloud drive you use.

Backup and export files are not encrypted and may contain Wi-Fi passwords and other sensitive content. Store and share them carefully. Once saved, these files are handled by the storage location you chose.

You can optionally back up to a WebDAV server that you configure yourself. Backups are sent directly from your device to that server over HTTPS; we do not operate the server and cannot access the backups.

• The server address, username and password you enter are stored only on your device.
• Scheduled automatic backup (a Pro feature) runs in the background through Android WorkManager, optionally only on Wi-Fi, and keeps the number of copies you choose.
• Your use of a WebDAV provider is subject to that provider's own terms and privacy policy.

PluraScan Pro is a one-time purchase processed by Google Play. We do not receive your payment card or other payment details.

We use RevenueCat, Inc. as a service provider to validate purchases and restore Pro on your devices. RevenueCat processes your purchase records (product, time, transaction status) together with an anonymous app user ID generated by the app. We do not send your name, email address or scanned content to RevenueCat.

If you choose to enter a complimentary access code, RevenueCat uses that non-personal code as the app user identifier to verify its authorized Pro entitlement. Normal use continues to use an anonymous identifier. Access codes are not included in Analytics events or crash breadcrumbs.

RevenueCat Privacy Policy: https://www.revenuecat.com/privacy/

Barcode recognition uses Google ML Kit, whose model is bundled in the app and runs on your device. Images are not sent to Google.

Like other ML Kit apps, the SDK sends limited diagnostic information to Google to monitor and improve its performance: device manufacturer and model, OS version, app package name and version, a per-installation identifier that is not used to identify you, performance metrics and API configuration. This is transmitted over HTTPS and cannot be turned off in the app.

ML Kit data disclosure: https://developers.google.com/ml-kit/android-data-disclosure

To fix crashes and understand which features are useful, PluraScan uses Firebase Crashlytics and Google Analytics for Firebase, provided by Google.

• Crash reports: stack traces, device model, OS version, app version, a Firebase installation ID, and a few app states (Pro status, app language, scan engine, batch scanning on or off).
• Usage events: for example the types and number of codes scanned, the types of codes generated, whether exports and backups succeeded, screens viewed, and paywall views and purchase results, together with an app instance ID.
• Approximate location: Google Analytics derives country/region and city-level location from your device’s IP address for usage analysis. This does not use GPS or Android location permissions and is controlled by the same usage-reporting switch.

We never send scanned or generated content, web addresses, Wi-Fi passwords, contact details or file names. This information is not used for advertising, the advertising ID is not collected, Google signals are disabled and Analytics data is retained for 2 months.

This reporting is on by default in the released app. You can turn it off at any time under Settings → About → "Share anonymous usage & crash data"; after that, no further crash reports or usage events are sent.

Firebase privacy and security: https://firebase.google.com/support/privacy

We process purchase information to perform our contract with you (providing and restoring Pro). We process diagnostic, crash and usage information on the basis of our legitimate interests in keeping the app stable and improving it. You can object at any time by turning off "Share anonymous usage & crash data" or by contacting us.

• Camera: real-time code recognition.
• Internet and network state: WebDAV backup, purchase validation, and the diagnostics and statistics described above.
• Vibration: haptic feedback when a code is recognized.
• Google Play billing: purchasing and restoring Pro.
• Wake lock, run at startup and foreground service (added by WorkManager): running scheduled WebDAV backups reliably.
• Install referrer (added by Google Analytics): reading which store source the app was installed from.
• Storage write, Android 9 and below only: saving generated QR code images to your gallery.

PluraScan does not request location, contacts, SMS, call log, microphone or photo library read permissions.

When you choose an action on a scan result, such as opening a link, connecting to Wi-Fi, adding a contact or calendar event, sending an email or SMS, calling a number, viewing a location or searching the web, PluraScan passes the content to the corresponding app or system component on your device. What happens next is governed by that app or website and its own privacy practices.

• Google Play (purchases and app distribution), Google ML Kit, Firebase Crashlytics and Google Analytics for Firebase — Google LLC: https://policies.google.com/privacy
• RevenueCat (purchase validation) — RevenueCat, Inc.: https://www.revenuecat.com/privacy/

These providers process information on our behalf and may process it in countries other than yours. We do not sell your personal information or share it with third parties for their own marketing.

• Local data stays on your device until you delete it, clear the app's storage or uninstall the app. System backup copies are managed separately as described in section 5.
• Analytics data is kept for 2 months. Crash reports and purchase records are kept by Google and RevenueCat for as long as needed to provide the service, according to their retention policies.
• To request deletion of purchase records, crash reports or usage statistics related to your installation, email support@zhenxudev.com. Because these records are not linked to your name or email, we may ask for information such as your order number to locate them.

PluraScan is a general-purpose utility and is not directed to children under the age threshold defined by applicable law. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact us so that we can delete it.

We may update this Privacy Policy when the app's features or legal requirements change. Before a feature that changes how information is handled becomes available, we will update this page.

When we make substantive changes, we will update the version number and the last updated date shown on this page.

If you have questions about this Privacy Policy or want to exercise your rights regarding your information, please contact: support@zhenxudev.com.