Privacy
Your details, and who sees them.
QR Rescue is run by Wepronex, 901–908, 9th Floor, Fortune Tower, Shahrah-e-Faisal, Karachi. This page explains what we keep when you use QR Rescue, what happens when someone scans your sticker, and what you can ask us to do. Last updated 25 October 2026.
What we keep about you
- Your account: your name, mobile number (and whether it is on WhatsApp), city, delivery address and email. Your password is kept by our sign-in service in scrambled form; our staff never see it.
- Your vehicles: type, make, model, colour and number plate.
- Your emergency contacts: up to three people, with their name, how they are related to you and their mobile number. Please tell them you have added them: they get an SMS and a call if someone reports an emergency with your sticker.
- Medical details, only if you add them: blood group, allergies, conditions and medications.
- Your orders: what you ordered, the amount, how you paid, the payment receipt you upload, and the courier and tracking number for delivery. Receipts are stored privately; only our staff can open them.
When someone scans your sticker
The person who scans it sees:
- your first name
- your vehicle: type, colour, make, model and number plate
- the sticker code and emergency helplines
- your blood group, allergies, conditions and medications, but only if you have switched on sharing your medical details (it is off until you turn it on)
They never see your phone number or your family's numbers.
If they ask for help, we send each of your emergency contacts an SMS in Urdu (in English if the Urdu message cannot be sent) with your first name, your vehicle and a Google Maps link to the place, and we call them with a recorded message. If the location arrives late, we send it in a second SMS.
We record each scan: the time, what was done (viewed, help asked for, medical details opened), the location the scanning phone shared if its owner allowed it, the type of phone and browser, and a scrambled code made from its internet address, not the address itself. We also keep a record of every SMS and call: the text, which contact it went to and whether it was delivered. These records let us follow up an emergency and stop misuse.
Who can see your details
- You, in your account.
- Our staff, each only as far as their work needs: support staff see customers, emergency contacts, vehicles, medical details, scans and messages; finance staff see orders and payment receipts, but not your contacts or medical details; managers see everything.
- VeevoTech, our SMS and call provider, receives your contacts' numbers and the message text so it can deliver them.
- The courier who delivers your sticker receives your name, number and address.
Shops that sell our stickers and companies that sponsor them do not get your details from us; a sponsor's logo may appear on your scan page. We do not sell your details, and we do not use them for advertising.
Where it is kept
| Who | What | Where |
|---|---|---|
| Supabase | Your account, vehicles, emergency contacts, medical details, orders, payment receipts, scans and message records | Mumbai, India |
| Vercel | Runs this website | Mumbai, India |
| VeevoTech | Sends the emergency SMS and the recorded calls to your contacts | Pakistan |
| Vercel Web Analytics | Visit counts, as totals (see below) | Vercel, a United States company |
| YouTube | The short videos on our home page. Google receives your device's internet address when their pictures load; a video itself loads only when you press play, in YouTube's privacy-enhanced mode | Google, a United States company |
Cookies and visit counts
When you sign in, a cookie keeps you signed in. On a scan page, your browser remembers for that visit that the page was opened, so one look is not counted twice. We set no advertising cookies.
We count visits with Vercel Web Analytics, the counting built into the service that runs this site. It sets no cookies, and Vercel says it does not store internet addresses. For each page view it records the page, the site you came from, your country and city, and your type of device, browser and operating system. We also count taps on our WhatsApp links, sign-ups and sticker orders (with the amount only). Your account and our staff pages are never counted, a scan page is counted without its sticker code, and nothing you type is sent. We see totals, never a person.
How long we keep it
We keep your account, vehicles, contacts and orders while your account is open. Records of scans, messages and payments are kept after that, because they may be needed if an emergency or a payment is ever questioned. When you change or remove something, we keep a record of the earlier version in our security log.
Your choices
- Change your details, vehicles, emergency contacts and medical details in your account at any time, and switch medical sharing off.
- Ask us what we hold about you, or to correct it.
- Ask us to close your account. Once it is closed, your sticker no longer shows your details or alerts anyone.
Write to hello@qrrescue.com or message us on WhatsApp at +92 333 3887667.
Security
Each customer can see only their own records: the database itself enforces this. Payment receipts are stored privately. Our staff never see or set your password; if you forget it, we send you a link to choose a new one. Scan pages are kept out of search engines, and we limit how often one sticker can raise an alert and how many times a shop sticker's PIN can be tried.
Changes
The date at the top shows when this page last changed. If we change anything that matters, we will say what changed.