Privacy Policy

1. Controller and scope

Fixer is operated by [OWNER TO CONFIRM: registered legal entity name], [OWNER TO CONFIRM: registered address and CVR/VAT number]. That entity is the controller for the processing described here unless a specific activity says otherwise. Privacy contact: [OWNER TO CONFIRM: privacy email and postal contact]. This notice covers homeowner and tradesperson accounts, public profiles, projects, leads, messages, community content, AI tools, payments and fixerai.app.

A tradesperson who receives a homeowner lead may become an independent controller for its own contact, quote and service activities. [OWNER TO CONFIRM: exact controller relationship and trader notice delivered to homeowners].

2. Data we receive

We receive account identifiers, names, email addresses, phone numbers, authentication details, addresses, city and location data, and tradesperson business details. Homeowners and tradespeople provide project descriptions, answers, photos, videos, room images, voice recordings, transcripts, messages, quotations, reviews, support requests, public posts and share links. Some material can reveal personal information about other people, so submit it only when you have the right to do so.

We also process lead purchase records, wallet balances, top-ups, invoices, card metadata provided by Stripe, consent choices, device and install identifiers, app interaction, crash and performance events, attribution data and website requests. [OWNER TO CONFIRM: complete production data inventory, including location precision, provider SDKs and whether raw card data ever reaches Fixer].

Some data may come from a tradesperson, homeowner, Apple or Google sign-in, a payment provider, mapping service or another user rather than directly from you. [OWNER TO CONFIRM: exact indirect sources, whether each field is required, and consequences if it is not provided].

Room measurement: on iPhones and iPads with a LiDAR sensor, the camera measures the room automatically while you take project photos (Apple RoomPlan). We keep the geometry only: floor and wall area, ceiling height, perimeter, the size of windows and doors, recognised fixtures such as a bathtub or cabinets, and a simple 3D model built from those shapes. It contains no images or colours. The measurements are used for your estimate and are shown to you as questions you can confirm or correct. When you request quotes, the tradespeople on your project can see the confirmed measurements and the 3D model. They are deleted with your project or account, and the measurements are included in your data export.

3. Purposes and lawful bases

We use account and contact data to create and secure accounts, verify details, provide projects, messages, quotes and support, and connect homeowners with tradespeople. The proposed basis is performance of the user contract under GDPR Article 6(1)(b), or steps requested before a contract, where processing is genuinely necessary. Lead disclosure, public profiles, reviews and shared content need a separate purpose assessment. [OWNER TO CONFIRM: purpose-by-purpose Article 6 bases and any Article 9 assessment].

We use transaction data to administer lead purchases, wallet credits, invoices, refunds and accounting. The proposed bases are contract and legal obligation where applicable. [OWNER TO CONFIRM: accounting retention law and periods]. We use necessary technical logs for security and abuse prevention on a documented legitimate-interest assessment under Article 6(1)(f), subject to objection rights.

Optional product analytics and marketing attribution operate only after the relevant in-app choice. Where personal-data consent is the appropriate basis, it is Article 6(1)(a); IDFA use also depends on Apple tracking permission. [OWNER TO CONFIRM: consent records and any website analytics basis].

Technical diagnostics: to find and fix errors that break the app, the app automatically sends reports of crashes, freezes, unexpected closes, failed requests and error messages, with the app version, device model, operating system, network type and the screens and requests just before the error. Without your consent to optional analytics, these reports contain no device identifier (only your user ID if you are signed in), the app stores nothing on your device for this beyond what is needed to deliver a pending error report (such as whether the app closed unexpectedly), and no other usage data is collected. This is strictly necessary to provide and secure the app you asked for, and we process it under our legitimate interest in keeping the app secure and working (Article 6(1)(f)). If you accept optional analytics, we also record loading times and signs that a screen is not working (for example repeated taps or a screen closed right away), linked to a random install ID stored on your device; withdrawing that consent deletes the ID and stops this data. Reports never include your messages, photos, addresses or contact details, and text that looks like an email address or phone number is removed on your device before sending. If you shake your phone to report a problem, we receive your comment and, if you leave it switched on, a screenshot in which personal details are blurred on your device. Diagnostics are stored in our own database (Supabase, EU), shared with our team in an internal chat tool (Discord) and may be analysed with an AI tool (Anthropic) to find the cause of an error. Detailed records and the link to your user ID are deleted after 90 days and loading times after 45 days; counts without personal data may be kept longer. You can object at any time by contacting us.

Public partner pages currently count page views and may record campaign parameters and the referring page. [OWNER TO CONFIRM: website analytics basis, retention and live cookie or similar-technology inventory]. If optional browser storage or access is introduced, we will provide the required information and choice before it is used.

4. AI features

Fixer uses third-party AI services to generate estimates, answer chat questions, transcribe voice, visualize rooms and assist with posts. Text, answers, room measurements, photos, room images, audio or post material relevant to the feature may be sent through Fixer infrastructure to OpenAI and, for some chat requests, Google Gemini. The particular provider and data sent should be shown before the feature is used. [OWNER TO CONFIRM: current model routing, provider contracts, retention and training settings].

An AI estimate or image is an aid, not a professional quote, survey, safety assessment or promise of price or outcome. AI output can be inaccurate. A person should review it before relying on it or publishing it. [OWNER TO CONFIRM: whether AI content is used for training, human review or automated decisions with legal or similarly significant effects].

5. Sharing and public visibility

When a homeowner requests contact or a tradesperson buys a lead, Fixer may disclose the project and the contact details shown at that stage to eligible tradespeople. [OWNER TO CONFIRM: exact recipients, timing, lead buyer cap and homeowner notice]. Published business pages, reviews, community posts and active share links may be visible to other users or on the open internet. Their audience must be clear before publication, and share links should be revocable where the feature allows it.

Providers indicated by current code include Supabase for authentication, database, storage and functions; Stripe for payments; OpenAI and Google for AI; Apple for sign-in, distribution, push and attribution; mapping and location providers; and messaging or email providers. [OWNER TO CONFIRM: full provider and subprocessor list, legal roles, regions, SMS, email, maps, crash reporting and analytics suppliers]. We share data when legally required and with professional advisers under appropriate duties.

6. Transfers outside the EEA

Some suppliers may process data outside the EEA. Before any such transfer, Fixer must identify the destination and use a valid GDPR Chapter V mechanism, such as an applicable adequacy decision or Standard Contractual Clauses with any required supplementary measures. [OWNER TO CONFIRM: supplier locations, transfer mechanisms, data protection agreements and transfer impact assessments]. A supplier name alone does not establish a lawful transfer.

7. Storage and deletion

We keep identifiable data only for documented periods linked to each purpose. [OWNER TO CONFIRM: production retention schedule for every category, backup expiry, support and finance records, and legal exceptions]. Different periods may apply to accounts, projects, media, messages, analytics, leads and payment records. We will give the exact periods or criteria in the final notice.

You can request account deletion in the app. We remove or anonymise data unless a specific legal duty, dispute or valid claim requires limited retention. [OWNER TO CONFIRM: verified end-to-end deletion behavior and any retention exceptions]. Public material and copies made by recipients may not disappear immediately after account deletion.

8. Your rights and choices

Subject to GDPR conditions, you may request access, correction, erasure, restriction and portability, object to processing based on legitimate interests, and withdraw consent at any time without affecting earlier lawful processing. Change analytics and marketing choices in Profile, Terms and privacy. Contact [OWNER TO CONFIRM: privacy email] for other requests. You may complain to Datatilsynet or your local EEA data protection authority.

[OWNER TO CONFIRM: whether a data protection officer is appointed and contact details]. We will answer requests within the periods required by GDPR and explain any lawful reason for refusing a request.

We do not make a solely automated decision that has legal or similarly significant effects on you unless [OWNER TO CONFIRM: assessment of automated lead pricing, ranking, AI scoring and any Article 22 exceptions] establishes and explains a lawful process. Ask for human review where applicable.

9. Children, security and changes

[OWNER TO CONFIRM: minimum age and age-check approach]. If Fixer is restricted to adults, people under 18 must not create an account or submit personal data. We apply access controls and other security measures appropriate to the risk, but [OWNER TO CONFIRM: security and breach contact process]. We will show a new effective date and give appropriate notice when material processing changes.