Privacy Policy - 码迹 MajiScan

Welcome to 码迹 (MajiScan). Your privacy matters to us. This policy explains how the app handles your information. Please also read the Terms of Service.

1. Data Collection

This app itself does NOT collect, transmit, or sell any personal data (the integrated Google ML Kit SDK sends anonymous diagnostic reports, described in section 4):

No account, no sign-up, and no server of our own;
No ad SDKs, no analytics SDKs, no cross-app tracking identifiers;
Scan history, favorites and settings are stored only in the app's local storage on your device.

2. Data Usage & Storage

Scan records (including decoded content) stay on your device and are used for history viewing, search and export;
Any data you export or share is fully under your control; exported files are handed off through the system share sheet to the target app you choose;
Deleting the app or clearing its data removes all local data; you can also clear history anytime in Settings > Data.

3. Permissions

Camera: used to scan QR codes and barcodes;
Photo Library: used to decode barcodes from images and to save generated QR images to your photo library;
Biometrics (fingerprint / Face ID): used ONLY when you voluntarily enable "Privacy Lock", to unlock viewing your scan history and trash and to authorize exporting it. Verification is handled entirely by the system; the app never stores biometric information;
Wi-Fi (Android): used only when you scan a Wi-Fi configuration code and tap connect; on Android 10+ the system confirmation dialog is enough and no location permission is needed, on Android 9 and below a temporary location grant is required to look up nearby networks;
Vibration: local haptic feedback on a successful scan, no data involved;
Network: used only when you actively tap a link to open a web page (in-app or system browser). The interface font (Noto Sans SC) and the barcode / text-recognition models are all bundled inside the install package, so the app itself never contacts a server for fonts or any other purpose. The one integrated component that does reach out is Google ML Kit, which sends anonymous technical information for diagnostics (see section 4); it never includes image content, your scan records or your identity.

4. Third-Party Components

This app integrates no advertising, analytics or push SDKs. The following components ship inside the install package to deliver on-device features; apart from web pages you choose to open, your images and recognized content are processed on your device and are not sent to their providers (ML Kit's anonymous diagnostic telemetry is the SDK's own behavior, see the entry below):

Google ML Kit barcode scanning and text recognition: the models are bundled in the app and recognition runs entirely on-device, so no image or decoded content is ever sent to a server; however, the SDK does transmit anonymous technical information over HTTPS to Google for diagnostics and abuse prevention (device identifier, SDK and app version, and during recognition the zoom level and bounding-box coordinates), and Google provides no switch to disable it. Apart from the web pages you choose to open, it is the only integrated component in this app that initiates network traffic; its collection scope is defined by Google's own "ML Kit Android SDK data disclosure" page;
System camera frameworks (Android CameraX / iOS AVFoundation): viewfinder and capture;
System web content engines (Android WebView / iOS WKWebView): they load only the pages you deliberately open. The address and page content are received by the site you visit under its own policy; the app keeps no browsing log and uploads nothing;
Photo library read (photo_manager): only the images you select for decoding a code;
Photo library write (MediaStore / system album APIs): only the QR image you tap "Save to album" for;
System share sheet: only the content you actively choose to share;
System biometrics (Android BiometricPrompt / iOS Face ID and Touch ID): verification happens inside the system; the app neither stores nor can read any biometric feature;
System Wi-Fi APIs: invoked only when you tap connect on a Wi-Fi code;
Noto Sans SC interface font (SIL Open Font License 1.1): bundled in the package; no font server is ever contacted.

All remaining dependencies are purely local computation components (such as the zxing-cpp barcode decoding engine bundled in the package) or thin wrappers around the system capabilities above, and none of them touches personal data. The full open-source license texts are available in the app under Settings > Open-source licenses.

5. Children's Privacy

This app is suitable for all ages and collects no information that could identify you personally (such as your name, contact details or account), and it contains no content unsuitable for any age. The only data that ever leaves your device is the anonymous diagnostic technical information from Google ML Kit described in section 4, which does not contain anything that could identify you personally.

6. Policy Updates

Any updates to this policy will be reflected on the app store listing, and the copy bundled in the app under Settings > About is updated together with the app; older builds need to be updated before they show the latest text.

7. Your Rights

Access and correction: scan history, favorites and settings live only on your device, so you can review them in the app at any time; for a record you no longer want, delete it or move it to the trash (trashed records are kept for up to 30 days);
Deletion: you can clear your history under Settings > Data, and cleared items can still be restored from the trash; to remove everything for good, clear the app's data or uninstall the app, which deletes all local data including the trash;
Withdrawing consent: clearing the app's data or uninstalling the app withdraws the consent you gave before; after a fresh install, consent is requested again on first launch.

8. Contact Us

The developer of the App and the handler of personal information is 深圳市中工存储与运算技术有限公司 (Unified Social Credit Code 91440300069284398M). If you have any questions, or would like to send feedback and feature suggestions, email lookapu@live.cn — we read everything and reply as soon as we can.