LucidQR

Privacy notice

LucidQR is provided by GuardGraph LLC, a US-based company. This notice describes the current local-first beta, not cloud features planned for a later build.

Scanning stays on your device

QR decoding and link-text checks happen on your device. This build does not automatically send scanned content, links, photos, or measurements to GuardGraph, and it does not visit scanned websites during analysis. You do not need a LucidQR account to scan.

Camera and photo access are used to read QR codes. Permission can be managed in your device settings. QR codes may contain private links, sign-in tokens, ticket details, Wi-Fi credentials, or other sensitive information.

Local history and recovery backups

Decoded content, results, and available captured images can be saved in local scan history. On iOS, local recovery backups may also retain history. History and backups can remain between app launches and are not covered by the seven-day measurement limit below. Someone with access to your device may be able to view them.

The app offers history deletion controls, but local recovery copies may remain. Device backups made by your operating system may also contain app data under your device settings. Do not rely on deleting one history entry to remove every possible backup copy. Contact us for help understanding the current controls.

Optional usage statistics and diagnostics

The usage-statistics and diagnostics choices are separate and off by default. If you enable them, the app records content-free scan counts, timing, and error categories locally. Up to 100 measurements from the last seven days are retained. Expired measurements are removed when the app next starts or records a measurement.

These measurements exclude decoded QR content, scanned URLs, images, content hashes, and detailed console logs. They are not automatically uploaded in this build. Turning a category off clears its recorded measurements. You may choose to include available measurements in a feedback report.

Feedback you deliberately share

Creating or reviewing a feedback report does not send it. A report contains your selected issue, optional comment, app version, build number, platform, and available result category. Decoded content, the available QR image, and optional measurements are included only when you select them.

You can review the report and image before exporting. Images are resized and re-encoded to remove photo metadata, but visible information and the QR code itself can still reveal sensitive data. The temporary iOS export is removed after sharing finishes or is cancelled.

You choose a recipient and sharing channel. This beta does not have an automatic report-upload inbox. Your email or sharing provider and the recipient may keep their own copies; exporting a report does not guarantee delivery to GuardGraph.

When GuardGraph receives your feedback

If you send a report or email to GuardGraph, we receive the information you chose to send, including your sender address and message details supplied by the channel. Reports and support messages should not be assumed anonymous. We use them to answer requests, investigate problems, and improve LucidQR.

Our support email is hosted through Zoho Mail. We retain correspondence while investigating and following up, and where needed for legitimate support, security, or legal obligations. You can contact [email protected] to ask about access, correction, or deletion of information we received. Copies held by your chosen recipient, email provider, or backups may require separate handling.

Apple TestFlight

Apple handles TestFlight distribution, beta feedback, and its own diagnostics under its terms and privacy notices. These are separate from LucidQR's optional local measurements. You can send screenshots and comments through TestFlight; review them for private information before submitting.

Cloud features are not enabled in this build

Online checks, automatic measurement uploads, and direct report submission are being evaluated. They are not enabled by this notice or by creating a local report. Before enabling them in a future build, we will describe the data sent, purpose, recipients, retention, and controls in the app and update this notice. Scanning without optional sharing will remain available.

This website is separate from the app

The website source is maintained on GitHub, and Cloudflare delivers and protects the public website. Website providers receive ordinary web-request information, such as IP address and browser details, to deliver and protect the site. Visiting this page does not send your app's QR history to us. See the GuardGraph website privacy policy for website-specific information.

Your choices and contact

Leave optional measurements off, disable either category later, and review attachments before sharing. For app help, email [email protected]. For privacy questions or requests, email [email protected]. For vulnerability reports, email [email protected]. Please do not include passwords, live sign-in tokens, or payment credentials in an initial message.

We will update the date and applicable build when behavior changes. This notice does not announce App Store availability or promise complete protection against QR scams.