Privacy
Privacy policy
Who we are
Copat Ltd (company number 17067219), registered in England and Wales, makes Fixka. We are the data controller for the processing described here. Contact us at hello@copat.uk — that's a team inbox, not one person's.
The short version
Fixka doesn't have user accounts. There's no password, no profile, no directory to look you up in. Where we have to know anything to make a board work, we hold the smallest, least identifying fact that will do, and we hold it for as short a time as we can. We don't run advertising, we don't sell or share data with data brokers, and we don't build behavioural profiles of anyone who uses Fixka.
What we collect, and why
What you draw, say and type at a board
What you draw, say and type at a board passes through our servers only while the board is open, so everyone at it can see and hear each other. We don't keep a copy. The board carries drawing strokes — never photos or video.
A private, on-device record of a board's own history (so you can scroll back through what was drawn) lives on your device, not on our servers.
Who you're at a board with
Fixka has no directory and does no lookup of phone numbers, contacts or usernames. The first time two devices share a board, they exchange an anonymous identifier with each other and each stores its own local list of who it has met — that list never reaches our servers.
Calling (in development)
We're building the ability to ring someone directly, the way a phone call does. To make a device ring, our server needs to know which push-notification token belongs to which anonymous identifier — nothing else: no name, number or address book. This isn't available yet; this paragraph is here so it's never a surprise when it ships.
Subscriptions
Payment is handled entirely by Apple’s App Store or Google Play — we never see your card details. To unlock a subscription, our server checks a cryptographically signed purchase receipt from Apple or Google. That check tells us a valid purchase exists; it doesn't create an account or tell us who you are.
AI collaborators
You choose whether to bring an AI collaborator to a board. When you do, what's said and drawn while it's present is sent to the AI provider behind the collaborator you invite so it can take part — for that board, for as long as it's there. If you never add one, no AI provider sees anything. Our servers are in the UK; an AI provider you invite may process data outside the UK under its standard terms.
Safety tools
If something goes wrong at a board, a report captures a snapshot on your own device — it isn't sent anywhere unless you choose to send it to us. Blocking or muting someone at a board is handled on your device and doesn't involve our servers.
Server and connection logs
Like any web service, our servers keep short, technical logs of connections (IP address, timestamp, the address requested) so we can run and secure Fixka and notice when something's broken. These logs roll over automatically after a short time and aren't used for marketing or profiling.
What we don't do
- No advertising and no ad trackers.
- No cookies used for tracking (this website sets none).
- No selling or sharing personal data with data brokers.
- No behavioural profiling.
- No public directory or search of Fixka's users.
- Designed to the UK Age Appropriate Design Code.
How long we keep things
Board, voice and text content shared at a board is not retained by our servers once the board ends. On-device board history stays on your device under your control. Connection logs roll over automatically after a short, fixed period. A purchase receipt check is not stored beyond confirming the entitlement it grants.
Your rights
Because Fixka holds no account and no directory entry for you, there's usually very little tied to you for us to find. Where we do hold something linked to you — for example, a report you sent us, or an email you wrote to hello@copat.uk — your rights to access, correct or delete it depend on where you live. Reach us first at hello@copat.uk and we'll do our best to sort it out directly; you may also complain to your local data protection authority — in the UK, the Information Commissioner's Office (ico.org.uk).
Changes
We'll update the date at the top of this page whenever this policy changes, and keep the substance of what changed honest and readable rather than burying it in legal language.