How we handle your data.

Deleting your account or data

This applies to the app Fiksit: help around the house by Fiksit (SAMABRO BV).

In the app

1. Open the app and sign in.
2. Go to Profile.
3. Tap Delete my account and confirm.

This works for customers and for fiksers.

Without the app

Email info@fiksit.app from the email address of your account, with the subject "Delete my account". We confirm within 30 days that your account has been deleted. We only ask for proof of identity if we doubt the request really comes from you.

What we delete

Within 30 days of your request, we erase or anonymise:

• your account: name, email address, phone number, password and profile photo;
• your addresses and your location data;
• your chat messages and job photos;
• for fiksers: your profile, skills, work area, availability and application details.

What we have to keep

The law requires us to keep some data for longer. We then use it only for that purpose:

• invoices, bookings and payments: 7 years for accounting, 10 years for tax records;
• for fiksers: national register number, earnings, 281.29 forms and DAC7 data, 10 years for the tax authorities;
• data about an open report or dispute, until it is closed.

Deleting only part of your data

Want to keep your account but have some data erased, for example your chat messages or profile photo? Email info@fiksit.app and tell us which data. More about your rights in article 7 below.

1. Who we are

Fiksit is a Belgian platform that connects consumers with neighbours ("helpers") for small jobs such as assembly, small repairs, garden maintenance, lifting & moving help and ironing & folding. Fiksit only launches once recognised as a collaborative economy platform by the Belgian tax authority (FOD Financiën). The application is submitted after the company (BV) is set up, and we go live as soon as the recognition comes through. Helpers then work under the collaborative economy status (10.7% withholding at source, form 281.29, ceiling €7,890 in 2026, legal basis art. 90, 1°bis ITC 92 and RD 12 January 2017). Fiksit is operated by SAMABRO BV (trading as Fiksit), enterprise number BE 1039.643.822, with registered office at 1602 Sint-Pieters-Leeuw (Vlezenbeek), Belgium.

By "we", "our" or "Fiksit" we mean SAMABRO BV (trading as Fiksit). By "you" we mean the user (consumer or helper) who uses the app or website.

This privacy policy explains which personal data we collect, why, how we use it and what rights you have.

2. Which data we collect

2.1 Data you provide directly

• Account: first name, last name, e-mail address, password (hashed), phone number (optional), language preference, profile picture
• Helper identification: date of birth, national register number (for collaborative economy recognition), bank account number (IBAN for payouts)
• Addresses: street, postal code, municipality, GPS coordinates, labels (e.g. "Home", "Parents")
• Bookings: service, date/time, duration, price, notes to helper
• Messages: all chat conversations between consumer and helper
• Photos: before/after photos for each job, uploaded by the helper
• Reviews: star rating and textual reviews

2.2 Data we collect automatically

• Location: during an active session as helper (GPS check-in/out), or when entering an address as consumer
• Device data: operating system, app version, push token (Expo)
• Usage data: which screens you visit, which buttons you use (via PostHog analytics)
• Crash reports: error message, device model and app version when the app crashes (via Sentry); no message or photo content
• Log files: IP address, timestamp, URLs used, error messages

2.3 Data from third parties

• Stripe: payment data is processed by Stripe Payments Europe (Ireland) — we only receive transaction IDs and status, not card numbers
• Stripe Connect: Stripe checks your identity when the payout account is created, for its own legal obligations. We do not ask for or keep a photo or copy of your identity card. The national register number does not come through this channel: we request it separately, because it is required for the 281.29 tax form and DAC7 reporting.
• Apple/Google: with social login we receive name + e-mail as you authorised

2.4 Special categories of personal data (GDPR art. 9)

Fiksit processes no special categories of personal data (health, race, ethnic origin, religion, biometric data, sexual orientation, political opinions, etc.) — unless a user voluntarily shares them in a task description or chat message (e.g. "dust-free please due to asthma"). In that case:

• They are used only for the specific assignment
• They are not stored in a structured or searchable way
• They are automatically deleted at the standard chat history retention period (2 years)
• Helpers are explicitly trained to treat such information confidentially

3. Why we process this data

4. With whom we share data

We do not share your data with third parties for commercial purposes. We do share with the parties in the table below — only to the extent necessary for the operation of the Platform or as legally required:

Fiksit never sells your data to third parties for commercial purposes.

5. International transfers

Some of our processors (Resend, Expo) are based outside the EEA. We ensure an adequate level of protection via Standard Contractual Clauses (EU 2021/914) or via an adequacy decision of the European Commission.

6. How long we retain data

7. Your rights (GDPR art. 15-22)

You have the right to:

• Access to your data (art. 15) — request an export via your profile
• Rectification of incorrect data (art. 16) — directly via your profile
• Erasure ("right to be forgotten") (art. 17) — via your profile → Delete account, or e-mail to info@fiksit.app
• Restriction of processing (art. 18)
• Portability (art. 20) — request a JSON export
• Objection to processing based on legitimate interest (art. 21)
• Not be subject to automated decision-making (art. 22) — our helper ranking is automated; you can request human intervention by contacting us
• Right to withdraw consent: for processing based on your consent (e.g. marketing e-mails, cookie categories) you can withdraw consent at any time via your profile settings or the cookie banner. Withdrawal does not affect the lawfulness of processing before the withdrawal.

Filing a complaint: You can always file a complaint with the Belgian Data Protection Authority (Rue de la Presse 35, 1000 Brussels).

8. Security

• Passwords are hashed with bcrypt
• All connections via HTTPS (TLS 1.3)
• Database access via Row-Level Security (PostgreSQL RLS)
• Multi-factor authentication available for admin accounts
• Pen-test at minimum yearly
• Data breach notification within 72h to the Data Protection Authority (GDPR art. 33)

9. Changes to this policy

We can change this policy. For material changes we will send you an e-mail or in-app notification at least 30 days before entry into force. The version history is at the bottom of this page.

10. Contact

Questions about your data or this policy? E-mail info@fiksit.app.

To exercise your rights (Art. 15-22 GDPR), we do not ask for a copy of your identity card. If we doubt that the request really comes from you, we ask you to send it from the email address of your account, or to confirm it while logged in.

Version history

• v1.0 (11 May 2026): first version, drafted by Sam Knaepen
• v1.1 (11 October 2026): OpenAI extended to the booking assistant and photo and introduction moderation, based on consent; Sentry added
• v1.2 (15 October 2026): no Stripe Identity and no photo or copy of the identity card; identity is only checked by Stripe when the payout account is created