Private Policy

This Privacy Policy applies to Selene QR code: Scan & Create on Google Play ("App") and Selene QR: Scan&Create on App store ("App"), developed by Jaroslava Libman, Strojnicka 11, Prague, Czech Republic (controller/contact: seleneappscustomer@gmail.com). It explains data processing under GDPR (EU 2016/679) and Czech laws. We collect minimal data for local QR/barcode scanning/generation, ad-removal/subscription purchases via RevenueCat, and app stability. Read carefully; mandatory data enables functionality. 
Last updated: December, 2025.

Controller and Legal Basis
As GDPR controller, we process data per Art. 6.1: (a) consent, (b) contract, (c) legal obligations, (f) legitimate interests (e.g., stability/improvements). Hosting: Google Firebase (policies.google.com/privacy). Subscription management: RevenueCat (revenuecat.com/privacy). No data sales/sharing beyond processors.

Data Processing Details
QR/barcode scanning & generation:
Camera access only for local processing—no images or content stored/transmitted. Location access used locally when generating QR codes requiring geolocation (e.g., maps, check-ins)—no location data stored/transmitted. Legal basis: (b) Contract; (f) Legitimate interest. Retention: Session-only
Ad-removal/subscription purchases: Subscription status only via RevenueCat + Google/Apple IAP—no payment details collected by us. Legal basis: (b) Contract. Retention: Subscription duration + 3 years.
Pre-purchase ads: Device type/OS, IP address, app version via AdMob (anonymized). Legal basis: (a) Consent (opt-out via settings). Retention: Until purchase/uninstall.​
Analytics/crash detection: Aggregated stats (device/OS, access time, errors via Firebase). Legal basis: (f) Legitimate interest. Retention: 3 years.​Support queries: Email address, message content. Legal basis: (b) Contract. Retention: Until resolved.​
Legal compliance: Relevant data for fraud/audits. Legal basis: (c) Legal obligation. Retention: 6 years.​
 No scanned QR/barcode content (URLs, text, contacts) collected/stored/shared. All stays local.

Third-Party Services and Recipients
Processors (data access only for specific tasks, bound by DPAs):
- Google Firebase (crashes/analytics/hosting): policies.google.com/privacy​
- Google AdMob (ads): support.google.com/admob | Opt-out: support.google.com/ads/answer/2662922 ​
- Google Analytics (usage stats): policies.google.com/privacy | Device opt-out ​
- RevenueCat (subscription management): revenuecat.com/privacy​
- Google Play Billing (Android IAP): policies.google.com/privacy​
- Apple In-App Purchases (iOS IAP): apple.com/legal/privacy​

Data Recipients:
- Legal authorities (Czech courts, police, UOOU, tax authorities) for legal obligations only
- No other recipients – no data brokers, marketers, or sales

International Transfers
Non-EEA transfers (Google US, RevenueCat US) use EU SCCs or EU-US Data Privacy Framework. Request copy/safeguards: seleneappscustomer@gmail.com

Cookies and Trackers
No app cookies; webviews (if any) use device settings. Trackers limited to listed services

Data Security
GDPR Art. 32 measures (encryption, access controls, audits) protect against loss/breach. Report incidents to seleneappscustomer@gmail.com

User Responsibilities
Guarantee data accuracy, third-party consent (if sharing), and inform them of this policy. Liable for false info/damages.

Children's Privacy
Not directed at children under 13 (COPPA/GDPR compliant); no knowing minor data collection.Automated DecisionsNo profiling or automated decisions affecting users.

Your GDPR Rights
Free exercise: access, rectification, deletion, restriction, portability, objection, consent withdrawal (e.g., camera/settings). No impact on prior processing. Request via  seleneappscustomer@gmail.com(response ≤1 month). Complaints: Czech UOOU (uoou.cz) or EU list (ec.europa.eu/newsroom/article29/items/612080).

Changes
Updates at https://seleneqrapp.webflow.io/privacy-policy; material changes notified in-app/email. Check regularly.​
RevenueCat handles subscription data securely per their policy (revenuecat.com/privacy). We receive only anonymized status for feature unlocks—no personal payment data.