Privacy Policy for Fixlith Scan

Last Updated: November 25, 2025

1. Introduction

Fixlith Scan ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application for vehicle diagnostics via OBD-II/ELM327 adapters.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you create an account (Driver Mode), we collect your email address and name. Passwords are securely hashed using SHA256 encryption.
• Vehicle Information: VIN (Vehicle Identification Number), make, model, year, and mileage data you enter into the app.
• Diagnostic Data: OBD-II sensor readings, Diagnostic Trouble Codes (DTCs), freeze frame data, and trip recordings you generate using the app.

2.2 Automatically Collected Information

• Device Information: Device type, operating system version, app version, and unique device identifiers for crash reporting purposes.
• Location Data: GPS coordinates are collected only when you:
  • Use the "Nearby STO" (service stations) feature to find nearby repair shops
  • Enable Trip Recorder with GPS tracking (Pro feature)
  Location data is NOT collected in the background unless Trip Recorder is actively recording.
• Bluetooth/Wi-Fi Information: ELM327 adapter connection details (MAC address, SSID for Wi-Fi adapters) to facilitate reconnection.
• Usage Analytics: Anonymous app usage statistics via Firebase Analytics (if enabled) to improve app performance.

3. How We Use Your Information

We use the collected information for the following purposes:

• Core Functionality: To provide OBD-II diagnostics, live data monitoring, DTC analysis, and trip recording features.
• Account Management: To authenticate your account, manage your subscription status (Free/Pro), and restore purchases.
• AI Assistant: To process your DTC-related questions and provide AI-powered insights (requests are sent to our AI service with minimal data—only the DTC code and vehicle make/model).
• Nearby Services: To display nearby service stations on a map when you use the "Nearby STO" feature.
• Crash Reporting: To identify and fix bugs using Firebase Crashlytics (crash logs do not contain personal data).
• Improvement: To analyze app performance and user behavior patterns (anonymized data only).

4. Data Storage and Security

4.1 Local Storage

All personal data, vehicle information, and diagnostic results are stored locally in a SQLite database on your device. This data is NOT automatically synced to cloud servers.

4.2 Workshop Mode (Optional)

If you are a workshop/mechanic and use Workshop Mode with a CRM token from adgrow.kiev.ua, diagnostic data will be synced to your workshop's CRM system. This is an opt-in feature and requires explicit authentication.

4.3 Security Measures

• Passwords are hashed using SHA256 before storage.
• Data transmission to third-party services (AI, Google Maps) uses HTTPS encryption.
• No payment card information is stored in the app; all in-app purchases are processed by Apple App Store or Google Play.

5. Third-Party Services

Fixlith Scan integrates with the following third-party services:

Service	Purpose	Data Shared
Google Maps API	Display nearby service stations	GPS coordinates (temporary, not stored)
Firebase Crashlytics	Crash reporting and debugging	Device info, app version, crash logs (no personal data)
Firebase Cloud Messaging	Push notifications (maintenance reminders)	Device token (no personal data)
Apple/Google In-App Purchase	Process Pro subscription payments	Receipt validation (handled by Apple/Google, not by us)
AI Service (adgrow.kiev.ua)	AI-powered DTC explanations	DTC code, vehicle make/model (no VIN, no personal data)

Each third-party service has its own privacy policy. We encourage you to review:

• Google Privacy Policy
• Firebase Privacy Policy
• Apple Privacy Policy

6. Your Data Rights

You have the following rights regarding your personal data:

6.1 Access and Portability

• Export Data: You can export all your diagnostic data in CSV or PDF format via Settings → Export Data.
• View Data: All data is viewable within the app (Garage, Diagnostic History, Trip Recordings).

6.2 Deletion

• Delete Account: Go to Settings → Profile → Delete Account to permanently delete your account and all associated data.
• Clear Diagnostic Data: Individual diagnostic sessions and trips can be deleted from their respective screens.

6.3 Opt-Out

• Location Services: Disable GPS in device settings to prevent location tracking.
• Analytics: Analytics data is anonymized and cannot be individually disabled, but you can revoke app permissions in device settings.
• Push Notifications: Disable notifications in device settings or within app settings.

7. Children's Privacy

Fixlith Scan is not intended for use by children under the age of 13. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us to request deletion.

8. Data Retention

• Account Data: Retained until you delete your account.
• Diagnostic Data: Stored locally on your device indefinitely unless manually deleted.
• Analytics Data: Aggregated analytics are retained for up to 26 months by Firebase.
• Crash Logs: Retained for up to 90 days for debugging purposes.

9. International Data Transfers

If you use Workshop Mode with CRM integration, your data may be transferred to and stored on servers located in Ukraine (adgrow.kiev.ua). By using Workshop Mode, you consent to this data transfer.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted at this URL with an updated "Last Updated" date. Continued use of the app after changes constitutes acceptance of the updated policy.

11. California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information is collected, used, shared, or sold.
• Delete your personal information (subject to legal exceptions).
• Opt-out of the sale of personal information (we do NOT sell your data).

12. GDPR Compliance (EU Users)

If you are located in the European Union, you have additional rights under GDPR:

• Right to Access: Request a copy of your personal data.
• Right to Rectification: Correct inaccurate data.
• Right to Erasure: Request deletion of your data.
• Right to Restrict Processing: Limit how we use your data.
• Right to Data Portability: Receive your data in a machine-readable format.
• Right to Object: Object to data processing based on legitimate interests.

To exercise these rights, contact us at support@fixlithscan.com.

---

© 2025 Fixlith Scan. All rights reserved.