Privacy Policy — Fixera: Repair by Photo

Last updated: October 18, 2026

Fixera ("the app") is developed by Krillo ("we", "us"). This policy explains what data the app handles. The short version: the photos you take of something broken are sent to our server and on to the service that produces the diagnosis, and they are not stored anywhere afterwards. Your repair history stays on your phone. Everything else that leaves the app is what is needed to run subscriptions, anonymous usage statistics, and measuring the ads we buy for Fixera on Facebook and Instagram.

Photos of the fault

When you ask for a diagnosis, your photos — up to three per request — are sent over an encrypted connection to our own server, the Krillo scanning worker krillo-ai-scan, and from there to OpenRouter, which routes them to the vision model that identifies the item, describes what is wrong with it and suggests what to do. The photos are used only to produce that answer.

We do not store your photos. Our worker holds them in memory for the few seconds a diagnosis takes and never writes them to a database, a file or a log — what our logs record is that a diagnosis happened, how many photos it contained and what it cost us, never the images themselves. Photos are not used to train anything on our side, and we do not build a profile from them. Processing by the model provider is governed by their own terms (OpenRouter, Google).

If you type a short description of the problem, it travels with the photos for the same few seconds and is treated exactly the same way. Please do not put personal details into it — the app does not need them.

The photos and the diagnosis are kept on your phone in your repair history, so you can come back to an earlier repair. They are deleted when you delete the entry or uninstall the app. We have no copy to delete.

What stays on your device

Your repair history — the photos you took, what the app identified, what it said was wrong and the cost ranges it showed — is stored on your phone only. So are your settings and the count of free repairs you have used.

The app has no account and no sign-up. It does not use GPS or ask for your location, and it does not access your contacts, files or microphone.

Usage statistics

To see which features people actually use, Fixera sends anonymous usage events to PostHog, an analytics service. An event records that something happened in the app — such as that a diagnosis was started, how many photos it used, how long it took, whether it succeeded, whether the answer was "you can do this yourself" or "call a professional", what broad kind of item it was (for example "appliance" or "car"), and whether the subscription screen was shown — together with the app version, your device platform, the language the app is displayed in, when the app was installed, and the same anonymous ID that is used for subscriptions. These examples are illustrative rather than a complete list.

If you arrived from an ad, Google Play passes the app the campaign tag of that ad, and the app stores it with your usage statistics. It tells us which campaign brought you to Fixera. For ads on Facebook and Instagram the tag is an encrypted record of the ad click added by Meta; we keep only its first 120 characters and cannot read it. It is not an advertising identifier.

What never goes into statistics or to Meta: the photos themselves, your description of the problem, the text of the diagnosis, the safety warning you were shown, and the cost of your particular repair. In other words we record that a diagnosis happened and roughly what kind of thing it was — not the pictures and not the answer.

We do not collect your name, email, Google account or phone number. Our analytics service discards your IP address rather than storing it, so we do not derive your location from it. Usage statistics are processed on servers in the European Union and are never sold. To have your statistics — and, if you bought Fixera Pro, your purchase record — deleted, see Delete your data.

Measuring our ads (Meta)

Fixera shows no ads. We do buy ads for Fixera on Facebook and Instagram, and to learn which of them bring people who actually use the app, the app includes the Meta SDK (Facebook SDK). It sends to Meta Platforms:

• your device's advertising ID (the resettable identifier Android provides for advertising), a random identifier the SDK creates for this installation and, if the Facebook app is installed on your phone, the identifier that app keeps for measuring ads;
• that the app was installed and opened, and which ad or store page the installation came from;
• that a diagnosis was completed, and only that fact: no photos, no description, no diagnosis and no kind of item;
• that a free trial started, and that a subscription was bought, with its price and currency;
• technical details the SDK adds to every event: app version, device model, Android version, language and region setting, time zone, mobile carrier, screen size, number of processor cores and storage space.

Like any service the app connects to, Meta also receives your IP address. From the IP address and the time zone Meta can tell roughly where you are. Meta uses this data to report to us how our ads perform and to show our ads to people likely to use the app, and it may link it to your Facebook or Instagram account under Meta's Privacy Policy. The anonymous ID we use for statistics and subscriptions is not sent to Meta, and neither is your repair history.

You can limit this: delete or reset your advertising ID in Android Settings → Privacy → Ads (once it is deleted, the SDK receives no advertising ID), and review or clear what apps share with Meta under "Your activity off Meta technologies" in your Facebook or Instagram settings. We cannot delete Meta's copy for you, because it is not linked to any identifier we hold.

Subscription data

Subscriptions are sold and processed by Google Play. We never see or store your payment details.

To show the correct prices and to know whether your subscription is active, the app uses RevenueCat, a subscription-management service. It receives a randomly generated anonymous app user ID — the same one used for the statistics above, so there is one anonymous identifier, not two — your Google Play purchase receipt and subscription status, and basic technical details such as app version, device model, OS version, country and language. We use this only to unlock Fixera Pro on your device, to restore purchases, and to see anonymous sales numbers. See RevenueCat's privacy policy and Google's privacy policy.

Subscription events — when a trial starts, converts, renews or is cancelled — are also passed from RevenueCat to our analytics service under the same anonymous ID, so we can see how many people the app converts. They carry the product, the price and the store, never your payment details.

Keeping the service fair

The app generates a random installation identifier so we can apply a daily diagnosis limit fairly and stop other people from running up our costs through our scanning service. It is not linked to your identity and disappears when you uninstall the app.

Permissions

• Camera — to photograph the thing that broke. The camera is used only while you are taking those photos, and the app does not record audio or video.
• Photos — if you pick an existing picture instead of taking a new one, the system photo picker hands that single picture to the app. The app gets no standing access to your gallery.
• Internet / network state — to send a diagnosis request, to load subscription prices and check subscription status, to send anonymous usage statistics, and to send the ad-measurement events described above to Meta.
• Advertising ID: read by the Meta SDK to measure our ads, as described above. You can delete or reset it in Android settings.
• Billing — to let Google Play process a subscription.

Third-party services

The app includes RevenueCat and Google Play Billing for subscriptions, PostHog for the anonymous statistics described above, and the Meta SDK to measure the ads we buy for Fixera. Diagnoses are processed through our own worker krillo-ai-scan and OpenRouter. The app shows no ads. The app's Play Store data-safety label will always match what the app actually does.

Advice is advice

What Fixera shows is produced by an automated model from your photos, and it can be wrong. Where a repair looks dangerous — mains electricity, gas, water heaters, brakes, structural work, roofs, asbestos, large areas of mould — the app deliberately gives you no repair steps at all and tells you to call a qualified professional. Cost figures are ranges and estimates, never a quote. See the Terms of Use.

Purchases and cancellation

Your first repairs are free. More diagnoses are available with Fixera Pro: a weekly plan that starts with a 3-day free trial, or a yearly plan. You are not charged until the trial ends. Subscriptions renew automatically until cancelled. You can cancel anytime in Google Play → Subscriptions, or from Settings inside the app, which opens that page. Uninstalling the app does not cancel the subscription — cancel it in Google Play. We never charge you outside Google Play, and cancellation always works.

Children

Fixera is a general-audience utility and is not directed at children. The app has no account, the usage statistics described above are anonymous, and the advertising ID goes to Meta only as described in "Measuring our ads".

Contact

Questions about this policy: [email protected]

Changes

We will post any changes to this policy at this same URL with an updated date.