Yakura

Say hello :)

Privacy Policy

Effective date: April 14, 2026
Last updated: April 14, 2026

This Privacy Policy explains how Yakura LLC (“Yakura,” “we,” “us,” or “our”) collects, uses, discloses, and safeguards information when you use the QR Scanner mobile application (“the App”). By installing or using the App, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the App.

We have designed QR Scanner with privacy in mind. The App operates primarily on your device, and the limited data we do process is used solely to maintain, secure, and improve the App.

1. Information We Collect

1.1 Diagnostic and Usage Data

With your consent, we collect anonymous diagnostic and usage data through Google’s Firebase services to monitor App stability and improve the user experience. This data may include:

  • Device model, manufacturer, and screen resolution
  • Operating system name and version
  • App version, build flavor, and language preference
  • Aggregate feature-usage events (for example, how often a feature is used)
  • Crash reports, including stack traces and the device state at the time of a crash
  • A randomly generated, app-scoped installation identifier used solely to attribute events to a single installation

We do not collect your name, email address, phone number, precise location, government identifiers, or the content of any QR codes or barcodes you scan or create. You can disable diagnostic and usage data collection at any time from Settings → Error reports within the App.

1.2 Push Notification Identifiers

If you grant notification permissions, Firebase Cloud Messaging generates a registration token that allows us to deliver service notifications to your device. This token does not identify you personally and is used exclusively for notification delivery.

1.3 Contacts

The App requests access to your device contacts only when you explicitly choose to create a vCard or MeCard QR code from an existing contact. Contact information is read locally on your device, used only to populate the QR code, and is never transmitted to Yakura or any third party. If you do not use this feature, no contact data is accessed.

1.4 Camera

The App uses your device camera solely to scan QR codes and barcodes in real time. Camera frames are processed entirely on-device through Google ML Kit’s on-device barcode scanning library. No images, video, or camera frames are stored, transmitted, or shared with Yakura or any third party.

1.5 Locally Stored Content

Scanned and generated QR codes and barcodes are stored in a private database on your device. This data never leaves your device and is not accessible to Yakura or any third party. If you enable the optional clipboard feature, scanned content may be copied to your device clipboard; clipboard contents are managed entirely by your operating system.

1.6 Feedback You Submit

If you choose to use the Settings → Send feedback feature to report a bug, share feedback, or request a new feature, the text you enter will be transmitted to Yakura through Google Cloud Firestore (a Firebase service) along with the following diagnostic information, which is included to help us reproduce and resolve issues:

  • Device manufacturer and model
  • Android OS version and SDK level
  • App version name, version code, and build flavor
  • Device locale (language tag)
  • Timestamp of submission
  • Selected feedback category (Bug, Feedback, or Feature request)
  • Any email address you voluntarily enter in the optional email field

Submitting feedback is entirely voluntary; no feedback is ever sent automatically or in the background. We do not capture screenshots, scanned content, contact data, or any other information from the App as part of feedback. The feedback text is whatever you type; please do not include passwords, payment details, or other sensitive information in the message body. Feedback is stored in Firestore under Yakura’s Firebase project and retained for as long as reasonably necessary to address the report or improve the App. You can request deletion of any feedback you have submitted by contacting us at the address in Section 17 and identifying the approximate date and content of your submission.

1.7 Advertising and Advertising Identifier

The App is supported by advertising delivered through Google AdMob (operated by Google LLC). In order to serve, measure, and limit the frequency of ads, AdMob and its advertising partners may collect and process:

  • Your device’s resettable Google advertising identifier (“Advertising ID” or “AAID”)
  • General device information (device model, operating system version, language, mobile carrier, screen size)
  • Coarse, IP-derived location (country or region level); we do not request or use your precise GPS location for advertising
  • Interaction data with the ads themselves (impressions, taps, viewability signals)
  • A non-persistent, randomly generated request ID used to prevent fraud and duplicate counting

AdMob may use this information to deliver personalized or non-personalized advertising depending on your jurisdiction and the consent status reported by your device. In regions governed by the GDPR, UK GDPR, or similar laws, ads shown to you will be non-personalized unless you have provided affirmative consent through a Google-recognized consent mechanism. We do not ourselves build advertising profiles, nor do we sell or share data with third parties for their own independent marketing purposes.

You can reset your Advertising ID, opt out of personalized ads, or remove the Advertising ID entirely at any time from your device’s system settings (typically Settings → Google → Ads or Settings → Privacy → Ads). You can also install AdMob’s opt-out mechanism described at https://support.google.com/ads/answer/2662922. For more information, see Google’s advertising privacy disclosures at https://policies.google.com/technologies/ads.

The App does not contain advertising directed at children, and we do not knowingly serve personalized ads to users under the age of 13 (or 16 in jurisdictions where that is the applicable minimum age).

2. App Permissions

The App requests the following Android permissions, each used only for the purpose described:

  • Camera — to scan QR codes and barcodes from the live camera feed.
  • Internet — to communicate with Firebase services (analytics, crash reporting, push notifications, remote configuration) and to open links from scanned QR codes when you tap them.
  • Network state / Wi-Fi state — to detect connectivity status and to enable optional Wi-Fi auto-connect from scanned Wi-Fi QR codes.
  • Change Wi-Fi state — to apply Wi-Fi credentials when you tap a scanned Wi-Fi QR code.
  • Vibrate — to provide haptic feedback when a barcode is successfully scanned.
  • Read contacts — only when you explicitly create a vCard or MeCard QR code from an existing contact.
  • Read external storage (Android 12 and below) — to scan barcodes from images in your gallery.
  • Write external storage (Android 9 and below) — to save generated barcode images.
  • Post notifications (Android 13 and above) — to display push notifications you have opted in to receive.
  • Access advertising ID (Android 13 and above) — included automatically by the Google Mobile Ads SDK so that AdMob can read your device’s Advertising ID when serving ads, as described in Section 1.7.

You can revoke any dangerous permission (camera, contacts, notifications) at any time through your device’s system settings. You can reset or remove your Advertising ID at any time from Settings → Google → Ads (or the equivalent on your device).

3. Third-Party Services

QR Scanner integrates the following third-party services. Each service is governed by its own privacy policy:

  • Firebase Analytics (Google LLC) — Aggregates anonymous usage statistics.
  • Firebase Crashlytics (Google LLC) — Collects crash reports and diagnostic data to identify and resolve bugs.
  • Firebase Cloud Messaging (Google LLC) — Delivers push notifications via a registration token.
  • Firebase In-App Messaging (Google LLC) — Delivers contextual in-app messages when you have opted in to diagnostic and usage data collection.
  • Firebase Remote Config (Google LLC) — Fetches feature-flag and configuration values from Google’s servers; no user data is transmitted.
  • Google Cloud Firestore (Google LLC) — Stores feedback, bug reports, and feature requests that you voluntarily submit through Settings → Send feedback, together with the diagnostic information described in Section 1.6.
  • Google ML Kit Barcode Scanning (Google LLC) — Performs on-device barcode and QR code recognition. All processing occurs locally on your device; no camera frames or scan results are sent to Google.
  • Google Play Services (Google LLC) — Provides in-app review prompts and in-app update functionality.
  • Google AdMob / Google Mobile Ads SDK (Google LLC) — Serves advertisements within the App and reports aggregate delivery and performance data. AdMob may access your device’s Advertising ID and collect the information described in Section 1.7. Google’s AdMob privacy disclosures are available at https://support.google.com/admob/answer/6128543 and https://policies.google.com/technologies/ads.

You can review Google’s privacy practices at https://policies.google.com/privacy. The data collected by these services is also disclosed in our Google Play Data Safety section, which you can review on the App’s Play Store listing.

4. Third-Party Links and Content

QR Scanner can open links, addresses, contact details, and other content encoded in QR codes and barcodes you scan. When you choose to open such content, you may be directed to third-party websites, apps, or services that are not operated by Yakura. We are not responsible for the privacy practices, content, or security of these third parties. We encourage you to review their privacy policies before providing any information.

5. How We Use Information

We use the information described in Section 1 for the following purposes:

  • To diagnose, investigate, and resolve crashes, errors, and performance issues
  • To understand how features are used, in aggregate, so we can prioritize improvements
  • To deliver push notifications you have opted in to receive
  • To serve advertisements through Google AdMob in order to keep the App free of charge, as described in Section 1.7
  • To enforce our terms and protect against fraud, abuse, and security incidents
  • To comply with applicable legal obligations

Yakura itself does not build advertising profiles about you, sell your personal information to data brokers, or share your data with third parties for their own independent marketing purposes. Advertising delivery is handled by Google AdMob subject to Google’s own privacy practices, which are disclosed in Section 1.7 and Section 3.

6. Legal Basis for Processing (EEA / UK Users)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases under the General Data Protection Regulation (GDPR) and the UK GDPR:

  • Consent — for diagnostic, usage, and crash data collection, which you can withdraw at any time from Settings → Error reports.
  • Legitimate interest — for ensuring the App functions correctly and is secure, where such interests are not overridden by your fundamental rights.
  • Legal obligation — where required by applicable law.

7. California Residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”), provides you with the following rights:

  • Right to know — what categories of personal information we collect, the sources, the purposes for collection, and the categories of third parties with whom we share it. We disclose this information in Sections 1 and 3 above.
  • Right to delete — you may request deletion of personal information we have collected from you, subject to legal exceptions.
  • Right to correct — you may request correction of inaccurate personal information.
  • Right to opt out of sale or sharing — we do not sell personal information for money. However, under the CCPA/CPRA, serving advertisements through Google AdMob may constitute “sharing” of personal information for cross-context behavioral advertising when personalized ads are enabled. You can opt out of such sharing at any time by: (a) resetting or deleting your Advertising ID from Settings → Google → Ads; (b) enabling the “Opt out of Ads Personalization” switch in your device’s Google settings; or (c) contacting us at the address in Section 17. We will honor Global Privacy Control (GPC) signals where technically feasible.
  • Right to limit use of sensitive personal information — we do not collect or process sensitive personal information for purposes that would trigger this right.
  • Right to non-discrimination — we will not deny you services, charge you a different price, or provide a different level of quality for exercising any of the above rights.

The categories of personal information we collect (as defined by Cal. Civ. Code § 1798.140) are: identifiers (a randomly generated installation ID, FCM registration token, and the device Advertising ID made available to Google AdMob), internet or other electronic network activity (anonymous app usage events and aggregated ad interaction data), commercial information (advertising delivery and measurement data in aggregate form), and inferences derived from this information for the limited purposes of improving the App and serving advertisements. We do not collect biometric, geolocation (precise), sensory, professional, education, or any “sensitive personal information” categories.

To exercise your CCPA/CPRA rights, contact us using the details in Section 17. We will respond within the timeframes required by law.

8. Other Jurisdictions

We respect privacy laws in other jurisdictions, including but not limited to:

  • Brazil — Lei Geral de Proteção de Dados (LGPD)
  • Canada — Personal Information Protection and Electronic Documents Act (PIPEDA)
  • South Africa — Protection of Personal Information Act (POPIA)
  • Australia — Privacy Act 1988
  • Japan — Act on the Protection of Personal Information (APPI)
  • South Korea — Personal Information Protection Act (PIPA)

If you are a resident of one of these jurisdictions, you may exercise rights similar to those described in Sections 6 and 7 by contacting us using the details in Section 17.

9. Your Rights and Choices

You have the following rights regarding your personal data:

  • Right of access — request confirmation of whether we process your personal data and a copy of that data.
  • Right to rectification — request correction of inaccurate or incomplete data.
  • Right to erasure — request deletion of your personal data.
  • Right to restrict or object to processing — under certain conditions.
  • Right to data portability — receive your data in a structured, machine-readable format.
  • Right to withdraw consent — at any time, without affecting the lawfulness of processing based on consent before withdrawal.
  • Right to lodge a complaint — with your local data-protection authority.

You can exercise these rights by contacting us at the address in Section 17. In addition, you can manage your data directly within the App:

  • Disable diagnostic data: Settings → Error reports
  • Disable clipboard copy: Settings → Copy to clipboard
  • Clear scan history: Settings → Clear history
  • Revoke camera, contacts, or notification permissions: via your device’s system settings
  • Delete all data: uninstall the App or clear App data via your device’s system settings

10. Data Sharing and Disclosure

We share data only with the third-party processors listed in Section 3, and only for the purposes described in this Privacy Policy. We do not sell your information for money. The Advertising ID and related delivery signals described in Section 1.7 are processed by Google AdMob and, where applicable, its advertising partners, solely for the purpose of serving, measuring, and limiting the frequency of in-app advertisements. We do not rent, trade, or otherwise transfer your information to any third party for its own independent marketing purposes.

We may disclose information if required to do so by law, regulation, legal process, or governmental request, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Yakura, our users, or the public.

In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via the App or other means before your information becomes subject to a different privacy policy.

11. Data Retention

Scanned and generated barcode data is stored locally on your device until you delete it through the App or your device settings. Diagnostic and usage data collected by Firebase is retained in accordance with Google’s published data-retention policies. Yakura does not operate any servers that store your data.

12. Data Security

We employ commercially reasonable administrative, technical, and organizational measures to protect information collected through the App. Locally stored data resides in the App’s sandboxed private storage area on your device. Data transmitted to Firebase is sent over encrypted TLS connections. Despite these measures, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

13. International Data Transfers

Diagnostic and usage data processed by Firebase may be transferred to and processed in the United States and other countries where Google maintains infrastructure. Where such transfers occur from the European Economic Area, the United Kingdom, or Switzerland, they are protected by appropriate safeguards, including the European Commission’s Standard Contractual Clauses, as implemented by Google.

14. Children’s Privacy

QR Scanner is not directed to children under the age of 13 (or 16 in jurisdictions where that is the applicable minimum age), and we do not knowingly collect personal information from children. The App complies with the Children’s Online Privacy Protection Act (COPPA) and similar laws. If you believe a child has provided personal information to us, please contact us at the address in Section 17 and we will take steps to delete that information promptly.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will revise the “Effective date” and “Last updated” dates at the top of this page and, where appropriate, provide additional notice within the App. Your continued use of the App after the updated policy takes effect constitutes your acceptance of the changes.

16. Disclaimer and Limitation of Liability

This Privacy Policy is provided for informational purposes only and is intended to comply with applicable data-protection laws. While we make commercially reasonable efforts to safeguard your information as described in Section 12, we cannot and do not guarantee absolute security. Yakura LLC, its affiliates, officers, directors, employees, agents, and licensors (collectively, the “Yakura Parties”) shall not be liable for any unauthorized access to, alteration of, disclosure of, or destruction of any information collected through the App, except to the extent such liability cannot be excluded under applicable law.

The Yakura Parties also shall not be liable for the acts, omissions, data-handling practices, security measures, or privacy policies of any third party referenced in this Privacy Policy, including but not limited to Google LLC and its Firebase services. Your use of those services is governed by the third party’s own policies.

For full details regarding warranties, disclaimers, limitations of liability, indemnification, governing law, and dispute resolution, please review our Terms of Use, which are incorporated herein by reference and govern your use of the App.

Nothing in this Privacy Policy is intended to exclude or limit any rights or remedies that cannot be excluded or limited under applicable law.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Yakura LLC
Email: support@yakura.dev
Website: https://yakura.dev

We will respond to verifiable requests within the timeframes required by applicable law.