Security and personal data

1. About this page

This page explains which personal data Fixer processes, why we do it, who can see it and how we protect it. It applies to homeowners, tradespeople and visitors to fixerai.app.

It is general information and not legal advice. The full description of how we process personal data is in the privacy policy, and use of the app is governed by the homeowner and tradesperson terms.

2. Who is responsible

Tap Media Group, CVR 43474030, operates Fixer and is the data controller. Contact info@tapmediagroup.com. The address and further details are in the privacy policy.

If you have questions about your personal data, you can always write to us through the contact form.

3. What data we process

Depending on how you use Fixer, we process these types of data:

• Account data: name, email and phone number, and how you sign in.
• Project data: photos of the room, measurements, descriptions, your answers to questions and the address of the job.
• Messages, quotes and reviews you send or receive in the app.
• Tax and deduction records, attachments, household sharing and support material when you use those features.
• For tradespeople: business details such as a CVR number, job purchases, balance, receipts and invoices.
• Payment data: card payments are handled by Stripe. Fixer does not store your card number.
• Technical data: device, app version, crashes and errors. Usage statistics and ad measurement only if you have said yes.
• Messages you send to us through the contact form.

4. Purposes and legal basis

We only use your data for specific purposes. As a starting point, this happens on the following basis under the General Data Protection Regulation (GDPR):

• Providing the app: creating and securing your account, making estimates, passing on jobs, messages and quotes, and giving support. The basis is performance of the contract with you (Article 6(1)(b)).
• Payment and accounting: handling job purchases, balances and invoices. The basis is the contract and our duties under accounting law (Article 6(1)(b) and (c)).
• Security and misuse: logging technical events so we can protect the service against errors, fraud and misuse. The basis is our legitimate interest (Article 6(1)(f)).
• Optional statistics and marketing require the relevant consent (Article 6(1)(a)). App privacy settings and website Cookie settings are separate. Website advertising pixels require a separate advertising choice; statistics alone does not enable them. The Cookie Policy identifies providers and restrictions.

5. Photos, camera and AI

Some camera checks, room scans and recognition run on your phone. Remote AI features can process relevant photos, text and audio. Avoid sensitive information and identifying people the feature does not need.

When you ask for an estimate or a visualisation, or use Fixer Assistant, the photos, text or voice recordings relevant to that feature are sent through Fixer servers to external AI services. These are OpenAI and, for some chat questions, Google Gemini.

Optional training-photo collection starts off. Enabling it can contribute selected uploaded photos and recognition information to improving Fixer’s models. Turn it off to stop new contributions and contact us about existing ones.

An estimate or image made with AI is an aid. It is not a binding quote, a professional assessment or a guarantee of price or outcome, and AI can be wrong.

6. Who can see your data

Tradespeople can see project previews, including photos, area and AI summaries. For website leads, contact fields and your original free text are limited to purchasers. Project conversations share information with participants. Photos can identify a home even when contact fields are hidden.

Public profiles, reviews, posts and active shared links can be seen by other users or on the internet. Household sharing and project invitations have their own participants. Check the audience and revoke unwanted sharing.

Some original project photos are currently retrievable by anyone obtaining their original storage URL, even if the project is not publicly listed. We are preparing a technical correction. See the privacy policy and contact us about confidential photos.

Providers include Supabase, Cloudflare, Stripe, OpenAI, Google, Apple, mapping services, Resend for email, Discord for support and GoHighLevel/LeadConnector for contact workflows. Support messages and relevant context can reach support providers. See the privacy policy for purposes and recipients.

7. Transfers outside the EU/EEA

Some of our suppliers may process data outside the EU/EEA. When that happens, the transfer must have a valid basis under the GDPR, for example a European Commission decision that the country offers an adequate level of protection, or the European Commission’s standard contractual clauses.

8. How we protect your data

We use technical and organisational security measures appropriate to the risk. Among them:

• Sign-in without a password: you sign in with a one-time code by email, or with Apple or Google, so there is no password to guess or leak.
• Encrypted connections between the app, the website and our servers.
• Access rules in the database, so you can only see your own data and what you have been given access to.
• Purchase and participant permissions control contact fields in the relevant project flows.
• Card payments are handled by Stripe, and Fixer does not store card numbers.

No service on the internet can be completely secure, and we cannot guarantee against every form of misuse. If we discover a security breach that may affect your rights, we notify the Danish Data Protection Agency and you, as the GDPR requires.

9. Storage and deletion

We only keep personal data for as long as it is needed for the purpose it was collected for.

Account deletion in the app starts removal or anonymisation and cleanup of related media. Shared records, lawful accounting, disputes, recipient copies and backups can have different retention periods. Deletion does not cancel a work agreement. The privacy policy describes specific workflows; contact us if data remains.

10. Marketing and statistics

You only receive marketing from Fixer if you have said yes yourself. Usage statistics and ad measurement are optional too, and on iPhone ad measurement also requires that you allow tracking.

You can change your choices and withdraw your consent in the app, under your profile. This does not affect processing that took place before you withdrew it.

11. Your rights

Under the GDPR you have, among other things, the right to:

• access the data we process about you,
• have incorrect data corrected,
• have your data deleted,
• have the processing restricted,
• receive your data in a common format (data portability),
• object to processing based on our legitimate interest, and
• withdraw your consent at any time.

Write to us through the contact form and we will help you. We reply within the time limits set by the GDPR. You can also complain to the Danish Data Protection Agency (Datatilsynet) at datatilsynet.dk, or to the authority in your own EU/EEA country.

12. Report a security issue

If you have found a vulnerability or a bug that may affect security in Fixer, write to us through the contact form and choose Other. Describe the issue, where it is and how it can be reproduced.

We ask that you do not access, change or delete other people’s data, do not disrupt the service, and give us reasonable time to fix the issue before you talk about it publicly.

13. Disclaimer

Estimates, measurements and visualisations in Fixer are a guide and are based on photos, answers and prices that may change. They do not replace a binding quote, a survey or a professional assessment from a tradesperson.

A tradesperson quote accepted in the app can create a binding agreement between the homeowner and the business. Fixer does not collect renovation payments. The tradesperson is responsible for the quote and work; Fixer’s own duties and mandatory consumer rights remain. See the terms and marketplace information.

14. Changes

We update this page when our processing of personal data or our security changes. The date at the top shows when the page was last updated. For material changes, we give notice in a suitable way, for example in the app.