Privacy Policy
Last updated: [DATE — fill in before launch]
QR Wishes ("we", "us") builds personalized digital cards. This page explains what we collect when you use qrwishes.app, why, and how long we keep it. Replace bracketed placeholders with your actual details before publishing.
What we collect
- Card content you enter: recipient name, sender name, your message, an optional date, and any photo you upload.
- Contact details you give us: phone number and/or email, if you provide them for account access or to be notified when a card is ready.
- Payment-related references: a UPI transaction/UTR number if you enter one, used only to match your payment to your order. We do not collect or store your UPI PIN, bank credentials, or card numbers — payment happens entirely inside your own UPI app.
- Basic usage data: which experience type you built, and whether a finished card was opened via its link or its QR code.
How we store it
Card data, drafts, and uploaded photos are stored with Supabase, our database and storage provider. Finished cards are stored so their link and QR code keep working indefinitely; draft data for cards that are never paid for may be deleted periodically.
How we use it
Solely to build and deliver the card you're making, confirm your payment, respond to support requests, and improve the product. We do not sell your data to third parties, and we don't use card content for advertising.
Who can see a finished card
A finished card is viewable by anyone who has its exact link or QR code — that's the point, it's a gift meant to be opened. Cards are not listed publicly or searchable, and their IDs are not sequential or guessable.
Your choices
You can ask us to delete a card, a draft, or your contact details at any time via [SUPPORT EMAIL] or our Telegram support link. See our Grievance page for how we handle complaints and requests.