Privacy Policy

Last updated: October 2026

This Privacy Policy explains how Asli Scan ("Asli Scan", "we", "us", "our") collects, uses, shares and protects information when you use the Asli Scan mobile application and this website (together, the "Service"). Product verification in Asli Scan is provided by the Qrauthix product-authentication platform, operated by us. By using the Service you agree to this policy.

1. Information We Collect

a) Information you do not need to give us

Asli Scan does not require an account. We do not ask for your name, email address, phone number or contacts to scan or verify a code.

b) Device information

When the app is first opened it registers with our servers using a randomly generated app-specific device identifier, the platform (Android), the app version, and a device integrity check provided by Google Play. This lets us issue a short-lived session to the app and block modified or fake copies of the app. We do not collect your IMEI, phone number, or advertising ID for this purpose.

c) Product verification data

When you scan a product-authentication QR code, we record:

the code identifier that was scanned and the result (for example verified, inactive, expired, already used, not recognised);
the date and time of the scan;
technical information such as IP address, user agent and the device identifier described above;
your approximate location, only if you have granted location permission.

d) Ordinary QR codes

Ordinary QR codes (website links, Wi-Fi, contacts, text, etc.) are decoded on your device. Their content is not sent to our servers. If the code contains a link and you choose to open it, the destination website's own privacy policy applies.

e) Camera

The camera is used only to read QR codes in real time. We do not store or upload camera images or video.

f) Website

This website does not require sign-in and does not set advertising cookies. If analytics is enabled, we use first-party analytics cookies to understand aggregate traffic (pages viewed, referring site, approximate region).

2. App Permissions

Permission	Why we ask	Required?
Camera	To scan QR codes.	Yes, to scan
Location (approximate)	To attach approximate location to product verifications, which helps detect copied codes.	No — optional
Internet	To verify product codes with our servers.	Yes, to verify

You can withdraw any permission at any time in your phone's Settings. Scanning and verification still work without location.

3. How We Use Information

To verify whether a scanned product is genuine and show you the result;
To detect and prevent counterfeiting, fraud and abuse — for example, the same code scanned in many distant places, or automated attempts to guess codes;
To give the brand that issued a code aggregate analytics about scans of its own products;
To keep the Service secure, fix problems and improve it;
To comply with legal obligations.

We do not use your data for advertising and we do not build advertising profiles.

4. How We Share Information

We do not sell personal information. We share it only:

With the brand that issued the code you scanned — verification records for that brand's own products (result, time, approximate location if granted). Brands cannot see scans of other brands' products.
With service providers who host and operate the Service for us (for example cloud hosting, and Google Play for app integrity checks), under confidentiality obligations.
When required by law or to protect the rights, safety and property of our users, brands or the public.

5. Data Retention

Product verification records: 365 days, then permanently deleted automatically.
Security and audit logs: up to 730 days.
Server request logs: up to 90 days.

6. Deleting Your Data

Because Asli Scan has no account, uninstalling the app removes the app's device identifier and all data stored on your phone. To ask us to delete verification records linked to your device before the retention period ends, email pst280519@gmail.com with the subject "Data deletion request". We will respond within 30 days. Aggregate statistics that no longer identify your device may be kept.

7. Security

All traffic between the app and our servers is encrypted with HTTPS. Sessions are short-lived and tied to a verified app installation. Access to data is restricted, and each brand's data is isolated from every other brand's. No method of transmission or storage is 100% secure, but we work to protect your information.

8. Your Rights

Depending on where you live — including under India's Digital Personal Data Protection Act, 2023, the GDPR, or similar laws — you may have the right to access, correct, delete or restrict the use of your personal data, and to withdraw consent. Contact us at pst280519@gmail.com to exercise these rights.

9. Children

The Service is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal data, contact us and we will delete it.

10. International Transfers

Your information may be stored and processed in countries other than yours. Where required, we use appropriate safeguards for such transfers.

11. Third-Party Links

QR codes can link to third-party websites. We are not responsible for their content or privacy practices. Genuine product verification pages always open on qrauthix.com.

12. Changes to This Policy

We may update this policy from time to time. We will change the "Last updated" date above and, for significant changes, notify you in the app.

13. Contact Us

Questions or requests about privacy: pst280519@gmail.com