MJ QR Studio

Effective Date: 28 May 2026

Developer: Mejuvante Private Limited

Country: India

Email:mejuvante-it@mejuvante.com

Website: https://mejuvante.ai

Play Store Account: MeJuvante GmbH (Germany)

1. Who We Are

MJ QR Studio (India Edition) is a mobile application published and operated in India by Mejuvante Private Limited, a private limited company incorporated under the Companies Act, 2013.

Data Fiduciary (per DPDP Act 2023):

Mejuvante Private Limited

India Head Office: 5th Floor, Mantri Commercio Tower A, MeJuvante Private Limited, Marathahalli Sarjapur Outer Ring Rd, Kariyammana Agrahara, Bellandur, Bengaluru, Karnataka 560103

Mejuvante Private Limited is the “Data Fiduciary” under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the “Body Corporate” under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“IT Rules 2011”).

This Privacy Policy explains what personal data we collect, how we use it, and your rights when you use MJ QR Studio in India.

2. Group Entity Notice

MJ QR Studio is part of a global product offering. The application is published globally by our affiliate MeJuvante GmbH (Germany).

• For users in India: the Data Fiduciary is Mejuvante Private Limited, and this Privacy Policy applies.

• For users in the EEA and other regions: the Data Controller is MeJuvante GmbH, and the global Privacy Policy applies (https://mejuvante.ai/mj-qr-studio/privacy).

Some technical infrastructure and processing may be shared between the two entities under written data sharing agreements.

3. About MJ QR Studio

MJ QR Studio is a mobile application built using the Capacitor framework. It runs natively on Android devices.

Features include:

• URL QR code generation with automatic HTTPS handling

• Text QR code generation for notes, instructions, and sharing

• Contact QR code (vCard) generation with name, phone, email, organization, and website

• Real-time QR preview

• High-quality PNG download to your device

• Save QR codes directly to your device

• Instant sharing via any app or platform

4. Information We Collect

4.1 Information You Provide Voluntarily

When you use the app, you may enter:

• Website URLs

• Text content

• Contact details (name, phone number, email, organization, website)

This information is processed locally on your device to generate the QR code. It is not transmitted to our servers and is not stored by Mejuvante Private Limited.

4.2 Account Information

If you create an account or log in, we process:

• Email address

• Authentication credentials (managed by Firebase Authentication)

• Email verification status

4.3 Information Collected Automatically

Through Firebase services, the following may be collected automatically:

• Device type and operating system version

• App version and build number

• IP address (used for security, abuse prevention, and rate limiting)

• Authentication session tokens

• Approximate geographic region

4.4 Sensitive Personal Data or Information (SPDI)

Under IT Rules 2011, SPDI includes passwords, financial information, health records, sexual orientation, medical records, and biometric data.

MJ QR Studio does NOT collect any SPDI. We only collect basic personal data necessary for authentication.

5. Purpose and Legal Basis

We process your personal data for the following purposes under the lawful grounds permitted by the DPDP Act:

Account creation and authentication: Consent and contractual necessity

Email verification: Consent and contractual necessity

Security, fraud prevention, abuse detection: Legitimate use – functioning of service

Service improvement: Consent (for anonymous diagnostics)

Legal and regulatory compliance: Compliance with law

Consent Notice

By creating an account, you provide free, specific, informed, unconditional, and unambiguous consent for the processing described in this policy, as required under Section 6 of the DPDP Act.

You may withdraw consent at any time. The process is described in Section 14.

6. How We Use Your Information

We use your information to:

• Create and manage your user account

• Authenticate you securely on each login

• Verify your email address

• Provide and improve the QR generation service

• Prevent fraud, abuse, and unauthorized access

• Comply with Indian legal obligations

We do NOT use your information for:

• Advertising or marketing profiling

• Selling, renting, or trading to third parties

• Automated decision-making with legal effect

7. Third-Party Services (Data Processors)

We engage the following service providers as Data Processors under DPDP and IT Rules 2011:

7.1 Firebase Authentication (Google LLC, USA)

Users can sign in using one of the following methods:

• Email and password login

• Google Sign-In (OAuth via Firebase Authentication)

• Purpose: Secure login, signup, and email verification

• Data shared: Email address, authentication credentials, IP address, device identifiers

• Firebase Privacy: https://firebase.google.com/support/privacy

• Google Privacy: https://policies.google.com/privacy

Note: If additional Firebase services such as Analytics, Crashlytics, or Cloud Messaging are enabled in future versions of the app, this Privacy Policy will be updated to disclose them.

8. Cross-Border Data Transfer

Firebase services are operated by Google LLC, headquartered in the United States. Therefore, your personal data may be transferred to and processed in the United States.

Under Section 16 of the DPDP Act, the Central Government may restrict cross-border transfer to specific countries by notification. As of the effective date of this policy, the United States is not on any restricted list.

We protect your data during international transfer through:

• Standard contractual clauses with Google

• Encryption in transit and at rest

• Technical and organizational safeguards equivalent to Indian standards

You may request a copy of the relevant safeguards by emailing mejuvanteindia@gmail.com.

9. Data Storage and Retention

QR content (URLs, text, vCards): Stored on your device only — not stored by us

Account email and credentials: Stored in Firebase (USA, EU, India regions) — retained until account deletion + 30 days

Authentication logs: Stored in Firebase — retained for 30 days

Support emails: Stored in our email system — retained for 2 years

Legal records (tax, abuse): Stored by Mejuvante Private Limited — retained as required by Indian law

After account deletion, personal data is permanently removed within 30 days, except where retention is required under Indian law (e.g., the Income Tax Act, the Companies Act).

10. Data Security – Reasonable Security Practices

In compliance with Rule 8 of the IT Rules 2011, Mejuvante Private Limited follows Reasonable Security Practices and Procedures, including:

• ISO/IEC 27001-aligned security controls

• HTTPS/TLS encryption for all network communication

• Firebase industry-standard authentication infrastructure

• Local-only QR generation (QR content never leaves your device)

• Access controls on a need-to-know basis

• Regular security reviews and audits of providers

• Documented information security policies

While we apply reasonable measures, no system is 100% secure. We encourage you to use a strong, unique password.

11. Permissions Required

MJ QR Studio requests the following permissions on your device:

Internet Access: Authentication, email verification, app updates

Storage / Photos: Save downloaded PNG QR codes to your device

Network State: Detect online or offline status

We do not request access to your contacts, camera, microphone, precise location, or any other sensitive sensor.

12. Your Rights as a Data Principal

Under the DPDP Act 2023, you (as a "Data Principal") have the following rights:

Right to Access Information (Section 11): Get a summary of your personal data and processing activities

Right to Correction and Erasure (Section 12): Correct, complete, update, or erase your personal data

Right to Grievance Redressal (Section 13): Raise a complaint with our Grievance Officer

Right to Nominate (Section 14): Nominate another person to exercise your rights in case of death or incapacity

Right to Withdraw Consent (Section 6(4)): Withdraw your consent at any time, free of charge

Under IT Rules 2011, you also have the right to:

• Review your personal information

• Request correction of inaccurate personal information

• Opt out of providing personal information

To exercise any right, please email mejuvanteindia@gmail.com. We will respond within 30 days.

13. EU / UK / Swiss Data Privacy (GDPR Compliance)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we comply with all applicable data protection laws including the General Data Protection Regulation (GDPR).

Your rights include:

• Right to access — request a copy of your personal data

• Right to rectification — request correction of inaccurate data

• Right to erasure — request deletion of your personal data

• Right to data portability — request transfer of your data

• Right to restrict processing — request limitation of data processing

• Right to object — object to processing of your data

To exercise any of these rights, please contact us at mejuvante-it@mejuvante.com. We comply with the EU-U.S., UK, and Swiss Data Privacy Frameworks as required.

14. Withdrawal of Consent and Account Deletion

14.1 Withdrawing Consent

You may withdraw consent at any time by:

mejuvante-it@mejuvante.com with the subject "Consent Withdrawal"

Withdrawal does not affect the lawfulness of processing before withdrawal.

14.2 How to Request Account Deletion

There is no in-app account deletion option. To delete your account, use one of the following methods:

• Email: Send a request to mejuvante-it@mejuvante.com with the subject "Account Deletion Request" from your registered email address.

We will process your request and permanently delete your account within 30 days.

14.3 What Gets Deleted

• Your email address and account profile

• Authentication credentials

• Login history and session logs

Some data may be retained where required by Indian law (e.g., tax, fraud investigation, court orders) for the legally required period.

15. App Set ID Usage

MJ QR Studio may use the Android App Set ID for the following essential purposes only:

• Analytics — to understand app usage patterns and improve the app

• Fraud prevention — to detect and prevent fraudulent activity

The App Set ID is NOT used for ads personalization or ads measurement. The App Set ID will not be connected to any Android identifiers or personal data for advertising purposes.

16. Cookies and Local Storage

MJ QR Studio uses Capacitor’s native WebView, which may store the following locally on your device:

• Authentication session tokens – to keep you logged in

• App preferences – theme, language, last used settings

These are stored only on your device and are not shared with third parties. They are removed when you log out or uninstall the app.

We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

17. User Responsibility and Misuse Disclaimer

MJ QR Studio is a tool designed for lawful and ethical use only.

You are solely responsible for the content you encode into QR codes using this application.

Mejuvante Private Limited is NOT responsible for:

• Any misuse of QR codes generated through the application

• QR codes that contain harmful, illegal, fraudulent, or malicious content

• Any damages, losses, or legal consequences resulting from misuse of generated QR codes

• Any actions taken by third parties who scan QR codes created by users

By using MJ QR Studio, you agree:

• To create QR codes only for lawful purposes

• Not to encode harmful, illegal, or misleading content

• To accept full responsibility for all QR codes you generate

• That Mejuvante Private Limited bears no liability for any misuse or consequences arising from user-generated QR codes

You also agree not to use the app in violation of the Information Technology Act, 2000 or any other applicable Indian law.

18. Children's Privacy

Under the DPDP Act 2023, a child is defined as any individual under 18 years of age.

MJ QR Studio is not intended for users under 18. We do not knowingly collect personal data from children.

If we discover that we have collected personal data from a child without verifiable parental consent, we will delete it without undue delay.

Parents or guardians may contact mejuvante-it@mejuvante.com to request deletion of such data.

We do not engage in tracking, behavioral monitoring, or targeted advertising directed at children, as prohibited under Section 9 of the DPDP Act.

19. Persons with Disabilities

For users who are persons with disabilities and whose data is processed with the consent of a lawful guardian, the same protections under Section 9 of the DPDP Act apply.

20. Grievance Officer (Mandatory under DPDP Act & IT Rules 2011)

In accordance with Section 8(10) of the DPDP Act 2023 and Rule 5(9) of the IT Rules 2011, we have appointed a Grievance Officer to address your concerns.

Grievance Officer:

Name: Krishna

Designation: IT Product Manager

Company: Mejuvante Private Limited

India Head Office: 5th Floor, Mantri Commercio Tower A, MeJuvante Private Limited, Marathahalli Sarjapur Outer Ring Rd, Kariyammana Agrahara, Bellandur, Bengaluru, Karnataka 560103

Email: mejuvante-it@mejuvante.com

Response time: Within 7 working days of receiving the grievance

21. Data Protection Board of India

If you are not satisfied with the response from our Grievance Officer, you have the right to lodge a complaint with the Data Protection Board of India established under the DPDP Act 2023.

Details and procedures will be made available by the Board through its official channels.

22. Data Breach Notification

In the event of a personal data breach, Mejuvante Private Limited will:

• Notify the Data Protection Board of India without undue delay

• Notify affected Data Principals in clear, plain language

• Describe the nature of the breach, potential consequences, and mitigation steps

• Comply with all reporting obligations under the DPDP Act and CERT-In Directions, 2022

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes in applicable Indian law

• New features or services

• Operational improvements

Material changes will be notified through:

• An in-app notification on your next login

• An email to your registered address (if you have an account)

• A revised "Last Updated" date at the top of this policy

Continued use of the app after such updates constitutes acceptance of the revised Privacy Policy.

24. Governing Law and Jurisdiction

This Privacy Policy is governed by the laws of the Republic of India.

Any disputes shall be subject to the exclusive jurisdiction of the competent courts in Bangalore, Karnataka, India, without prejudice to mandatory consumer protection laws applicable to you.

25. Contact Us

Company: Mejuvante Private Limited

India Head Office: 5th Floor, Mantri Commercio Tower A, MeJuvante Private Limited, Marathahalli Sarjapur Outer Ring Rd, Kariyammana Agrahara, Bellandur, Bengaluru, Karnataka 560103

Email: mejuvante-it@mejuvante.com

Website: https://mejuvante.ai

Subject Line: Privacy Policy Inquiry / Account Deletion Request

Mejuvante Private Limited complies with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, the IT Rules 2011, Google Play Store requirements, GDPR, COPPA, and all other applicable Indian data protection laws.

MJ QR Studio — Mejuvante Private Limited — mejuvante-it@mejuvante.com — https://mejuvante.ai