Privacy Policy

1. Information We Collect

We collect the following types of personal information:

• Account information: Your name and email address when you register.
• Profile media: Photos or other media you upload to your profile or activity logs.
• Activity data: Fixation logs, streaks, calendar entries, and other habit-tracking data you create within the app.
• Location information: When you choose to attach a location to an activity log, we collect the coordinates of the place you select. This only happens when you actively pick a location, and you can search for a place or drop a pin instead of using your device's location. We do not track your location in the background.
• Device information: Your device's push notification token, used solely to deliver notifications you have opted into.
• Purchase information: Subscription status and transaction identifiers processed through Apple App Store or Google Play. We do not store your payment card details.
• Usage and analytics data: Information about how you interact with the app, including pages viewed, features used, and anonymised session recordings of your interactions with the app interface. We mask text inputs and other sensitive content in these recordings.

2. How We Use Your Information

We use your information to:

• Create and manage your account.
• Provide the core features of the app, including habit tracking, the community feed, friends, and group chats.
• Send push notifications you have opted into (e.g. reminders, activity updates).
• Process and manage your subscription.
• Respond to support requests.
• Improve and maintain the app.

We do not currently use your personal information for advertising or sell it to third parties.

3. Information Shared With Other Users

Fixation includes social features such as a community feed, friends list, and group chats. Content you post to these features (including your display name, profile photo, and any activity you choose to share, which may include a location you have attached to a log) will be visible to other users. Please be mindful of what you share publicly within the app.

4. Third-Party Services

We use the following third-party services that may process your data:

• Amazon Web Services (AWS S3): Used to store media files you upload. Data is stored securely in AWS infrastructure.
• RevenueCat: Used to manage in-app subscriptions and entitlements. RevenueCat receives your app user ID and purchase receipts.
• Apple App Store / Google Play: Payment and subscription management for iOS and Android respectively. Their privacy policies govern how they handle payment data.
• Push notification services: Used to deliver opt-in notifications to your device.
• Google Maps Platform: Used to display maps, search for places, and convert coordinates into readable addresses when you attach a location to a log. When you use these features, the relevant coordinates or search terms are sent to Google. Google's use of this data is governed by its own privacy policy.
• PostHog: Used for product analytics and session replay to understand how the app is used and improve it. PostHog processes usage data and anonymised session recordings on infrastructure located in the United States.

These services are bound by their own privacy policies and are only provided with data necessary for the function they perform.

5. Data Storage and Security

Your data is stored on secure servers. We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Children's Privacy

Fixation is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

7. Your Rights

Under the Australian Privacy Act, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your account and associated data. You can do this directly from within the app in Settings. Please note that deleted data may be retained for up to 30 days before permanent removal (for example, to complete pending transactions or comply with legal obligations).
• Opt out of push notifications at any time through your device settings.

To exercise any of these rights, contact us at [email protected].

8. Licence to User Content

By submitting content to Fixation (including photos, media, and activity data), you grant us a non-exclusive, worldwide, royalty-free licence to use that content for the following purposes:

• Displaying your content within the app to you and, where applicable, to other users (such as on the community feed or in group chats).
• Operating, maintaining, and improving the Fixation service, including using aggregated or anonymised data for internal analytics and product development.
• Using anonymised, non-identifiable data in marketing materials (for example, aggregate statistics such as total habits tracked).
• Sublicensing your content to trusted third-party service providers (such as AWS and RevenueCat) solely to the extent necessary for them to provide services on our behalf.

This licence does not transfer ownership of your content. You retain all ownership rights to content you create. We will never sell your identifiable personal content to third parties.

9. Advertising

We do not currently use your personal data for targeted or personalised advertising. However, we reserve the right to introduce advertising or use data for advertising purposes in the future. If we do, we will update this Privacy Policy and notify you in advance through the app or by email, giving you the opportunity to review the changes before they take effect.

10. Overseas Data Transfers

Some of the third-party services we use are based or operate infrastructure outside of Australia, which means your personal information may be transferred to, stored, or processed in other countries. We take reasonable steps to ensure that any overseas recipients handle your information in a manner consistent with the Australian Privacy Principles. By using Fixation, you consent to your information being transferred overseas as described in this policy.

11. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the service. If you delete your account, your data will be permanently removed within 30 days, except where we are required to retain it longer to comply with legal obligations or resolve disputes.

12. Data Breaches

We take data security seriously. In the event of a data breach that is likely to result in serious harm to any affected individuals, we will notify affected users and, where required, the Office of the Australian Information Commissioner (OAIC) as soon as practicable. We will provide details of the breach and the steps we are taking to address it.

13. Governing Law

This Privacy Policy is governed by the laws of Victoria, Australia. Any disputes arising in connection with this policy are subject to the exclusive jurisdiction of the courts of Victoria.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email. Continued use of the app after changes are posted constitutes your acceptance of the updated policy.

15. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or how we handle your personal information, please contact us at:

Fixation
[email protected]

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).