Privacy Policy

FixFlow ("we", "our", or "us") operates the FixFlow mobile application and website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service marketplace and rewards platform.

By using FixFlow, you agree to the collection and use of information in accordance with this policy.

Personal Information

• Name — Used to identify you on the platform
• Email address — Used for account management and notifications
• Phone number (optional) — Used for account verification
• Profile photo (optional) — Displayed on your profile
• Wallet address — Used for blockchain-based rewards and authentication

Financial Information

• Purchase history — Service bookings and transaction records
• Token balances — RCN reward token balances and redemption history
• Payment processing — Handled securely by Stripe. We do not store your credit card numbers or payment details.

Usage Information

• Approximate location — Used to find nearby shops (not stored permanently)
• In-app messages — Communications between customers and shops
• Reviews and ratings — Feedback you provide on services
• Search queries — Used to improve service recommendations (processed ephemerally)
• Photos — Profile images and message attachments you upload

Information We Do NOT Collect

• Phone contacts or address book
• Calendar events
• Files or documents from your device
• Browsing history
• Video recordings
• Device IDs or advertising identifiers

• Provide, maintain, and improve our services
• Process service bookings and payments
• Manage your RCN reward token balances
• Enable messaging between customers and service providers
• Send booking confirmations and appointment reminders
• Display nearby shops based on your location
• Facilitate reviews and ratings for services
• Prevent fraud and ensure platform security
• Comply with legal obligations

We do not sell your personal information. We share data only with:

• Stripe — Payment processing (payment details only)
• Thirdweb — Blockchain wallet connection and token transactions
• DigitalOcean — Cloud hosting and image storage
• OpenAI — Voice command audio is sent to OpenAI's Whisper service to convert speech to text when you use the voice command feature
• Service providers (shops) — Your name and booking details when you book a service

We may also disclose information if required by law or to protect the rights, safety, or property of FixFlow, our users, or the public.

• All data is encrypted in transit using HTTPS/TLS
• Passwords and sensitive tokens are encrypted at rest
• JWT-based authentication with automatic token refresh
• Role-based access control (customer, shop, admin)
• Secure message encryption for locked messages (AES-256)

While we implement industry-standard security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

• Account data — Retained while your account is active
• Transaction records — Retained for 7 years for financial compliance
• Messages — Retained while your account is active
• Blockchain records — On-chain data is permanent and cannot be deleted
• Location data — Not stored; used ephemerally for nearby shop search

You have the right to:

• Access — View your personal data through your account profile
• Update — Edit your profile information at any time
• Delete — Request account deletion by emailing us
• Export — Request a copy of your data

To exercise these rights, contact us at Hello@repaircoin.ai

FixFlow is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Our app integrates with the following third-party services, each with their own privacy policies:

• Stripe — Payment processing
• Thirdweb — Blockchain wallet and smart contract interactions
• DigitalOcean Spaces — Image and file storage
• OpenAI (Whisper API) — Speech-to-text transcription for voice commands. Audio retained up to 30 days for abuse-monitoring then deleted; not used to train OpenAI models. Voice commands are optional — a typed equivalent is available for every voice-enabled feature.
• Expo / React Native — App framework and push notifications

For shops that use FixFlow's advertising service, FixFlow helps run and manage online ad campaigns on the shop's own Meta (Facebook & Instagram) advertising account. A shop owner voluntarily connects their Meta account to FixFlow using Facebook Login; the shop's own payment method on Meta funds the ad spend (FixFlow does not pay for or resell ad spend).

Meta data we access (with the shop's authorization)

• Ad account & Page — the shop's ad account ID and Facebook Page they select, so campaigns run in the right place
• Campaign data & insights — campaign/ad-set/ad details and performance metrics (spend, impressions, clicks) to create, manage, and report on ads
• Lead-ad form submissions — when a customer responds to a lead ad, the name/email/phone they submit, so the shop can follow up

How we use and protect it

• Used solely to create, manage, optimize, and report on the shop's ad campaigns and to deliver the leads those ads generate — never sold or used for unrelated purposes
• Access tokens are encrypted at rest; ad campaigns run on the shop's own Meta account and the shop can revoke FixFlow's access at any time (disconnect in FixFlow or remove the app in Meta settings)
• Removing the app, or our deauthorize/data-deletion endpoints, clears the shop's stored Meta tokens and connection from FixFlow
• Our use of Meta Platform Data complies with the Meta Platform Terms and Developer Policies

This section applies to shop/business accounts that opt into advertising; it does not change what we collect from customers using the marketplace.

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy, contact us at: