Privacy Policy

Who is responsible

APP LABS LLC, United States, is the controller of the limited personal data described here. For any privacy question, or to exercise the rights described below, write to info@fixly.cc.

Your writing

When you press the shortcut, Fixly reads the text you have selected, processes it with a language model that is running locally on your own processor, and writes the result back into the app you were in.

That text is never sent over the network. We do not receive it, store it, log it, or see it. It is not used to train anything — neither by us nor by anyone else — because it never reaches a third party in the first place. The app has no facility to upload it, which is why every rewrite still works with your Wi-Fi switched off.

To read your selection and paste the result back, Fixly needs macOS Accessibility permission (or the Windows equivalent). It uses that permission only at the moment you press the shortcut. It is not a keylogger and does not observe your typing at any other time.

Every connection the app makes

These connections support setup, licensing, updates, and optional analytics.

One-time setup download

After installation the app downloads its language model from a third-party model host. That host sees your IP address, as any download does. It happens once; nothing about your text is involved.

License activation

Your license key and the name of your computer (the name macOS or Windows already shows on your network) are sent to Lemon Squeezy, so the key can be checked and a device slot claimed. The key is then re-validated periodically.

Device management

If you open the activation page and choose Manage devices, your license key is sent to our server, which passes it straight to Lemon Squeezy to fetch or free a slot. We do not store it and do not log it.

Optional analytics

When acquisition measurement is enabled, the app sends one first-observed-launch event to fixly.cc, which forwards it to PostHog. The event contains a random installation identifier, timestamp, platform, app version and whether trial history indicates a new or existing installation. The app checks a regional policy at launch. Measurement starts automatically in the US unless previously disabled; elsewhere or if the check fails it asks permission. Detailed feature usage is not collected. Existing opt-outs are preserved. Checkout links can carry that random identifier to Lemon Squeezy to connect a purchase. No text, clipboard contents, license keys, device names, or free-form error messages are included. Analytics never block editing or require you to stay online.

Update checks

About once a day the app asks our release host whether a newer version exists. That request carries your IP address and app version; it does not identify you or your license.

What we actually hold

Purchase records

Your email address, license key, the country used for tax, and the last four digits and brand of the card. This is held by Lemon Squeezy, our merchant of record; we can see it in their dashboard. We never receive or store your full card number.

Device names

The name of each computer you activated, shown so you can tell your machines apart when freeing a slot. Held by Lemon Squeezy alongside the license key.

Analytics records

PostHog receives the explicit events above and, with website analytics enabled, visits, download requests, checkout steps, and campaign labels. Payment events contain an order identifier, currency, amount, and whether attribution is available. They do not contain your email or license key. Purchase and refund totals include orders without analytics attribution; these are not connected to a browser or installation. We do not forward your IP address or user agent to PostHog and disable geographic enrichment. Cloudflare still receives ordinary request metadata when delivering these requests.

Support email

If you write to us, we keep the correspondence so we can answer and refer back to it.

Server logs

Our website and the device-management endpoint run on Cloudflare, which records ordinary request metadata — IP address, timestamp, path, user agent — for delivery and abuse prevention. Request bodies, license keys and device names are explicitly never logged.

On your own computer the app stores your settings, your shortcut choices, the downloaded model, a local diagnostic log, and your license key in the system keychain. If analytics are enabled, a random installation identifier and a bounded queue of unsent events are also stored locally. The queue expires after 30 days and is cleared when analytics are turned off. License and trial records can remain in the system credential store after uninstalling.

Why we may process it, and for how long

Under the GDPR our legal bases are: performance of a contract for the purchase, license key and device slots — we can't sell you a license or enforce a device limit without them; legitimate interests for server logs and abuse prevention; and legal obligation for tax and accounting records. Outside our US default-on rollout, linked acquisition analytics rely on your consent. In the US, limited acquisition measurement starts automatically unless disabled to help assess acquisition performance. It can be disabled in Privacy preferences on the website and Analytics in the app. The regional check uses request location at Cloudflare; the country is not forwarded to PostHog.

Purchase and tax records are kept as long as the law requires, generally seven years. License and device records are kept while the license exists. Support email is kept for up to two years. Cloudflare's request logs are short-lived and are retained according to their own schedule. Analytics event retention is configured in our PostHog project; contact us for the current retention period or to request deletion. Payment delivery stores an opaque deduplication marker so duplicate notifications do not count as new purchases.

Who else is involved

• Lemon Squeezy — merchant of record. Processes the payment, handles tax, issues and validates license keys.
• Cloudflare — hosts this website, device management, and the analytics relay and payment event queue.
• PostHog (US region) — processes the limited analytics and purchase events described above.
• Our release host and the model host — serve the app downloads, updates and the one-time setup download.
• Google Ads — website advertising measurement, enabled separately from analytics.
• OpenAI (ChatGPT Ads) — website advertising measurement, using the same advertising preference.
• Google Workspace — our email, if you write to us.

That is the complete list. We do not sell your writing or provide it to advertisers. Google and OpenAI receive the website measurement information described below. Optional product analytics help us understand setup, usage, and conversion to purchase. Some of these providers are in the United States; where personal data of EEA or UK residents is transferred there, it is done under the standard contractual clauses those providers offer.

Cookies and this website

Advertising measurement is controlled separately from website analytics. In the US, both start automatically unless disabled. Outside the US, or when location is unknown, linked website analytics wait for permission and Google starts with advertising storage and user-data consent denied. In that pending state Google can receive limited cookieless page and conversion signals. If advertising is allowed, Google may set measurement cookies and receive IP address, browser information, public page visits and ad-click identifiers. Personalized advertising is disabled. An explicit advertising opt-out stops subsequent Google loading. This does not delete data already received; existing cookies can be cleared in your browser. See how Google uses information from partner sites.

OpenAI advertising measurement loads only when advertising measurement is permitted, including the US default unless disabled. It does not load while permission is pending elsewhere. It receives public page-view events, download-request events and verified purchase events. Its pixel uses first-party browser and ad-click references (including __obref and __oppref cookies) to connect events to ads and receives ordinary network metadata such as IP address and browser information. OpenAI’s pixel includes automatic advanced matching for supported customer information on websites. We do not provide customer-information forms on the tracked pages or manually pass contact information, email hashes, names or writing. The pixel is excluded from activation and device-management pages, and payment details are entered on Lemon Squeezy rather than on our tracked pages. Events opt out of future user-level personalization. Refusal, Global Privacy Control and Do Not Track stop future OpenAI measurement; refusal also clears its first-party attribution cookies. This does not delete events already received. See OpenAI’s privacy policy.

When advertising measurement is enabled, checkout also uses a random, first-party receipt cookie for up to seven days. Lemon Squeezy sends a signed payment confirmation to fixly.cc. Returning from checkout in the same browser lets Google and OpenAI receive a pseudonymous transaction identifier, currency and amount paid before tax. Email addresses, names, license keys and app installation identifiers are not sent to these advertising services. A preference cookie remembers whether advertising measurement is permitted for up to 30 days. Refusing advertising stops future purchase reporting.

The website stores your choices and, when analytics are enabled, a random browser identifier in local storage. That identifier connects website visits, download requests and website checkout purchases across visits. It is pseudonymous, not anonymous. Global Privacy Control and Do Not Track disable website measurement. Use Privacy preferences to change your choices. Turning analytics off removes the browser identifier and stops future events; contact us to request deletion of earlier records.

The app uses a separate random installation identifier to connect first observed launch to purchases opened from the app. Website and app identities are not automatically linked. The previous optional browser-linking feature is retired. Purchases outside that app checkout flow remain unattributed to the installation. Activation, device management and browser-linking pages run no tracking. Download requests are not completed installations; first launches do not count apps that are installed but never opened.

Your rights

Depending on where you live you may have the right to access the personal data we hold about you, correct it, delete it, restrict or object to its processing, receive a portable copy, and — under the GDPR — lodge a complaint with your local supervisory authority. California residents have equivalent rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them; note that we do not sell or share personal information as those terms are defined.

Email info@fixly.cc and we will respond within 30 days. Because we hold so little, most requests can be answered quickly. Deleting your purchase record will invalidate your license key, so we'll confirm with you before doing it.

Children

Fixly is not directed at children under 13 (or under 16 in the EEA), and we do not knowingly collect their personal data. If you believe a child has provided us with data, write to us and we will delete it.

Security

Your license key is stored in the operating system keychain rather than in a plain file. All network requests the app makes use HTTPS. The device-management endpoint accepts requests only from this site, caps the request size, validates every field, and never writes keys or device names to a log. Because your text never leaves your machine, the most sensitive thing Fixly touches is never exposed to a breach at all.

Changes to this policy

If the app ever gains a feature that changes what leaves your computer, this page will be updated before that feature ships, and the effective date at the top will change. Previous versions are in the public history of the repository that publishes this site.

Contact