Privacy Policy

Who We Are

For company details and contact information, see our Impressum. This policy covers both our marketing website and the Smart QR application. We do not sell your data and do not engage in behavioral advertising.

Website Visitors

Our marketing website is hosted on the Cloudflare network. We use Simple Analytics to understand how visitors use our website. Simple Analytics does not collect personal data, and does not track visitors across websites.

We only use essential cookies necessary for the website to function. No marketing or tracking cookies are used.

Account Information

When you create an account, we collect:

• Your name
• Your email address
• Your company details

This information is stored on servers operated in the EU.

Payment Information

Payments are processed by Stripe. We do not store your credit card details. Stripe handles all payment data directly and is certified as a PCI Level 1 Service Provider.

Customer Data You Collect

When you use Smart QR to issue wallet passes for the tourists who scan your boards, the following data may be stored:

• Anonymous device tokens used to deliver pass updates
• Pass usage data (scans, redemptions, timestamps)
• Coarse location data — which board a pass was added at

You are the data controller for any end-customer data you choose to collect. We process this data on your behalf as a data processor. Smart QR is designed so that tourists are not asked for an email or phone number — passes are tokenized.

Push Notifications

To deliver updates to wallet passes, we use Apple Push Notification service (APNs) and Google Firebase Cloud Messaging (FCM). These services receive device tokens to deliver notifications but do not have access to pass content.

Email Communication

• Transactional emails (account verification, password resets, receipts)
• Product updates and tips (you can unsubscribe anytime)

Error Tracking

We use a third-party service to monitor our application for errors and to improve reliability. Error reports may include technical information about your browser and the actions that led to an error.

Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data, except where we need to retain certain information for legal or accounting purposes.

Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data
• Export your data
• Object to processing
• Withdraw consent for marketing emails

Contact us at hello@smartqr.travel to exercise these rights.

Complaints

If you have concerns about how we handle your data, please contact us first. You also have the right to lodge a complaint with a data protection authority.

Changes

We may update this policy from time to time. Changes will be posted on this page with an updated date.