Privacy Policy
This Privacy Policy describes how fixMy Apps LLC, a Virginia limited liability company ("we", "us"), handles your data when you buy or use fixMyKM (the "Service"). Plain English first; legal definitions where required. We try to collect as little as possible, and to be specific about why each item is collected.
1.What we collect
| What | When | Why |
|---|---|---|
| KM100 Series hardware serial | When you open fixMyKM on your key tool | Read on-device; sent to our backend so we can issue your license bound to that specific serial. |
| Attestation bundle | When you open fixMyKM | Compact summary (model, board, brand, installed-package list of your KM100 Series). Lets us confirm you're really on a KM100 Series so a license can't be ported to a different key tool. |
| Email address | At Stripe Checkout, only if you enter one | We receive a receipt-only copy from Stripe so we can email your receipt and respond to support inquiries. |
| Stripe payment metadata | When you pay | Stripe charge/session ID, last4 of the card, card brand. We never see full card numbers. |
| IP address & User-Agent | On any request that reaches our server | Standard web log for abuse mitigation and basic operations. Rotated every 90 days. |
2.What we do NOT collect
- Full credit-card numbers: only Stripe sees these; we are not in PCI scope.
- Vehicle VINs.
- Vehicle owner identity or any personally-identifying customer information beyond the email you enter at checkout.
- The contents of your key tool: installed apps beyond the attestation summary, your activation results, audio, video, screenshots, etc.
- Location data (GPS, cell-tower, Wi-Fi SSIDs).
3.Why we collect each item
- Hardware serial: to bind your license to your specific KM100 Series so that re-applying after a key tool reset works without a re-charge.
- Attestation bundle: to verify you're on a real KM100 Series and to refuse activations on key tools the Service was never designed for (which would silently fail and waste your money).
- Email: to send your receipt and to handle support inquiries about your activation.
- Stripe payment metadata: to look up your order when you write to support, and to perform fraud and chargeback handling through Stripe.
- IP / User-Agent: to rate-limit, to detect abuse, and to correlate a checkout session with a serial during incident response.
4.Stripe handles cards
All card data is handled by Stripe, Inc., our PCI-scoped payment processor. Stripe collects, transmits, and stores card numbers according to its own policies and applicable card-network rules. Stripe's privacy policy applies to that data and is available at stripe.com/privacy. We receive only the metadata listed in Section 1.
5.How long we keep it
- License records (serial → activated SKUs) are kept indefinitely, so we can re-validate after a key tool reset or software update and re-apply the activation without re-charge.
- Web request logs (IP, User-Agent, request line) are retained for 90 days and then deleted on a rolling basis.
- Stripe records are governed by Stripe's retention policy and by U.S. tax and audit requirements.
6.Sharing
- We don't sell your data.
- We do not share your serial or license bitmap with any third party.
- Stripe receives the data needed to process the payment.
- Cloudflare may see the request as our CDN; it follows its own standard log-retention policy.
- Law enforcement: we disclose data only on receipt of valid legal process and only to the extent required.
7.Your rights
Email [email protected], and include your device serial, to:
- Request a copy of what's stored about your serial.
- Request deletion. We will redact PII (such as email) on request; the license record itself may persist if you have an active license, so that we can honor it.
- Correct an email address on a receipt.
8.Children
The Service is intended for professional locksmiths and authorized automotive service personnel. It is not directed at children, and we do not knowingly collect data from anyone under 13.
9.International users
The Service is operated from the United States. If you use the Service from outside the U.S., your data will be processed in the U.S., which may have different data-protection rules than your home jurisdiction. By using the Service from outside the U.S., you consent to that processing.
10.Changes
We will update the "Last updated" date at the top of this page when we change this Policy, and we will post a notice inside fixMyKM if the change is material. Continued use of the Service after a change constitutes acceptance of the updated Policy.
11.Contact
For privacy questions, email [email protected] or [email protected], or write to:
fixMy Apps LLC2245 Papermill Rd
Winchester, Virginia 22601
United States
All references in this Policy to third-party trademarks (including, without limitation, Autel, Ford, Toyota, GM, and Renault) are descriptive and nominative only, used solely to identify hardware compatibility or the vehicle make whose AKL menus a given activation restores. No sponsorship, endorsement, or affiliation is implied. All trademarks are the property of their respective owners.