Privacy Policy

FIXCAR LLC (“FIXCAR”, “we”, “us”) is the controller responsible for the personal data described in this policy. We are a company registered in the United States, and you can reach us at:

This policy applies to the FIXCAR mobile application, our web service, and this website at getfixcar.com (together, the “Services”).

We collect the following categories of data, and only where a feature needs it:

• Account data. The email address you register with, a display name if you provide one, and authentication data needed to keep your account secure. We do not store your password in readable form.
• Vehicle data. Information reported by a vehicle you connect — such as diagnostic trouble codes, sensor and control unit readings, the vehicle identification number, make, model and year, and the diagnostic sessions you run. This is the core of what the Services exist to interpret.
• Usage data. How the app and web service are used: features opened, actions taken, crash reports, and diagnostic logs from the software itself. We use this to fix defects and to understand which features earn their place.
• Device data. Device model, operating system version, app version, language, and a device or installation identifier. This helps us support the range of devices our users actually have.
• Location data. Only where a feature you use requires it, and only with your permission. You can withdraw that permission at any time in your device settings; features that depend on it will stop working, but the rest of the Services will not.
• Communications. The contents of messages you send us — including through the contact form on this website — and the email address you sent them from, so that we can reply.

We do not knowingly collect special categories of data (such as health, biometric or political data), and we do not ask for them.

We use personal data for these purposes and no others:

• To provide the Services: reading vehicle data, interpreting it, and presenting the results to you.
• To create and maintain your account, and to keep it secure.
• To keep a history of your diagnostic sessions and vehicles, so past results stay available to you.
• To respond to your support requests and other messages.
• To detect, investigate and prevent fraud, abuse and security incidents.
• To fix defects and improve the Services, using aggregated or de-identified data where it will do the job.
• To meet legal, tax and regulatory obligations that apply to us.

We do not sell personal data. We do not share personal data with third parties for their own advertising, and we do not use your vehicle data to target advertising to you.

Where data protection law requires us to identify a legal basis, we rely on the following: performance of our contract with you, where processing is needed to deliver the Services you asked for; our legitimate interests in securing, supporting and improving the Services, where those interests are not overridden by your rights; your consent, for optional processing such as location access, which you can withdraw at any time; and compliance with legal obligations where the law requires us to process or retain data.

We use a small number of service providers to operate the Services. They process data only on our instructions, under contract, and only to the extent needed to perform their function. The categories are:

• Cloud hosting and storage providers, which host the Services and the data in them.
• Analytics and crash reporting providers, which help us identify defects and understand feature usage.
• Communication and email delivery providers, which allow us to reply to you and send service messages.
• Payment processors, where a paid feature applies. Card details are handled by the processor and are not stored by us.

We may also disclose data where we are legally required to do so — for example, in response to a valid legal request from a public authority — or where it is necessary to protect our rights, safety, or those of our users. If the company is ever involved in a merger, acquisition or sale of assets, personal data may be transferred as part of that transaction, and we will notify affected users before it becomes subject to a different privacy policy.

Because we are established in the United States, data we hold may be processed there or in other countries where our providers operate. Where we transfer personal data out of a jurisdiction that restricts such transfers, we rely on an appropriate legal transfer mechanism.

We keep personal data for as long as your account is active and for as long as we need it for the purposes described above. When you delete your account, we delete or irreversibly anonymise the personal data associated with it, other than data we are required to keep — for example, transaction records retained to meet tax obligations, or records needed to establish or defend a legal claim. Backup copies are removed on our regular backup rotation cycle.

De-identified and aggregated data, which can no longer be linked to you, may be retained to support ongoing product and engineering work.

Depending on where you live, you may have some or all of the following rights over your personal data:

• Access — to ask what personal data we hold about you and get a copy of it.
• Correction — to have inaccurate or incomplete data put right.
• Deletion — to ask us to erase your personal data, including by deleting your account.
• Portability — to receive your data in a structured, machine-readable format.
• Objection and restriction — to object to, or ask us to limit, certain processing.
• Withdrawal of consent — to withdraw any consent you previously gave, without affecting processing already carried out.
• Non-discrimination — to exercise any of these rights without being treated worse for it.

To exercise any of these rights, email us at contacto@getfixcar.com. We will respond within the period required by applicable law. We may need to verify your identity first — this is to make sure we are not disclosing your data to someone else. If you believe we have handled your data improperly, you also have the right to complain to your local data protection authority.

We use technical and organisational measures appropriate to the risk, including encryption of data in transit, access controls that limit who inside the company can reach personal data, and monitoring for unauthorised access. No system is perfectly secure, and we will not claim otherwise. If a breach affects your personal data and the law requires us to notify you, we will.

The Services are not directed to children. We do not knowingly collect personal data from children under 13 years of age (or the equivalent minimum age in your jurisdiction, where it is higher). If you believe a child has provided us with personal data, contact us at contacto@getfixcar.com and we will delete it.

You can request deletion of your account and the personal data associated with it at any time, whether or not you still have the app installed. Our account deletion page explains what gets deleted, what we are required to keep, and how long the process takes.

This website uses only what it needs to function and to load its assets. We do not use advertising cookies or third-party tracking pixels on getfixcar.com. Within the web service, we use cookies or equivalent local storage to keep you signed in and to remember your preferences. Where analytics are used, they are configured to minimise the personal data involved.

We may update this policy as the Services change or as the law requires. When we make a material change, we will update the date at the top of this page and, where the change significantly affects you, notify you through the Services or by email. Any change here will be reflected in our app store privacy declarations at the same time.

For any privacy question or request — including access, correction, deletion, or a complaint — contact us at contacto@getfixcar.com, or write to us at the registered address in section 1.