Version 1.0 · Effective September 6, 2026
Publisher: Timeout Consulting, LLC (an Alabama limited liability company)
The short version. FixFlow collects the minimum needed to answer your diagnostic questions. We do not have user accounts. We do not sell your data. We do not use your data to train AI models. Photos and notes you attach are sent to our AI provider for that one request and are not retained by us afterward. We keep short-lived server logs to debug problems.
1. Who this policy covers
This Privacy Policy explains how Timeout Consulting, LLC (“we,” “us,” or “Publisher”) collects, uses, discloses, and protects information when you use the FixFlow mobile application (the “Service”).
2. Information we collect
2.1 Information you provide to us
Diagnostic input. The category you select, the item context you enter (for example, vehicle year/make/model or appliance model number), the symptom description, your answers to follow-up questions, and any notes you add.
Photos. If you attach photos to a diagnostic session, we send them to our AI provider so the model can “see” the problem. Photos are transmitted for that single request and are not stored by us afterward.
Feedback. If you use the in-app “Send feedback” option, your device’s email app composes a message to a private-relay email address that forwards to us. The message content, your device email address, and any context you include (app version, category, last error) come along with the message.
2.2 Information collected automatically
Server logs. Our backend records short-lived operational logs for each request: a per-session correlation ID (a hash, not your identity), request timestamps, category, item summary, question titles, chosen answers, and Claude’s response summary. These logs are used to debug accuracy problems and are retained for approximately thirty (30) days before being rotated out.
Subscription state. If you purchase a subscription, RevenueCat and Apple record your purchase and entitlement state. We receive an anonymous RevenueCat identifier and your entitlement status (Pro / not Pro).
Device information. Standard device information available to any iOS app: operating system version, app version, device model. We do not access your contacts, calendar, location, health data, photos library (except for a photo you explicitly attach), or microphone.
2.3 Information we do not collect
We do not create user accounts, so we do not have your name, address, phone number, or password.
We do not use analytics or advertising SDKs.
We do not track you across other apps or websites.
We do not collect precise or coarse location data.
3. How we use information
To generate your diagnostic guidance by sending your inputs to our AI provider.
To improve the Service by reviewing anonymized logs when a user reports an inaccurate answer.
To operate subscriptions and confirm entitlements through RevenueCat and Apple.
To respond to your feedback and support requests.
To detect and prevent abuse of the Service.
We do not use your data to train AI models, nor do we authorize third parties to do so with your data.
4. Third-party service providers
Provider
What they receive
Why
Anthropic (Claude API)
Your diagnostic inputs and any attached photos, for each request.
To generate the AI diagnostic response. Anthropic’s API terms prohibit training on API traffic.
Vercel
Request metadata, server logs.
Backend hosting and log retention.
RevenueCat
Anonymous device identifier, subscription events.
Subscription management and receipt validation.
Apple (App Store)
Purchase transactions, device receipt.
Payment processing and app distribution. Refunds handled by Apple.
YouTube (Data API v3)
An anonymized search query (for example, “2021 Chevrolet Tahoe alternator replacement”).
To surface a walk-through video on solution screens.
Retailer redirects (Amazon, RockAuto, PartsGeek, Home Depot, AppliancePartsPros)
Nothing from us. When you tap a retailer link, your browser opens that retailer’s page directly.
Convenience links for buying parts. Each retailer’s own privacy practices apply once you leave the app.
5. How long we keep information
Diagnostic session state: stored on your device only (in the app’s local storage). Not sent to us in any persistent way.
Server logs: approximately 30 days.
Photos: not retained by us after the request is served; passed through to the AI provider for that single request.
Subscription records: retained by Apple and RevenueCat according to their policies, generally for the life of the account plus applicable tax and accounting retention periods.
6. Your privacy rights
6.1 Everyone
Because we do not create accounts, there is no login-tied profile to access or delete. If you have sent us feedback and want us to delete the message, contact us at the address below and we will do so.
6.2 California residents (CCPA/CPRA)
You have the right to know what personal information we collect, to request deletion, and to opt out of sale or sharing of your personal information. We do not sell or share personal information as those terms are defined by the CCPA. To exercise other rights, contact us at the address below.
6.3 EEA/UK residents (GDPR/UK GDPR)
Our legal bases for processing are (a) performance of the Service contract with you and (b) our legitimate interest in operating and improving the Service. You have the rights to access, rectify, erase, restrict, and port your personal data, and to object to processing based on legitimate interests. To exercise these rights, contact us at the address below.
7. Children’s privacy
The Service is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe a child under 13 has provided us information, contact us and we will delete it.
8. Security
All connections between the app and our backend are encrypted in transit using TLS. We take reasonable steps to protect the limited data we hold. No system is perfectly secure; we cannot guarantee absolute security.
9. International transfers
Our servers are hosted in the United States. If you are using the Service from outside the United States, your information will be transferred to and processed in the United States, where privacy laws may differ from those in your jurisdiction.
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will bump the version number and effective date above, and if the change materially affects how we process your data we will notify you through the app.
11. Contact us
Timeout Consulting, LLC
Attn: Privacy
4171 Lomac Street
Suite F #1003
Montgomery, AL 36106
United States
Email: privacy@fixflowdiy.com