Privacy policy
QuishGuard.io ("QuishGuard", "we") is a mobile app that checks QR code links before you open them. It is developed as a Final Year Project at the German-Malaysian Institute. This policy explains what we collect, why, and how you can delete your data.
What we collect
- Account details: your name, email address and a securely hashed password.
- Scan data: the links you check, the result (Safe, Suspicious or Malicious), the risk score and the time of the scan.
- Device data: a push notification token, and a random device identifier used to remember a trusted phone so you do not need a login code every time.
We do not store camera images or photos. QR codes are read on your phone, and only the decoded link is sent to our server.
How we use it
- To check whether a link is safe and show you the result and its reasons.
- To keep your scan history so you can review it later.
- To alert you if a link you scanned before is later found to be dangerous.
- To secure your account, for example with email login codes.
We do not sell your data and we do not show advertisements.
Services we use
- VirusTotal (Google) analyses the links you check. Links submitted to VirusTotal may be shared with its security partners.
- Firebase Cloud Messaging (Google) delivers push notifications.
- Supabase hosts our database.
- Resend sends login and verification emails.
- Cloudflare and Akamai Cloud provide our network and servers.
How long we keep it
Your account and scan history are kept until you delete your account. Login codes expire after 10 minutes, and a trusted phone is remembered for 30 days.
Deleting your data
You can delete your account at any time in the app under Profile > Delete Account. This permanently removes your account, scan history, alerts and registered devices. You can also request deletion without the app.
Security
All traffic uses HTTPS. Passwords are hashed and never stored in plain text, and login codes are stored as hashes.
Children
QuishGuard is not directed at children under 13.
Contact
Questions about this policy: [email protected]