Privacy Policy

Last updated: 7 September 2026

1. Introduction

RepairFlow ("we", "our", "the app") is a repair shop management application developed by RepairFlow. This policy explains how we handle data when you use our iOS application.

This policy was substantially revised on 7 September 2026 following a review of the application's actual data flows. Earlier versions stated that no data left your device by default, that cloud sync used a self-hosted server, and that the app collected no device or usage information. Those statements were not accurate, and the sections below replace them.

2. Data Stored On Your Device

RepairFlow is local-first. The following is created and stored on your iPhone or iPad using Core Data (SQLite):

3. Data Sent To Us Automatically

The following is sent to servers we operate without any action on your part. It is the only data collected automatically.

We use this to identify legitimate existing customers, to understand what the service costs us to run, and to detect abuse. It is not used for advertising and is not shared with data brokers.

4. Data Sent To Us Only If You Enable A Feature

4a. Enquiries From Your Website — Your Customers' Data

Website Enquiries is different from every other feature here, because the person whose data we receive is not you and has never used our app. They fill in a form on your website.

For that data, you are the data controller and we are your processor: it is collected for you, held on your instructions, and we do not use it for anything except delivering it to you and keeping the conversation you have through it. We do not sell it, and we do not use it for advertising or to train anything.

Because that person cannot see this policy inside an app they do not have, the collection notice appears on the enquiry form and on the conversation page itself. If you host the form on your own site rather than using ours, giving that notice is your responsibility.

Enquiry conversations use a private link rather than an account. That link is stored hashed, expires, and stops working as soon as a new one is issued.

5. Payment Providers

Card payments are processed by the provider you choose. RepairFlow does not process payments itself and never receives your card numbers. Each provider operates its own service under its own privacy policy, and each collects data directly from your device when in use:

Where money settles is determined by the account you connect. RepairFlow does not take a share of your payments.

6. Location

RepairFlow itself does not use your location. The payment SDKs above require it: Stripe and Zettle collect device location — precise location in Zettle's case — to meet card payment regulations and to prevent fraud. This applies only while you are using card payment features. iOS will ask your permission before any location is accessed.

7. Advertising & Tracking

RepairFlow does not track you. We include no advertising SDKs and no analytics SDKs of our own, we do not build advertising profiles, and we do not sell, share or transfer your data to any third party for advertising or marketing purposes. No data is linked with data from other companies for tracking purposes.

Some data described in section 5 is collected by payment providers under their own policies, and Zettle lists advertising and personalisation among its own purposes for data it collects. That collection is theirs, applies only when you use their payment service, and is governed by their privacy policy rather than this one.

8. Camera, Bluetooth & Local Network

The camera is used to scan serial numbers and IMEI barcodes and to take repair photos. Bluetooth is used to connect to card readers. Local network access is used to link a companion device for terminal mode. These permissions are optional and the app functions without them.

Serial and IMEI lookups are performed against a device database held on your phone. Nothing is sent to us or to any lookup provider.

9. Data Retention & Deletion

Data on your device remains until you delete it. You can delete individual records or use the full data wipe option in Settings, and uninstalling the app removes all local data.

Data sent to our servers by an earlier version through Cloud Sync, and anything sent through crash reporting, is not removed by uninstalling. To have it deleted, contact us at the address below and we will remove it.

Website enquiries. An enquiry and its whole conversation are deleted permanently when you delete the enquiry in the app — that is the option to use if someone asks you to remove their data, and it cannot be undone. Binning an enquiry as spam is deliberately not the same thing: it stops it notifying you but keeps it recoverable, in case it turns out to be a real customer.

Enquiries you have dealt with, binned or converted are deleted automatically after 365 days. Enquiries nobody has answered are never deleted automatically — an unanswered enquiry is late, not stale, and losing it would mean losing a real customer.

10. Children's Privacy

RepairFlow is a business tool and is not intended for use by children under 13. We do not knowingly collect data from children.

11. Changes To This Policy

We may update this policy from time to time. Material changes will be communicated through the app or on this page.

12. Contact

If you have questions about this privacy policy, or wish to request deletion of data held on our servers, contact us at support@myrepairflow.com.