Privacy Policy

Effective Date: March 23, 2026 | Last Updated: March 23, 2026

Quardian AI ("Quardian," "we," "our," or "us") operates the Quardian mobile application for iOS and Android and the website at quardian.ai (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

1. Information We Collect

1.1 Information Processed On-Device

Quardian is designed with a privacy-first, on-device architecture. The following data is processed and stored exclusively on your device and is never transmitted to our servers:

QR code and barcode scan content (raw decoded data)
Scan history and threat assessments
SMS message content analyzed by the message filter extension
Photo library images scanned for QR codes
Wi-Fi credentials parsed from QR codes
vCard contact data parsed from QR codes
HIPAA compliance data, audit logs, and PHI detection results
Product barcode lookup results and nutritional data
Threat watchlist entries and re-validation history

1.2 Information Transmitted to Third Parties

Certain features require communication with external services. When these features are used, limited data is transmitted:

SSL Certificate Verification: When you scan a QR code containing a URL, Quardian performs an HTTPS HEAD request to the target URL to verify its SSL certificate. This transmits the URL to the target server. No data is sent to Quardian's servers.
Google Safe Browsing API: If enabled, URLs from scanned QR codes may be checked against Google's Safe Browsing service. This is governed by Google's Privacy Policy.
Product Lookup APIs: When you scan a product barcode, the barcode number is sent to Open Food Facts, UPC Item DB, and/or Open Beauty Facts to retrieve product information. No personal data is transmitted.

1.3 Information We Do Not Collect

We do not collect, store, or transmit:

Personal identification information (name, email, phone number)
Location data or GPS coordinates
Device identifiers or advertising IDs
Camera images or photos (only decoded QR/barcode data is retained)
Browsing history outside of the Quardian Safe Browser
Analytics, telemetry, or usage tracking data
Any data to third-party advertisers

2. How We Use Information

All data processed by Quardian is used exclusively to provide the security scanning and threat assessment features of the Service, including:

Validating QR code and barcode content for threats
Performing SSL certificate verification
Maintaining your scan history and threat watchlist
Providing continuous post-scan threat monitoring and re-validation
Filtering SMS messages for malicious URLs
Detecting Protected Health Information in HIPAA mode
Displaying threat status on home screen widgets
Analyzing product ingredients for health and safety concerns

3. Data Storage and Security

All scan data, threat assessments, watchlist entries, and audit logs are stored locally on your device using the operating system's secure storage mechanisms (iOS Keychain/UserDefaults with App Group, Android SharedPreferences/encrypted storage).

When HIPAA Compliance mode is enabled, data is additionally protected by:

Biometric authentication (Face ID, Touch ID, or fingerprint) required for access
Configurable auto-lock timer (1–30 minutes)
Configurable data retention policies (7–365 days auto-purge)
Immutable audit trail logging all data access events
Device security verification (passcode, biometric availability, root/jailbreak detection)

4. Data Sharing and Disclosure

We do not sell, trade, rent, or otherwise share your personal information with third parties. We do not have access to any data stored on your device.

We may disclose information only if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

5. Third-Party Services

The Service may interact with the following third-party services, each governed by their own privacy policies:

Google Safe Browsing API — Google Privacy Policy
Open Food Facts — Open Food Facts Terms
Open Beauty Facts — Open Beauty Facts Terms
UPC Item DB — UPC Item DB Privacy Policy
Apple App Store / Google Play Store — for app distribution and in-app purchases

6. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. Since Quardian does not collect personal information from any users, this concern is inherently mitigated by our architecture.

7. Your Rights

Because all data is stored locally on your device, you have complete control over your data at all times. You may:

View all stored data through the Scan History and Threat Dashboard screens
Export your data via the CSV export feature
Delete individual scan records, threat entries, or clear all data
Uninstall the application to remove all stored data permanently

For users in the European Economic Area (EEA), United Kingdom, or other jurisdictions with data protection laws, your rights under GDPR or equivalent legislation are fully preserved by our on-device-only data architecture.

8. International Data Transfers

Quardian does not transfer your personal data internationally. All data remains on your device. Third-party API requests (SSL checks, Safe Browsing, product lookups) are transmitted directly from your device to the respective service providers.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: privacy@quardian.ai
Website: https://quardian.ai