Privacy Policy for FiXPRT
Effective Date: July 31, 2026
Last Updated: August 2, 2026
FiXPRT ("we," "our," or "us"), operated by XPRT Platforms (located at 26a Brighton Road, Salford, Redhill, United Kingdom), is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use the FiXPRT mobile applications (Customer, Provider, Serviceman), customer web application (https://fixprt.com), business/admin portal (https://dash.fixprt.com), and related on-demand service booking technology services globally across all supported regions and markets (collectively, the "Platform").
Please read this Privacy Policy carefully. By creating an account or using the FiXPRT Platform, you consent to the collection, processing, and storage of your information as described herein. If you do not agree with the terms of this policy, please do not access or use the application.
Table of Contents
- Information We Collect
- How We Use Your Information
- How We Share and Disclose Your Information
- Google Play Store Compliance, Account Deletion & Privacy Rights
- User Responsibilities & Service Limitations
- Children's Privacy
- International Operations & Data Transfers
- Changes to This Privacy Policy
- Contact Information & Data Protection Office
1. Information We Collect
We collect several types of information from and about users of our Platform, including personal data required to deliver high-quality on-demand service bookings, process payments, and ensure safety.
1.1 Personal Information Provided Directly by You
- Account Registration & Profile: Full name, email address, phone number, physical address/location coordinates, profile photo, referral code, and password.
- Provider & Serviceman Details: Business name, business type, owner name, national identity details (ID/CNIC/passport verification), trade licenses, tax identification numbers, company registration documents, bank account details (bank name, account title, account number, IBAN/SWIFT), and custom registration fields.
- Service Bookings & Bidding: Delivery address, latitude and longitude coordinates, special instructions, custom service request descriptions, budget ranges, and bid responses.
- Payment Information: Payment transaction history, Cash-on-Delivery (COD) records, digital payment records, and payment gateway transaction tokens.
- User-Generated Content & Communications: Customer support requests, ratings, reviews, feedback, and in-app chat/call records between users, service providers, servicemen, and support teams.
1.2 Information Collected Automatically
- Location Data & External Map Navigation: The FiXPRT application itself does not perform active background or real-time continuous location tracking of users. The app only captures and shares the user's specific location coordinates (latitude and longitude) provided for a service address, and opens navigation via external map tools (e.g., Google Maps) when requested.
- Device & Usage Data: IP address, device hardware model, operating system version, unique device identifiers (FCM registration token), app crash logs, performance metrics, and navigation paths within the app.
- Cookies & Local Storage: Session tokens, authentication state, preference settings, and local storage on web applications.
1.3 Information from Third-Party Sources
- Authentication & Notifications: Phone number verification, OTP authentication, and push notifications are handled via secure cloud infrastructure (Google Firebase).
- Payment Gateways: Secure payment execution tokens, payment status updates, and transaction confirmation identifiers via integrated digital payment processors.
- Social Authentication Providers: Google, Facebook, and Apple — basic profile details, name, and email address when authenticated via social sign-in.
- Media Optimization: ShortPixel API for media compression and optimization.
- AI Content Services: OpenAI, Claude (Anthropic), and OpenRouter for AI-assisted content generation.
2. How We Use Your Information
We use the collected information for specific, legitimate business purposes in serving our global marketplace, including:
- Service Delivery & Order Fulfillment: Facilitating service bookings, assigning servicemen, notifying providers, processing bids, matching customers with qualified experts, and supporting repeat bookings and subscription scheduling.
- Address Coordinates & Navigation: Sharing user-provided service location coordinates with service providers and allowing providers to open navigation in external map applications (Google Maps) to reach service destinations. (The app itself does not track real-time movement).
- Payment Operations: Managing Cash-on-Delivery (COD) bookings, digital payments, wallet balances, provider commissions, manual provider withdrawals, and transaction processing.
- Account & Safety Verification: Verifying user identities via OTP authentication, conducting provider background/document checks, displaying Verified Provider Badges, monitoring provider cash-in-hand limits, and preventing fraudulent accounts.
- Customer Communications: Sending operational push notifications via Firebase Cloud Messaging (FCM), WhatsApp communications (+44 7537 181733), and responding to privacy inquiries via [email protected].
- Platform Optimization & AI Features: Compression and optimization of uploaded media via ShortPixel API, AI-assisted content generation for public blogs, monitoring system performance, and improving application UX/UI.
- Legal Compliance & Security: Complying with applicable local and international laws, enforcing our Terms and Conditions, protecting users against fraud, and addressing technical vulnerabilities.
3. How We Share and Disclose Your Information
We do not sell, rent, or trade your personal information to third parties. We share your information only under the following limited circumstances:
3.1 Sharing Between Users (Marketplace Operations)
- Customers see: Provider business name, profile, verified badge status, serviceman name, photo, contact number, and service location details.
- Providers & Servicemen see: Customer name, contact number, service delivery address, landmark details, and location coordinates to open in Google Maps.
3.2 Service Providers & Operational Third Parties
We partner with trusted third-party vendors to process data and maintain our Platform:
- Payment Processing: Integrated digital payment gateways and processors.
- Authentication & Cloud Infrastructure: Google Firebase (Authentication, FCM Push Notifications, Firestore/Database).
- Navigation & Maps: Google Maps (external navigation link via shared coordinates).
- Media & AI Services: ShortPixel API, OpenAI, Claude (Anthropic), OpenRouter.
3.3 Legal Obligations & Safety Concerns
We may disclose your information if required by law, subpoena, court order, or governmental regulation, or if we believe in good faith that such disclosure is necessary to protect the safety, rights, or property of FiXPRT, XPRT Platforms, our users, or the public.
3.4 Business Transfers
In the event of a merger, acquisition, corporate restructuring, or sale of company assets, user data may be transferred as a business asset subject to standard privacy commitments.
4. Google Play Store Compliance, Account Deletion & Privacy Rights
4.1 Location Coordinates & Maps
- The FiXPRT app does not continuously track user location in the background or real-time.
- The app only accesses location coordinates (latitude/longitude) to pin service booking addresses and launch external map applications (Google Maps) for navigation.
4.2 Account Deletion via App & Data Retention Rights
- In-App Account Deletion (Self-Service): Users can delete their account directly within the FiXPRT mobile application at any time. Simply navigate to Menu / Profile -> Edit Profile -> Delete Account, read the confirmation notice, and confirm account deletion.
- Web Account Deletion Request: Users who no longer have the app installed can also request account and data deletion by sending an email request to [email protected] or visiting our privacy request page at
https://dash.fixprt.com/privacy-policy.
- Data Retention Policy: Upon account deletion confirmation, personal profile data, authentication credentials, and location records are permanently deleted or anonymized within 30 days. Booking history, financial transaction logs, and wallet records are retained in anonymized form as required for legal, tax, and audit compliance.
4.3 Data Security & Encryption
- All data transmitted between mobile applications, web apps, and backend servers is encrypted using industry-standard TLS/HTTPS protocols.
- Passwords are hashed using bcrypt, API authentication is managed via secure tokens (Laravel Sanctum), and database records utilize UUID v4 identifiers to prevent unauthorized enumeration.
5. User Responsibilities & Service Limitations
5.1 Account Security & Accuracy
- Users are responsible for maintaining the confidentiality of their login credentials (phone number, OTP, passwords).
- Users must provide accurate, up-to-date, and truthful registration information. Impersonation of any person or entity is strictly prohibited.
5.2 Acceptable Use Policy
- Users must not use the Platform for unlawful, fraudulent, or malicious activities.
- Abusive, offensive, or harassing behavior towards service providers, servicemen, or customer support representatives will result in immediate suspension or termination of account access.
5.3 Service Limitations & Third-Party Actions
- FiXPRT acts as an on-demand service marketplace technology platform connecting independent service providers with customers.
- While we conduct verification checks and offer Verified Provider Badges, FiXPRT is not directly liable for independent acts, omissions, or disputes arising during on-site physical service execution beyond our established mediation procedures.
6. Children's Privacy
The FiXPRT Platform is strictly intended for individuals who are at least 18 years of age (or the legal age of majority in their jurisdiction). We do not knowingly collect or solicit personal information from children under 18 years of age. If we discover that a child under 18 has provided personal data, we will immediately delete such information.
7. International Operations & Data Transfers
FiXPRT is operated by XPRT Platforms, based in the United Kingdom, serving users worldwide across supported regions (including Pakistan, UK, and international markets). By using the Platform, you consent to the cross-border processing and storage of your data, subject to appropriate security and data protection standards (including GDPR and regional privacy laws).
8. Changes to This Privacy Policy
We reserve the right to modify or update this Privacy Policy at any time. When updates occur, we will revise the "Last Updated" date at the top of this policy and notify users via push notification, email, or in-app alerts. Your continued use of the Platform after changes are posted constitutes acceptance of the revised policy.
9. Contact Information & Data Protection Office
If you have questions, concerns, feedback, or requests regarding this Privacy Policy or your personal data, please contact our Data Compliance Team:
FiXPRT by XPRT Platforms — All Rights Reserved.
