Privacy

Updated 3 November 2026. We are NUVIX STUDIO LIMITED, the operator of QR That Lasts. Our full privacy notice covers the app, website and printed-code redirects, including our company details, suppliers, lawful bases and your rights.

We keep account details, codes and billing records to run your account. Scan statistics include approximate location, device type and a daily-changing IP hash. The hash is personal data; our scan database does not store the raw IP address. Sign-in sessions, account-security rate-limit records and hosting logs can contain IP addresses. Routine cleanup removes those rate-limit records once they have gone unused for two days, though not at an exact time.

Optional measurement

If you agree on signup, Google Analytics, Google Ads, Meta and TikTok can measure signups, checkout starts and your first paid subscription. With Measurement only, we may save their browser identifiers, including advert-click and session identifiers, against your account and send these events from our server. Payment measurement includes the plan, transaction reference, currency and amount paid; we also send related refund corrections to Google Analytics. Google’s tag on the signup page may also pick up the email address you type, as user-provided data. With Allow all, which applies to that signup only, we may also send Meta and TikTok a hashed copy of your verified email, a hashed account reference, and the IP address and browser details from your signup and checkout visits, and Google a hashed copy of your verified email through Google Analytics. We keep those IP address and browser details for up to 7 days. With Measurement only, our server sends none of these. Our events never contain your password or QR content. We do not use this choice to personalise Google ads.

. The website has a separate choice. When signed in, use account settings to remove stored advert identifiers and stop queued measurement. Information already sent is handled by the providers under their privacy notices. See our cookie notice.

Ask Jev

Where we offer it, you can tick a box on the help page to ask Jev, an AI model run by TypeSafe AI, Inc. in the United States, which help article fits your question. Nothing is sent unless you tick the box and press Ask Jev, and we rely on your consent for that. We send the question and our topic list, with no account details added. We try to remove obvious identifiers first but can miss some, so leave out anything private.

We do not store the question or the answer. A count of your requests, kept for an hourly limit, is in your data export, is deleted with the account and is removed by routine cleanup after two days unused. TypeSafe’s published terms let it keep request data with no fixed period, including for security, legal compliance, and logs and statistics about the service. Our full privacy notice has the details.

Retention and account closure

Individual scan records are normally removed in monthly batches, once the whole month is over 90 days old and its daily totals are final. That usually means up to about 122 days. Removal can take longer if the daily totals or the cleanup are delayed. Destination history, daily totals, billing, measurement-event and consent records and abuse reports currently have no fixed automatic deletion period. Records of what happens to an account are never deleted automatically under our current retention rules. These records may contain personal data.

The account owner can close the account in account settings. Closing it stops its dynamic codes, clears their names, designs and content, and deletes its saved designs, logos and folders. If someone’s sign-in is used only on this account, we replace their name and email address and delete their password, sessions and two-step login. A sign-in still needed for another live account or for staff access is kept. Static codes you have already downloaded keep working, and we cannot recall them.

Closure does not erase those retained records, provider records or backups. Stripe sells paid plans as merchant of record and holds the card, billing and tax details under its own privacy notice; we hold Stripe’s customer, subscription and checkout references and a log of its billing events without their contents, and the customer reference is cleared when the account is erased. For purchases made through Paddle before we moved to Stripe, we retain Paddle’s payment-event records, which can contain names, billing addresses and limited card information; we replace the closed account’s email addresses in them and in account-history records. Closing the account does not cancel a subscription for you. Closure is refused until the subscription has ended and the app has received confirmation, and while a checkout, payment or plan change is still being settled. Your legal rights still apply to retained information.

Your rights

Account owners can download a copy of their account data in account settings. The download link works for an hour. After that the prepared copy can no longer be downloaded, and it is deleted by later cleanup, by a new export or when the account is closed. For access, correction, erasure, restriction, portability or an objection, email hello@qrthatlasts.com. We normally respond within one month and explain any lawful extension or exception. You can complain directly to the ICO.