Privacy Policy — Fixera: Repair by Photo

Last updated: September 8, 2026

Fixera ("the app") is developed by Krillo ("we", "us"). This policy explains what data the app handles. The short version: the photos you take of something broken are sent to our server and on to the service that produces the diagnosis, and they are not stored anywhere afterwards. Your repair history stays on your phone. Everything else that leaves the app is what is needed to run subscriptions and anonymous usage statistics.

Photos of the fault

When you ask for a diagnosis, your photos — up to three per request — are sent over an encrypted connection to our own server, the Krillo scanning worker krillo-ai-scan, and from there to OpenRouter, which routes them to the vision model that identifies the item, describes what is wrong with it and suggests what to do. The photos are used only to produce that answer.

We do not store your photos. Our worker holds them in memory for the few seconds a diagnosis takes and never writes them to a database, a file or a log — what our logs record is that a diagnosis happened, how many photos it contained and what it cost us, never the images themselves. Photos are not used to train anything on our side, and we do not build a profile from them. Processing by the model provider is governed by their own terms (OpenRouter, Google).

If you type a short description of the problem, it travels with the photos for the same few seconds and is treated exactly the same way. Please do not put personal details into it — the app does not need them.

The photos and the diagnosis are kept on your phone in your repair history, so you can come back to an earlier repair. They are deleted when you delete the entry or uninstall the app. We have no copy to delete.

What stays on your device

Your repair history — the photos you took, what the app identified, what it said was wrong and the cost ranges it showed — is stored on your phone only. So are your settings and the count of free repairs you have used.

The app has no account and no sign-up, does not track your location, and does not access your contacts, files or microphone.

Usage statistics

To see which features people actually use, Fixera sends anonymous usage events to PostHog, an analytics service. An event records that something happened in the app — such as that a diagnosis was started, how many photos it used, how long it took, whether it succeeded, whether the answer was "you can do this yourself" or "call a professional", what broad kind of item it was (for example "appliance" or "car"), and whether the subscription screen was shown — together with the app version, your device platform, the language the app is displayed in, when the app was installed, and the same anonymous ID that is used for subscriptions. These examples are illustrative rather than a complete list.

If you arrived from an ad, Google Play passes the app the campaign tag we used when we bought that ad, and the app stores it with your usage statistics. It tells us which campaign brought you to Fixera. It is not an advertising identifier and it says nothing about you personally.

What never goes into statistics: the photos themselves, your description of the problem, the text of the diagnosis, the safety warning you were shown, and the cost of your particular repair. In other words we record that a diagnosis happened and roughly what kind of thing it was — not the pictures and not the answer.

We do not collect your name, email, Google account or phone number, and we do not use an advertising identifier — Fixera contains no ads. Your IP address is discarded rather than stored, so we do not derive your location from it. Statistics are processed on servers in the European Union and are never sold or shared with advertisers. To have your statistics — and, if you bought Fixera Pro, your purchase record — deleted, see Delete your data.

Subscription data

Subscriptions are sold and processed by Google Play. We never see or store your payment details.

To show the correct prices and to know whether your subscription is active, the app uses RevenueCat, a subscription-management service. It receives a randomly generated anonymous app user ID — the same one used for the statistics above, so there is one anonymous identifier, not two — your Google Play purchase receipt and subscription status, and basic technical details such as app version, device model, OS version, country and language. We use this only to unlock Fixera Pro on your device, to restore purchases, and to see anonymous sales numbers. See RevenueCat's privacy policy and Google's privacy policy.

Subscription events — when a trial starts, converts, renews or is cancelled — are also passed from RevenueCat to our analytics service under the same anonymous ID, so we can see how many people the app converts. They carry the product, the price and the store, never your payment details.

Keeping the service fair

The app generates a random installation identifier so we can apply a daily diagnosis limit fairly and stop other people from running up our costs through our scanning service. It is not linked to your identity and disappears when you uninstall the app.

Permissions

• Camera — to photograph the thing that broke. The camera is used only while you are taking those photos, and the app does not record audio or video.
• Photos — if you pick an existing picture instead of taking a new one, the system photo picker hands that single picture to the app. The app gets no standing access to your gallery.
• Internet / network state — to send a diagnosis request, to load subscription prices and check subscription status, and to send anonymous usage statistics.
• Billing — to let Google Play process a subscription.

Third-party services

The app includes RevenueCat and Google Play Billing for subscriptions and PostHog for the anonymous statistics described above. Diagnoses are processed through our own worker krillo-ai-scan and OpenRouter. The app contains no advertising SDKs. The app's Play Store data-safety label will always match what the app actually does.

Advice is advice

What Fixera shows is produced by an automated model from your photos, and it can be wrong. Where a repair looks dangerous — mains electricity, gas, water heaters, brakes, structural work, roofs, asbestos, large areas of mould — the app deliberately gives you no repair steps at all and tells you to call a qualified professional. Cost figures are ranges and estimates, never a quote. See the Terms of Use.

Purchases and cancellation

Your first repairs are free. Unlimited diagnoses are available with Fixera Pro: a weekly plan that starts with a 3-day free trial, or a yearly plan. You are not charged until the trial ends. Subscriptions renew automatically until cancelled. You can cancel anytime in Google Play → Subscriptions, or from Settings inside the app, which opens that page. Uninstalling the app does not cancel the subscription — cancel it in Google Play. We never charge you outside Google Play, and cancellation always works.

Children

Fixera is a general-audience utility and is not directed at children. We do not knowingly collect personal information from anyone, including children: the app has no account, and the usage statistics described above are anonymous.

Contact

Questions about this policy: [email protected]

Changes

We will post any changes to this policy at this same URL with an updated date.