FixShot Privacy Policy

FixShot is provided by JonnyLab. This policy applies to the FixShot app for Mac (bundle identifier com.jonnylab.fixshot) and to the FixShot server that JonnyLab operates on Google Cloud.

Screenshots you import, the text FixShot recognizes in them (Apple Vision, on your Mac), sensitive-data detection, and masking are all processed on your Mac. FixShot never uploads your original screenshot or the unmasked text.

FixShot stores on your Mac: Recent Fixes (the problem type and the steps you chose to save), your preferences (including your AI processing choice and your last known number of analyses), your sign-in session in the macOS Keychain, and a record of an unfinished purchase so it is not lost. A masked image is copied or saved only when you choose Copy or Save.

Nothing leaves your Mac until you have reviewed the masks, seen the exact payload, and confirmed it. FixShot then sends only that payload: the masked image (Standard mode) or the redacted recognized text only (Private mode), the problem description you typed (optional), and the app language.

If FixShot recognizes a known online service in the screenshot, it also sends that service's name and the result of the reachability check described in section 5. The request travels over HTTPS through JonnyLab's server to OpenAI.

Before the first analysis, FixShot names OpenAI, explains what is sent and why, and asks for your permission. You can withdraw it at any time in Settings; later requests are then blocked. Withdrawing cannot recall a request already sent.

JonnyLab's server forwards the approved payload to the OpenAI API with response storage turned off (store=false) and does not save your image, text, or the AI response. Under OpenAI's API data policy, OpenAI may keep API inputs and outputs for up to 30 days to detect abuse, or longer where required by law, and does not use API data to train its models by default. AI results can be wrong and are not professional advice.

To tell an outage from a local problem, FixShot may send one small HTTPS request from your Mac to the recognized service's public address (no cookies and no screenshot content), and JonnyLab's server may read that service's public status page. Neither request contains your screenshot, recognized text, or problem description.

Your first 5 analyses are free and need no account. To grant them only once for your App Store copy of FixShot (reinstalling does not reset them), the server checks Apple's signed App Store record for this app and stores a keyed hash of its identifier. It does not receive your Apple ID or email address.

Sign in with Apple is needed only to buy more analyses and keep them on your Mac. FixShot does not request your name or email address. The server stores a keyed hash of Apple's user identifier and an encrypted Apple refresh token, which it uses only to revoke the sign-in if you delete your account.

To run credits and purchases, the server keeps: your random account identifiers and balances, credit events (grant, use, release, transfer), sign-in sessions, purchase records, and for each analysis its time, state, and a SHA-256 fingerprint of the request — not the request itself — so a request is never charged twice. Abuse-prevention counters use a keyed hash of your network address and expire automatically. Server error logs contain error codes only.

Google Cloud processes your IP address to deliver requests and keeps request logs (IP address, time, address requested, and result) for up to 30 days. The server runs in Google Cloud's Singapore region, and its database is hosted by Neon in Singapore.

Apple processes payments. FixShot uses RevenueCat to process in-app purchases with your random FixShot account identifier, the product, and transaction details, and the server confirms each purchase with RevenueCat and Apple before adding analyses. Screenshots, recognized text, and problem descriptions are never sent to Apple or RevenueCat.

FixShot contains no advertising, no tracking, and no analytics SDK. JonnyLab does not sell personal information or use it for advertising, and FixShot does not request an advertising identifier.

Data on your Mac stays until you delete it in FixShot (for example, Recent Fixes) or remove the app. Delete Account in FixShot signs you out on this Mac, revokes Sign in with Apple, and removes the account links on the server. Purchase and credit records may be kept for refunds, accounting, and preventing duplicate payments, and the free-analysis record is kept so free analyses are not granted twice. Records held by Apple, OpenAI, RevenueCat, Google, or Neon follow their own policies.

You may also ask for access to or deletion of your server records by email at [email protected].

FixShot is not directed to children under 14. JonnyLab does not knowingly collect personal information from children through FixShot.

FixShot masks before anything can be sent, requires your explicit approval for each payload, uses HTTPS, keeps sign-in sessions in the Keychain, and stores identifiers on the server as keyed hashes. Automatic masking can miss small, stylized, or unusual text, so review the masked preview before you approve it. No method of storage or transmission is completely risk-free.

Apple (Vision, Sign in with Apple, App Store, in-app purchases), OpenAI (AI analysis), RevenueCat (purchase processing), Google Cloud (server hosting), and Neon (database hosting) process data under their own policies.

We will update this policy when features or data handling change, and the page will show a new date. Questions and requests: [email protected].