Zero-Telemetry Air-Gap
Strict offline-only execution isolates payload parsing entirely. Nothing you scan, target, or analyze ever produces an outbound transmission.
OUTBOUND TRAFFICNONE
ZERO-TELEMETRY • ALL SCANS PROCESSED ON-DEVICE
Inspect the payload.
Never execute it.
QRLume is a forensic QR scanner for professionals and security-conscious users. Deconstruct, log, and analyze hostile payloads inside an isolated sandbox — without ever opening a malicious link on your device.
UNIVERSAL — iOS / iPadOS / macOS
EXHIBIT A — THE CORE GRID
Built like an instrument,
not an app.
Shannon Entropy Analysis
Measures the structural randomness of every payload buffer to instantly flag obfuscated scripts, packed data, and exploit signatures.
PAYLOAD ENTROPY5.96 / 8.0
Court-Ready Evidence
Compiles immutable PDF evidence logs with cryptographic SHA256 hashing and chronological metadata for an unbroken chain of custody.
SHA256 ANCHORVERIFIED
EXHIBIT B — DEEP DIVE
Everything under the hood.
Advanced Threat Intelligence
Optionally query real-time malware registries to cross-reference payload footprints and block hostile redirection traps.
OPT-INHex & ASCII Auditing
Visually decode raw payload bytes into interactive hexadecimal and ASCII streams to inspect malicious content safely.
PROiCloud Evidence Sync
Synchronize evidence logs across all your devices through Apple CloudKit with end-to-end encryption.
E2EPhoto Library Forensics
Analyze pre-captured QR codes out-of-process using Apple’s secure photo picker enclaves.
SANDBOXEDAbsolute Privacy Design
No third-party tracking, no ads, no telemetry harvesting frameworks. True zero-knowledge by architecture.
ZERO-KNOWLEDGEInteractive User Guide
Built-in searchable documentation with step-by-step capsules, technical anchors, and color-coded warnings.
BUILT-INEXHIBIT C — INTERFACE EVIDENCE
See it in the field.
FULL DISCLOSURE
Zero telemetry.
Zero asterisks hidden.
QRLume collects zero analytics, zero diagnostics, and zero tracking data. Exactly two features can ever touch a network — both are disclosed here, in plain language.
Cloud syncing
Relies exclusively on Apple’s native, end-to-end encrypted CloudKit enclaves tied to your private Apple ID. Off by default.
Threat Intelligence
When you explicitly enable it in Settings, QRLume queries secure threat databases to cross-reference payload footprints. Transmission is limited to payload hash queries — no user-identifiable data ever leaves your device.
DEPLOYMENT TIERS
One scanner.
Three ways in.
CONSUMER UNLOCK
$4.99 one-time
- Permanent basic-tier unlock
- Safe URL payload decoding
- Hardware Lens & Photo Forensics
- Zero-telemetry architecture
7-DAY FREE TRIAL
FORENSIC PRO — ANNUAL
$19.99 / year
- Everything in Consumer
- Interactive hex & ASCII inspection
- Engine heuristics & entropy reports
- E2E-encrypted evidence log syncing
- Court-ready PDF certificates
FORENSIC PRO — LIFETIME
$49.99 one-time
- All Forensic Pro features, forever
- No subscription, no renewals
- Every future Pro update included
Auto-renewable subscriptions: payment is charged to your Apple account at confirmation of purchase. Subscriptions renew automatically unless auto-renew is turned off at least 24 hours before the end of the current period. Manage or cancel anytime in your App Store account settings.
EXHIBIT D — PLAIN ANSWERS
Questions people actually ask.
Can a QR code hack my phone?
Scanning a code by itself can't infect your phone — the danger is the link or data hidden inside it. QRLume shows you exactly where a code leads without ever opening it, so nothing hostile gets the chance to run.
How do I check if a QR code is safe before opening it?
Scan it with QRLume instead of your camera app. You'll see the decoded destination, an entropy score, and heuristic warnings before deciding to visit anything — the link is never launched automatically.
What is quishing?
Quishing is phishing through QR codes: attackers paste malicious codes over real ones on parking meters, menus, and posters. QRLume defuses the trick by revealing the true destination and flagging hostile patterns before you tap anything.
Does QRLume work offline?
Yes — completely. All scanning and analysis happens on your device by design. The only feature that ever touches the internet is the optional Threat Intelligence lookup, and it stays off until you enable it.
Can I scan a QR code from a screenshot or photo?
Yes. Photo Forensics analyzes any QR code already in your photo library, processed inside Apple's secure picker so the image never leaves your device.
Is QRLume free?
QRLume is a one-time $4.99 purchase for the consumer tier. Investigators can add Forensic Pro — hex inspection, evidence logs, and court-ready PDF reports — for $19.99/year with a 7-day free trial, or $49.99 lifetime.