BizQR Teky · com.appteky.qrteky

Privacy Policy for BizQR Teky

Last updated: November 13, 2026

This Privacy Policy explains how BizQR Teky (formerly QR Teky, "the App") handles information when you use the App. It also covers the website at https://qrteky.appteky.com ("the Website"), which is described in its own section below. The App and the Website are treated separately because their analytics work differently: in the App, masked usage analytics are on by default and can be turned off in Account; on the Website, analytics only run if you allow them.

Summary

• BizQR Teky works without an account. Scanning, generating, Contacts, paper-card reading, the Google Review kit, an offline BizCard QR and local history never require signing in.
• Signing in is optional, and adds a published BizCard link, Teky Letters, contacts backup and history backup.
• BizQR Teky does not sell your personal information.
• Your Contacts and your scan/generation history stay on your device unless you explicitly turn on the matching backup.
• Teky Letter messages are encrypted on your device before upload. We cannot read them.
• The App contains no advertising SDK. It uses Microsoft Clarity for usage analytics, set up so that every screen is masked: the words you type and the images you see are obscured before anything is sent. You can turn this off in Account ("Help improve BizQR Teky"). The Website uses the same tool, and only after you allow it.

Information We Process

The App may process the following information on your device:

• QR code content you scan or generate.
• Camera access (to scan QR codes).
• One-time photo picker access when you choose a logo image for a generated QR code.
• Temporary files used for sharing generated QR images.
• Web pages you choose to open from a scanned link, loaded in the App's built-in browser.
• Contact details of other people that you choose to save to Contacts (see "Contacts" below).
• Photos of paper business cards you choose to scan, read on your device (see "Paper business cards" below).
• The Google review link, business name and print settings you enter in the Google Review kit.

This information is processed locally on your device to provide core app features.

Optional Account

You may sign in with Google. We use Firebase Authentication (Google LLC) and receive your Google account identifier, email address, display name and profile picture URL. This is used only to identify your account across BizQR Teky and the DigiCard app.

You can use every offline feature of the App without ever signing in.

Saved Cards

Cards you open from other people’s links, QR codes or NFC tags are saved as local copies in Saved cards (up to 100). You can search, reopen, remove or clear them. Copies can become outdated and are not included in cloud history backup.

Contacts

Business cards you collect are stored in Contacts on your device: by scanning a contact QR code (vCard or MeCard), adding a BizCard you opened, photographing a paper business card, or typing details in. You can add tags, an event, notes and a follow-up date. Contacts are not uploaded unless you turn on contacts backup (see "Optional Contacts Backup" below), and are not shared unless you export or share them yourself (CSV, contact file, or the share sheet). When you delete a contact, the App keeps only its internal id and the time it was deleted, so a backup cannot bring it back. "Save to phone contacts" opens your phone's own new-contact screen pre-filled; the App never reads your address book. You can edit or delete any contact at any time, and uninstalling the App removes them.

Paper business cards

When you scan a paper business card, the photo is read by on-device text recognition (Google ML Kit, bundled in the App). The image and the recognised text are not uploaded. You review the extracted details before anything is saved.

Google Review kit

The review link and business name you enter are stored on your device and used to draw QR codes and printable PDFs. Printing uses the print service you choose; writing to an NFC tag happens only when you tap Write.

Optional Contacts Backup

Contacts backup is off by default, and is separate from history backup. If you turn it on:

• The contacts in your Contacts tab (name, job title, company, phone numbers, emails, website, address, notes, tags, event, follow-up date and how each was added) are copied to your private account area in Firebase Firestore, so they survive a lost or replaced phone. The original scanned text or paper-card text is not uploaded.
• These are other people's details. Only your signed-in account can read them. They are never made public, shared, or used for advertising, and we do not contact the people in them.
• Deleting a contact on your device replaces its backed-up copy with a marker holding only the deletion time, on the next sync.
• Signing in on a new phone offers to restore your contacts. Restoring only downloads; it never uploads what is already on that phone.
• You can turn backup off, and separately delete the stored copy, at any time from Account in the App. Deleting your account deletes it too.

Optional History Backup

History backup is off by default. If you turn it on:

• The QR content you have scanned or generated is copied to your private account area in Firebase Firestore.
• Only your signed-in account can read it. It is never made public, shared, or used for advertising.
• You can turn backup off, and separately delete the stored copy, at any time from Account in the App.
• Deleting an item on your device also removes it from the backup on the next sync.

BizCard (optional, formerly Teky Card)

You can make a BizCard without an account. Until you publish it, the card is stored on your device only and its QR code holds your details directly (a vCard), so scanning it needs no server.

If you publish a BizCard, the details you enter (such as name, job title, company, email, phone, location, bio, photo and links) are stored in Firebase and published at a public web address so that people you share it with can view it. Only include information you are willing to make public. You can make your card private or delete it at any time.

Teky Letters (optional)

If you create a Teky Letter:

• Your message is encrypted on your device using a key derived from the secret word you choose (PBKDF2-HMAC-SHA256, AES-256-GCM) before anything is uploaded.
• We store only the encrypted result. We never receive your secret word, a hash of it, or the readable message.
• New letters keep a creator-only copy of the secret word in secure device storage (Android Keystore-backed encryption or iOS Keychain). You can reveal it while signed in as the creator on that device. It is not uploaded, included in QR codes, or included in history backup. Older letters and letters created on other devices do not have a recoverable copy here.
• Anyone with the link can attempt to unlock it, so choose a secret word that is not easy to guess.
• We record only a count of how many times an experience was opened and when it was last opened. We do not collect any information about recipients, and recipients never need an account.

NFC (optional)

If you write an NFC tag, only the public web address of your BizCard is written to it. No profile details, passwords, messages or account credentials are ever written to a tag.

Data Collection and Sharing

We do not collect personal data on our servers unless you sign in and use the optional features described above. We do not share your personal data with data brokers or advertisers.

We use Google Firebase (Authentication, Cloud Firestore, Cloud Storage and Hosting) as our service provider for the optional account features. Their processing is governed by Google's privacy policy.

If you choose to use certain features, data may be handed to third-party apps/services you select:

• Open link: when you tap "Open" on a scanned or saved web link, the App loads that site in its built-in browser (an in-app WebView). The website you visit receives your request directly, including your IP address and any cookies the WebView stores for it. BizQR Teky does not read, log, or transmit the contents of pages you visit.
• Share: QR images/text are shared using your device's share sheet to the destination you choose.

Those third-party services process data under their own privacy policies.

About the built-in browser

• Links only open after you explicitly tap "Open"; scanning a code never opens anything on its own.
• Only http and https links can be opened. The App blocks other link types (for example app-install or payment schemes), including redirects from a page you are already viewing.
• The full address of the page is always shown at the top of the browser, and insecure http pages are marked as not secure.
• Browsing data kept by the WebView (cookies, site storage) belongs to the App and is removed when you uninstall it. You can also clear it via your system settings for BizQR Teky.
• Treat links from QR codes with the same caution as links from strangers: check the address shown before entering any information.

App Analytics

The App uses Microsoft Clarity to understand how it is used — which screens people reach, where they hesitate, and which features go unused. This section describes exactly what that does and does not capture.

Everything on screen is masked. Clarity is initialised with masking applied to the entire application. Text is replaced with placeholder characters and images are painted over before any recording leaves your device. That covers, without exception:

• the message and sign-off you write in a Secret Letter, before it is encrypted;
• your secret word;
• your BizCard details, and anyone else's BizCard you open;
• the contacts you collect, and the text read from paper business cards;
• the contents of any QR code you scan or generate, including Wi-Fi passwords;
• your scan and generation history;
• any web page you open in the built-in browser.

What is captured. Screen layouts with the content masked, taps and scrolls, which screens you visit and in what order, session length, crashes and errors, plus device model, operating system version, and approximate region. Microsoft processes this as described in the Microsoft Privacy Statement (https://privacy.microsoft.com/privacystatement).

What is never captured. The plaintext of a Secret Letter, a secret word, or any key derived from one. Nothing in this analytics path can decrypt a letter — the message is encrypted on your device with a key that exists only there, and Clarity never receives the words on screen.

Named steps. Alongside the masked recording, the App sends a fixed set of named events when you reach certain steps, such as "onboarding finished", "BizCard published", "contact added by paper card" or "review kit printed". Each event is only its name: never the details you typed, scanned or collected.

Turning it off. Analytics are on by default. Switch off "Help improve BizQR Teky" in Account to stop recording immediately; nothing is recorded on later launches until you turn it back on.

Scanning is still on-device. Camera frames are processed locally and are never uploaded. Analytics does not change that.

The Website (qrteky.appteky.com)

This section applies to the Website only. The App's analytics are described in "App Analytics" above. Neither the App nor the Website contains an advertising SDK.

Analytics tool. The Website uses Microsoft Clarity to understand how the page is used — which sections people read, where they stop scrolling, and which links they follow. Clarity records anonymised interaction data (clicks, scrolling, mouse movement, pages viewed) and derives approximate location, browser and device type from your request. Microsoft processes this data as described in the Microsoft Privacy Statement (https://privacy.microsoft.com/privacystatement).

Clarity only runs if you allow it. No Clarity script is loaded and no analytics cookies are set until you choose "Allow" on the consent bar shown on your first visit. If you choose "No thanks", nothing third-party is loaded, and any Clarity cookies already present are deleted.

Your choice, and how to change it. Your answer is stored in your browser's local storage under the key qrteky.analytics-consent. It is not a cookie and it is never sent to us. You can change your answer at any time using the "Cookies" link in the Website footer. Choosing "No thanks" there also removes the Clarity cookies.

Cookies. If, and only if, you allow analytics, Clarity sets first-party cookies (currently _clck and _clsk) to recognise repeat visits and group them into sessions. These are set on the appteky.com domain, so they are visible to other sites on that domain. No other cookies are set by this Website.

Pages deliberately excluded. Clarity is never loaded on Teky Letter pages (/e/...) or BizCard pages (/c/...), regardless of your consent choice. Those pages display a decrypted private message or another person's contact details, and session-replay tooling has no business recording either. Teky Letter pages additionally send a Content Security Policy that blocks third-party scripts outright.

What the Website never receives. The Website has no login, no forms and no payment flow. It does not receive your QR codes, your scan history, your BizCard details, or the contents of any secret letter.

Local Storage and Retention

• Scan/generation history, your Contacts and an unpublished BizCard are saved locally on your device (using local app storage).
• If a backup is off, we have no remote access to that data.
• If a backup is on, a copy is retained in your account until you delete it or delete the corresponding entries.
• You can clear history in the App at any time.
• Generated QR images saved to gallery remain until you delete them.
• BizCards and Teky Letters are retained until you delete them. Deleting a Teky Letter immediately stops its QR code and link from working.

Permissions Used

BizQR Teky may request:

• Camera permission: scan QR codes and photograph paper business cards.
• Internet permission: required for loading links you choose to open in the built-in browser, for Google Play update checks, for the optional account features, and for platform networking.
• NFC permission (optional, Android): only used when you choose to read or write an NFC tag. The App does not read tags in the background.
• Photo access: only when you choose a logo for a QR code or a photo for your BizCard.

Generated QR images can be saved to your gallery using system storage APIs. On older Android versions, the system may request legacy storage access only when saving an image.

Children's Privacy

BizQR Teky is not directed to children under 13. We do not knowingly collect personal information from children.

Security

Because data is primarily stored on-device, security depends in part on your device security settings. We use standard platform APIs and permissions.

International Users

If you use the App outside your country of residence, data handling remains primarily on-device as described in this policy.

Your Choices and Rights

Depending on your location, you may have rights regarding your personal data. Most requests can be handled directly in the App:

• Clearing app history in the App.
• Turning off contacts or history backup and deleting the stored backup (Account screen).
• Turning off usage analytics (Account screen).
• Making your BizCard private, or deleting it.
• Disabling or deleting a Teky Letter.
• Signing out.
• Removing saved images from your device gallery.
• Revoking app permissions in device settings.
• Uninstalling the App.

You can delete your account and all associated cloud data in the App (Account → Delete my account), or by emailing us at the address below. Instructions: https://qrteky.appteky.com/delete-account

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date when changes are made.

Contact Us

For privacy questions, contact:

• Developer: Appteky (https://appteky.com)
• Email: appteky@gmail.com