Privacy Policy

Last updated: 25 July 2026

FixedUp (“we”, “us”, “our”) operates the FixedUp mobile app and website at fixedup.app. This policy explains what data we collect, why we collect it, and your rights.

1. Who we are

FixedUp is a field-service app for tradespeople and small trade businesses, operated for the U.S. market. Contact: hello@fixedup.app

2. Data we collect

When you use FixedUp, we may collect:

• Account data: name, email address, password (stored securely by our auth provider) or Google/Apple sign-in identity, company name, country, currency, trade type, team size.
• Beta waitlist data: first name, Google Account email, trade type, Android eligibility, consent, and signup date when you apply to test FixedUp.
• Business data: jobs, clients, addresses, phone numbers, schedules, quotes, invoices, notes, and team member details you enter.
• Job site photos: photos you or your team attach to a job are uploaded to private cloud storage (Supabase Storage) and are only viewable by people with access to that job.
• Expense receipts: receipt photos you attach to an expense are stored as image data on the expense record itself, viewable only by people with access to that job.
• Voice input: if you use voice job creation, audio is processed to generate job details (see Third parties below).
• Usage analytics: product usage events (e.g. "job created", "quote sent") tied to your account ID — not your name or email — so we can see what features are used. No job, client, or business content is included in these events.
• Crash/error reports: if the app hits an unexpected error, the error message, stack trace, and app environment (not your job or client data) are sent so we can fix it.
• Device data: push notification tokens, app version, and basic diagnostic logs needed to run the service.
• Payment status: we receive subscription status from Google Play / Apple App Store via RevenueCat. We do not store your full card details.
• Card payments: if you accept card deposits from clients, Stripe (via Stripe Connect) processes those payments directly — we store payment status and amounts, never full card numbers.

3. How we use data

• Provide and improve the app (jobs, scheduling, quotes, team features).
• Authenticate users and secure accounts.
• Send service-related messages (e.g. password reset, team invites you initiate).
• Manage the closed beta and send eligible applicants an invitation or important beta updates.
• Process subscriptions and enforce plan limits (e.g. free tier job limits).
• Send push notifications you enable (e.g. job assignments).
• Comply with legal obligations and prevent abuse.

4. Third-party services

We use trusted providers to run FixedUp. They process data only as needed to provide their service:

• Supabase — authentication, database, and file storage hosting (job photos, business data).
• OpenAI — voice transcription and job parsing when you use voice job creation. Audio is sent to OpenAI's API for processing and is not used by OpenAI to train their models under their API terms.
• Stripe (Stripe Connect) — processes card deposit payments when you or your clients pay by card. Stripe handles all card details directly; we never see or store full card numbers.
• PostHog — product usage analytics (which features are used, how often), keyed to your account ID rather than your name or email.
• Sentry — crash and JavaScript error reporting, so we can find and fix bugs.
• Google — Maps/Places (address lookup), Google Sign-In, Google Play billing.
• Apple — Sign in with Apple (iOS).
• RevenueCat — subscription management (Google Play / App Store).
• Expo — push notification delivery.

Each provider has its own privacy policy. We choose providers that meet reasonable security standards.

5. SMS and client communication

If you send SMS or messages to your clients through FixedUp, you are responsible for having permission to contact those clients and for complying with local marketing and telecom rules.

6. Data retention

We keep your data, including job photos and expense receipts, while your account is active. Beta waitlist data is kept while the beta is running and for launch follow-up, unless you ask us to delete it. If you delete your account, we delete your business data (jobs, quotes, photos, receipts) as described on our account deletion page — if you're a company owner this includes your company's records; if you're a worker on someone else's company, only your personal login/profile is deleted and the company's job history is kept for the owner. We may retain limited records (e.g. payment records held by Stripe) where required for legal, tax, or fraud-prevention reasons.

7. Security

We use industry-standard measures including encrypted connections (HTTPS/TLS), access controls, and row-level security on our database. No method of transmission over the internet is 100% secure.

8. Your rights (U.S.)

If you are a U.S. resident, you may have rights under applicable state laws (including California’s CCPA/CPRA) to know what personal information we collect, request deletion or correction, and opt out of certain sharing. We do not sell your personal information.

To exercise these rights, email hello@fixedup.app. We will respond within a reasonable time.

9. Children

FixedUp is a business app and is not intended for children under 13. We do not knowingly collect data from children under 13 (COPPA).

10. International transfers

Your data may be processed in countries other than your own (e.g. EU, US) where our service providers operate. We rely on appropriate safeguards where required by law.

11. Changes

We may update this policy from time to time. We will post the new version on this page and update the “Last updated” date.

12. Contact

Questions about privacy: hello@fixedup.app