Last updated: September 13, 2026
1. Who we are
Qora: QR & Barcode Scanner (“Qora”) is provided by Kalestial Teknoloji Limited Şirketi (“Kalestial,” “we,” “us”). We are responsible for the personal information processed for the purposes described in this policy. Contact us at hello@kalestial.com with privacy questions or requests.
This policy covers the Qora iOS app and our Qora information pages hosted on Google Sites.
2. QR codes, photos, and information on your device
Qora processes camera frames and selected photos on your device to recognize supported codes. We do not upload your camera feed, selected photos, scanned code contents, or information entered to create QR codes to Kalestial or RevenueCat.
Your scan and creation history is stored locally in the app. Records can include the code contents, code type, creation or scan date, and related information. Depending on the code, this may include website addresses, Wi-Fi network names and passwords, phone numbers, email addresses, or messages. Only store or share information you are entitled to use.
Qora also stores onboarding preferences and a count of successful free scans locally. Deleting a history record does not reset this count.
Qora does not require a Qora account and does not provide its own cloud history or cross-device history synchronization. App data may be included in backups made by your operating system or device backup services, according to your settings. Images you save to Photos may be synchronized by your photo service.
3. Subscriptions and RevenueCat
Apple handles App Store payments. We do not receive your payment card details or Apple Account password.
We use RevenueCat to validate purchases, restore purchases, determine premium access, and understand subscription performance. It processes purchase and subscription records, transaction identifiers, receipts or related store transaction data, subscription status, and a generated app user identifier. The SDK also processes technical context such as app and operating system versions, locale, and interaction times needed to operate the subscription service. Network connections expose your IP address to the service receiving them.
The generated identifier is not a Qora login. We do not supply RevenueCat with your QR contents, Wi-Fi passwords, contact list, name, or email address. Subscription service connections may occur when you open the app, even before you purchase.
We use RevenueCat to provide purchase validation, subscription management, and premium entitlement status. Apple also processes information under its own policies. More information is available in RevenueCat’s privacy information (https://www.revenuecat.com/privacy) and Apple’s privacy policy (https://www.apple.com/legal/privacy/).
4. Support communications
If you email us, we receive your email address, your message, and any attachments or other information you choose to send. We use these to respond, investigate problems, and maintain appropriate support records. Please avoid including passwords, payment card details, or sensitive QR contents. Our email service provider processes these communications to deliver and store email.
5. Permissions and actions you control
Camera access allows live scanning. Selecting a photo allows Qora to read the selected image. Saving an image to Photos may require permission to add photos. You can manage permissions in iOS Settings; restricting a permission may prevent the associated feature from working.
Copying content places it on the system clipboard. Saving or sharing creates copies outside Qora. Recipients and apps you select may retain those copies under their own practices.
If you choose Google or Amazon search, the barcode value is included in the search request sent to that service. If you open a scanned link or another external action, the destination website or app receives the information needed for that action and may collect additional information. Qora does not automatically open scanned links.
6. Advertising and our Google Sites pages
The current app does not include third-party advertising or advertising-tracking SDKs. We do not sell personal information or share it for cross-context behavioral advertising. Subscription reporting through RevenueCat is used to operate and understand subscriptions.
Google hosts our information pages. When you visit them, Google may process browser, device, network, and cookie information under its privacy policy (https://policies.google.com/privacy). Visiting a policy page is separate from scanning a code locally in Qora.
7. Purposes and legal bases
Where a legal basis is required, we process information as necessary to provide requested app and subscription services and respond to related support requests; to meet applicable legal obligations; and, where permitted, for our legitimate interests in preventing abuse, resolving problems, and understanding subscription performance. Where processing requires consent, we obtain it and you may withdraw it without affecting earlier lawful processing. Device permissions do not constitute blanket consent to unrelated processing.
8. Sharing and international processing
Information is made available to the service providers described above only for the relevant service, and to destinations or recipients you choose. We may also disclose information we hold when required by law or when legally necessary to protect rights or address fraud. A business transfer may involve relevant records, subject to applicable privacy protections.
Providers may process information outside your country, including in the United States. Applicable international-transfer requirements and safeguards depend on the provider and the governing law. Contact us for information about safeguards relevant to your data.
9. Retention and deletion
Local history remains until you delete it or remove the app’s data. Removing the app generally removes its local container, but offloading the app, restoring a backup, and copies in Photos, shared apps, or backups may preserve information. We cannot remotely access or delete history stored only on your device.
Subscription and support records are retained for as long as reasonably necessary to provide the relevant service, handle restoration and disputes, meet legal obligations, and maintain security. Retention depends on the type of record and applicable obligations; records no longer needed should be deleted or de-identified. Apple may retain its own transaction records independently.
Deleting history, uninstalling Qora, or requesting data deletion does not cancel an Apple subscription. Manage cancellation through Apple’s subscription settings.
10. Your rights
Depending on the law that applies to you, you may have rights to obtain information about processing, access or correct your data, request deletion or restriction, object to processing, obtain a portable copy, and withdraw consent. You may also complain to the relevant data protection authority. These rights can be subject to legal exceptions. Applicable rights under Türkiye’s Personal Data Protection Law No. 6698 include learning whether your data is processed, its purposes and recipients, and requesting correction or deletion where the legal conditions are met.
Send requests to hello@kalestial.com. We may ask for proportionate information to verify the request and locate relevant records, but never your Apple Account password or full payment card details. Because Qora has no login, we may need additional information to locate a subscription record. We respond within applicable legal time limits and do not penalize you for exercising your rights.
11. Security and children
We use the app’s device storage protections and secure network connections for subscription services. No system can guarantee absolute security. Protect access to your device, and consider the sensitivity of a code before saving or sharing it.
Qora is a general-purpose utility and is not directed at children. If you believe a child has supplied personal information to us in circumstances requiring parental authorization, contact us so we can investigate and take appropriate action.
12. Changes and contact
We may update this policy when the app or our practices change. The date above identifies the latest revision. Where required, we will provide additional notice or obtain consent before introducing new processing.
Kalestial Teknoloji Limited Şirketi
Email: hello@kalestial.com