CodePeek privacy policy
CodePeek is a QR code and barcode scanner and code maker, published by XDSS (package com.xdss.qrscan).
Effective date: 12 November 2026.
In short: camera images and the pictures you pick are read on your phone and are never uploaded. What you scan, your history and the codes you create stay on your phone. CodePeek has no account and no server of its own. The free version shows ads from Google AdMob, which collects device and usage data as described below. CodePeek also uses Google Analytics for Firebase for anonymous usage statistics, only with your consent where it is required, and you can turn it off in Settings. These statistics never include what you scan, type or create. Premium (a one-time purchase through Google Play) removes all ads.
Camera and images
CodePeek uses the camera only to find and read QR codes and barcodes. Camera frames are analysed on your device by a scanning model that is built into the app; they are not saved and never leave your phone. The same is true for a picture you choose with the system photo picker: CodePeek can see only the picture you pick, reads the codes in it on your device, and does not keep or upload the picture. Scanning works without an internet connection.
What CodePeek stores on your device
- Scan history (if "Save scans to history" is on): the content of each code, its type and format, when and how it was scanned (camera, image or batch), and whether you marked it as a favorite. A code can contain personal information, for example a Wi-Fi password or a contact. You can turn history off, delete single scans or clear everything.
- Settings: theme, vibration and sound, automatic copy, the history switch, the last type of code you created, your code style (colors, shapes, export size) and, if you add one, a copy of the logo image you chose for styled codes.
- Premium state: whether you have Premium or an active 24-hour styled-code trial (a cached copy of what Google Play reports).
- Your consent answer (stored by Google's consent tool) and your Usage statistics choice.
This data is kept only in the app's private storage on your device. It is not sent to us or to anyone else, and it is excluded from Android's cloud backup and device-to-device transfer.
Some things leave the app only when you ask for it: saving a code you created puts an image into your Pictures folder; "Share" hands the text or image to the app you choose; "Export to CSV" (Premium) writes a file to the place you pick; and actions such as "Open link", "Add to contacts", "Add to calendar", "Connect" to a Wi-Fi network, "Call", "Write email" or "Search the web" pass the scanned content to the browser or app that handles it. CodePeek never opens a link by itself, and its link warnings are worked out on your device without contacting any server.
Third-party services
- Google Mobile Ads (AdMob), free version only. To show and measure ads, the Google Mobile Ads SDK collects data such as your device's advertising ID, device information (model, OS version, language), app interactions with ads, IP address (from which an approximate location can be derived), and crash and performance diagnostics of the SDK. Depending on your consent choice, ads can be personalised or non-personalised. Ads appear on the result, history and create screens, never on the camera screen. See Google's privacy policy and how Google uses information from apps that use its services.
- Google Analytics for Firebase (usage statistics, free and Premium). See the next section.
- Google User Messaging Platform shows the consent form where required (for example in the EEA, UK and Switzerland) and stores your choice on the device. The same choice applies to ads and to usage statistics.
- Google Play Billing handles the Premium purchase. Payment is processed entirely by Google Play; CodePeek never sees your payment details. The app only receives whether you own Premium.
- Google ML Kit barcode scanning is the on-device scanning model. It runs inside the app and does not send your images or scan results anywhere.
CodePeek uses no crash-reporting service and never asks for your location, contacts, calendar, phone or storage permissions.
Usage statistics (Google Analytics for Firebase)
To learn how CodePeek is used (for example how often codes are scanned with the camera, from an image or in batch mode, how often codes are saved or shared from Create, which screens are opened, how often the Premium screen, purchases and the rewarded trial are used, and ad revenue), CodePeek uses Google Analytics for Firebase. It collects app interactions with predefined, coarse values only, plus device information (model, OS version, language), an app instance identifier, approximate location derived from the IP address and, where allowed, the advertising ID. It never records the content or even the type of a code you scan, and nothing you type, search for or create.
Usage statistics follow the same consent as ads: nothing is sent until your consent choice is known, and in regions that require consent they are collected only if you agree to storing and accessing information on your device. You can turn them off at any time in Settings > Privacy > Usage statistics; this also clears the app's analytics identifier. See Privacy and Security in Firebase.
Your choices
- Consent: where required by law you are asked before any ad is requested and before usage statistics are sent. You can change your choice at any time in CodePeek under Settings > Privacy > Privacy choices.
- Usage statistics: turn them off at any time in Settings > Privacy > Usage statistics.
- History: turn it off in Settings > History, delete single scans, or clear all history.
- Advertising ID: you can reset or delete it in your phone's settings (Settings > Privacy > Ads, or Google > Ads, depending on the device).
- No ads: CodePeek Premium removes all ads; for Premium users the app requests no ads.
- Camera: if you don't allow the camera, you can still scan pictures, use history and create codes.
Permissions
- Camera: to scan codes live. Asked when you first open the scan screen; images are processed on your device and never uploaded.
- Vibrate: for the short vibration when a code is found (you can turn it off).
- Internet and network state: for ads, usage statistics, the consent form and Google Play purchases. Scanning itself needs no connection.
- Advertising ID and ad services (added by the Google Mobile Ads SDK): for ads in the free version and, with your consent, ad measurement.
- Google Play billing: for the Premium purchase.
- Wake lock, foreground service and install referrer (added by Google libraries the ads and analytics SDKs use for their own background work and install measurement).
CodePeek does not ask for storage, location, contacts, calendar, phone, SMS or Wi-Fi permissions. Saving images and adding a Wi-Fi network use Android's own screens, where you confirm each step.
Children
CodePeek is not directed at children under 13 (or the minimum age in your country) and we do not knowingly collect their data.
Keeping and deleting data
Your data stays on your device until you delete it. Deleting a scan removes it; "Clear history" removes all scans; clearing CodePeek's storage or uninstalling the app removes everything CodePeek stored. Images you saved to Pictures and files you exported stay where you put them until you delete them. Data collected by Google's services is handled under Google's own retention policies linked above.
Changes
If this policy changes, the new version is published at this address with a new effective date, and significant changes are mentioned in the app's release notes.
Contact
Questions: sebiradutoiu@gmail.com