Privacy Notice

Who operates FixIt

APPTASTIC TECH

Operator address: Marsz. Józefa Piłsudskiego 74 / 320, 50-020 Wrocław, Poland

Privacy contact: finance@apptastic.mobi

Information FixIt processes

FixIt mobile applications, web application, website, and related services process the information described in this notice.

• Identity and access: a verified email address when supplied by Clerk, Clerk identity mapping, an internal user identifier, installation identifier, app platform/version, and secure hashed claim credentials.
• Profile: home type, country and language codes, system category, and any optional device brand or year provided through a supported profile interface.
• Photo Diagnostics: the selected image, its media type and byte size, the diagnostic result, safety escalation status, repair history, and usage/quota records.
• Live Repair: camera and microphone media during the session, session status, messages/transcript content created during the session, summaries, and related safety events.
• Operations and security: request IDs, event logs, internal session/install references, provider status and error types, coarse network-derived HMAC fingerprints, rate-limit counters, and short-lived concurrency leases.
• Existing billing records: entitlement and Stripe customer/subscription references may remain for existing subscribers. New paid checkout is disabled in FREE V1.

How information is used

FixIt uses this information to authenticate users, preserve and synchronize profile and repair history, provide photo and live guidance, enforce FREE usage limits, deliver local reminders, prevent abuse, secure the service, troubleshoot failures, and honor deletion requests.

Source review found no advertising SDK or cross-app advertising tracking implementation. This is not a certification and must be rechecked when SDKs or product behavior change.

Images, camera, and microphone

Photo bytes are read in memory by the FixIt API and sent to Google Gemini for analysis. FixIt does not persist the submitted image bytes in its application database or file storage, but it stores the structured diagnostic result and usage record. Google’s provider-side handling is governed by its terms and cannot be represented as immediate deletion by FixIt.

Live camera and microphone media is transported through LiveKit and processed by the Gemini live assistant. FixIt does not configure LiveKit recording. Text transcript/message content and summaries may be stored in the session record as described in the retention summary.

Service providers

Active FREE V1 providers are Clerk for authentication, Google/Gemini for AI processing, LiveKit for real-time media transport, Railway for application/database/cache hosting and operational logs, and Google or Apple when their sign-in option is chosen.

Stripe remains present for existing entitlement records, signed webhook processing, and billing management for existing subscribers. It is not available for new FREE V1 purchases.

Retention and deletion

See the Data Retention Summary for category-specific details.

See Delete Account for the deletion steps, scope, limited retained records, and backup implications.

Guests can delete data associated with their unclaimed installation. Authenticated users can request deletion of their FixIt account, linked installations, profile, repair history, quota records, and mapped Clerk account. Unfinished Live sessions, or a non-terminal existing Stripe subscription, may need resolution before deletion can complete. FixIt account deletion does not cancel an external subscription.

Account-deletion tombstones are retained for up to 24 months after account deletion for security, deletion-integrity, and abuse-prevention purposes. Tombstones contain only a non-reversible HMAC-derived identifier, provider namespace, and deletion timestamp, and are not used to restore deleted account data. Operational/provider logs may remain under operational or provider policy. FixIt therefore does not promise that every trace held in infrastructure or provider logs is erased immediately.

Security and international processing

FixIt uses access controls, signed authentication tokens, hashed claim credentials, rate limits, and transport encryption provided by HTTPS/WSS endpoints. No system is guaranteed secure.

Personal data may be processed by service providers located outside the European Economic Area, including in the United States. Where required by applicable data protection law, APPTASTIC TECH relies on appropriate safeguards for such transfers, including adequacy decisions, the EU-U.S. Data Privacy Framework where applicable, and the European Commission’s Standard Contractual Clauses. Our service providers may also use approved subprocessors in other jurisdictions subject to applicable contractual and legal safeguards.

Children and changes

FixIt is repair guidance and is not designed for children to independently perform hazardous work. FixIt is intended for users aged 18 and over. We may update this policy when the product or providers change and will identify the current effective date.

Your privacy choices and rights

You can review and update profile information, delete eligible repair history, delete eligible guest data, or request account-wide deletion through FixIt controls. Depending on applicable law, you may also have rights to request access, correction, deletion, restriction, objection, or portability of personal data.

To ask a privacy question or exercise an applicable right, contact finance@apptastic.mobi.