What Qito stores on your device
All of the following live in your app's sandbox (iOS: the app container; Android: internal storage or SharedPreferences). None of it is transmitted off-device by Qito itself.
- Your QR history — the payloads you've generated, the styles you've applied, timestamps, and a favorite flag. Stored via
SharedPreferences. - Your app settings — theme preference, haptic toggle, auto-save toggle, accessibility settings, one-handed mode.
- Photos you pick — if you pick a background, logo, or Art QR photo, the file is copied into the app's sandbox so Qito can read it reliably. You can clear it by deleting the corresponding history entry.
- Pro entitlement — a single boolean indicating whether you purchased Pro, the product ID, and the expiry date (for subscriptions). This is read back from Apple/Google on every launch; we never store payment data.
You can clear all of this at any time via Settings → Clear history or by offloading/uninstalling the app.
What Qito does not do
The network calls Qito does make
1. Google Fonts (first launch only)
On the very first launch, Qito fetches the Inter typeface from Google Fonts via fonts.googleapis.com. The file is then cached locally forever; subsequent launches are fully offline. Google may log the IP of that single request in its general server logs; we neither request nor receive any such data. If you need strict offline, you can bundle the fonts in assets/ and disable runtime fetching — see the source repository for the flag.
2. In-app purchases (only when you upgrade)
If you choose to upgrade to Pro, Qito talks to Apple StoreKit or Google Play Billing directly via their native SDKs. Those stores handle the payment and hand back a receipt + entitlement flag. We read that flag; we never see your card, your bank, or any personal identifier. Refunds, subscription management, and tax handling are all done by Apple or Google under their respective policies.
3. Ads (free tier only)
The free tier shows banner and occasional interstitial ads served by Google AdMob. AdMob requires a GADApplicationIdentifier per platform; the production IDs are published in the app and can be inspected in the source. AdMob may use device-level identifiers for ad personalization; on iOS this is gated by App Tracking Transparency (you'll see the prompt), on Android by Play Services' advertising ID settings. Upgrading to Pro removes all ads and the AdMob SDK initialization entirely.
Your data rights (GDPR, CCPA, equivalents)
Because Qito does not collect personal data to a server, there is no central database from which to retrieve, correct, or delete your information — there is no such database. Your data lives on your device, under your control. You may:
- View every stored entry via Settings → Privacy inside the app.
- Export your full history as a JSON file via Settings → Export backup.
- Delete individual items from the History tab, or wipe everything via Settings → Clear history.
- Uninstalling Qito deletes all app data.
Children's privacy
Qito is suitable for general audiences. It does not knowingly collect personal information from children under 13, because it does not knowingly collect personal information from anyone. Ads served to devices that identify as child-directed (via the store's age rating or device-level configuration) are restricted per Google's and Apple's family-safe ad policies.
Security
Since no personal data is transmitted by Qito itself, there is no transport or database security to guarantee on our end. For the small surfaces that exist:
- The marketplace share-link codec uses an HMAC-SHA-256 tamper-evident checksum; decoding a tampered link fails closed.
- Locally stored payloads are placed in the standard app sandbox, which iOS and Android encrypt at rest when the device passcode is set.
- In-app purchase verification relies on Apple's and Google's signed receipts; we do not roll our own crypto for entitlements.
Changes to this policy
If this policy changes, the updated version will be published at this URL and the "Last updated" date above will change. Material changes (for example, if Qito ever introduced any form of server-backed feature) would be surfaced in-app as a nutrition-label update the next time you open the app, with a changelog entry linking to this page.
Contact
Questions, concerns, or a privacy complaint? Email playpalapps2024@gmail.com and we'll reply personally. We answer all privacy-tagged messages within seven calendar days.