QR Trust — Privacy Policy

QR Trust ("the app") is provided by Qerberos LLC ("we", "us"). This policy explains what the app collects and why.

What we collect

When you scan a QR code, the app sends the following to our servers to assess the link's safety:

• The scanned URL — checked against threat databases and analyzed for reputation. We store a hashed form of the URL plus the URL itself for threat intelligence.
• Approximate location (latitude/longitude, optional) — used to show where scan activity occurs. You can deny location permission and still use the app.
• A device identifier and user identifier — random IDs used to log scans and prevent abuse. These are not linked to your name.
• Timestamp and country of the scan.

We do not collect your name, email, contacts, or photos, and we do not use your data for advertising.

How the link is analyzed (third parties)

To produce a Safe / Unsafe / Unknown verdict, a scanned URL may be checked against PhishTank (known-phishing database), RDAP (domain registration age), and Anthropic Claude (AI reputation analysis). Only the URL is shared for analysis — never your identity.

How we store and protect it

Data is transmitted over encrypted HTTPS/TLS and stored on our hosting provider (Railway). We retain scan records to improve threat detection.

Children

QR Trust is not directed at children under 13 and does not knowingly collect their data.

Your choices

You may deny location permission at any time. To request deletion of data associated with your device, contact us.

Contact

Qerberos LLC — info@qerberos.com