Privacy Policy

Last updated: 2026/11/08

What personal data FixImage collects, why, and how it is handled — including the images you upload and the AI providers that process them

What this policy covers

This Privacy Policy explains what personal data FixImage collects, why, and how it's handled when you use FixImage, an online service for fixing, retouching and editing photos at fiximage.net.

FixImage is operated by a company registered in England and Wales, and is the "controller" of your personal data. That means FixImage decides what data is collected and why, and is responsible for looking after it under the UK GDPR and the Data Protection Act 2018.

Information FixImage collects

Account information. When you sign in with Google, FixImage receives your name and email address, and creates an account identifier for you.

Photos you upload for AI edits. You can upload images for the AI photo tools, together with any instructions you type, such as the text or numbers you want changed. These images may show identifiable people, including you, friends, family, or pets. This is the most sensitive information FixImage handles, and you are responsible for having the right to upload any image you submit — including the consent of any identifiable person shown in it.

Results. FixImage creates and stores the images produced by your AI edits.

Free image tools. You can use the free image tools, such as Photo to Scan or Repair Corrupted Image, without an account, and FixImage does not keep the files you use with them or the results.

Your asset library. Images you upload are also saved to your private asset library so you can reuse them in later edits. Only you can see your library.

Prompts you ask FixImage to improve. If you use "Improve prompt with AI", the text in the prompt box is sent to an AI model to be rewritten. FixImage does not keep a copy of that text or of the rewritten prompt beyond returning it to you.

Public results and reviews. If a result is public, or you submit a review, FixImage stores the public copy and the outcome of our review (see "Public results" and "Reviews" below).

Usage and technical data. Like most web services, FixImage's servers log information such as your IP address, browser and device information, and pages you visit.

Billing records. FixImage keeps a record of your purchases, renewals, cancellations, refunds and payment disputes, together with your credit balance and how credits were spent. These records let us apply the 7-day refund rule, which looks at the date of each payment and the credits used since then. Full card numbers are handled directly by our payment processors and are not stored by FixImage.

Emails you send us. When you write to support, for example a message with the subject "Refund Request", we keep your email address, what you wrote and anything you attach, such as an invoice number or the details of an edit. We use them to answer you, check your request against your account records and keep a record of the outcome.

Why FixImage processes your data

FixImage processes your data on these legal bases:

To perform our contract with you — creating your account, making the AI edits you request, managing your credits and subscription, showing public results made on the free plan as described below, and handling cancellations, refund requests and support emails.
For FixImage's legitimate interests — keeping the service secure, preventing abuse, and understanding usage through server logs.
With your consent — for optional communications, such as a newsletter you choose to sign up for, and for anything you choose to make public on a paid plan: results you switch to public and reviews you submit. You can withdraw that consent as described below.

Photos for AI edits are sent to AI model providers

To make an AI edit, the photo you upload and the instructions for that edit are transmitted to third-party AI model providers, who perform the actual edit. This is a core part of how FixImage's AI tools work — FixImage does not run these models itself. Only what is needed for the selected edit is sent. The free image tools do not use AI model providers. Content safety processing is described separately below.

Content safety checks and reports

What we check and why

FixImage checks prompts and instructions, uploaded images and results against our content standards. Necessary material is sent to third-party content safety services to prevent abuse and enforce our service contract. Requests that fail these checks are blocked before the edit starts; results that fail checks are withheld from delivery. If a check cannot be completed, the request or result is not treated as approved. These checks do not make your private content public.

Document-type check

The text, number, date and screenshot editing tools, and AI edits that follow your own instructions on an uploaded image, first send each uploaded image to an AI provider that identifies whether it is an identity document, a bank statement, a payment confirmation, a receipt or invoice amount, or a medical, legal or government document. If it is, or if the check cannot be completed, the edit is declined and no credits are used. We keep the outcome of the check, meaning the document categories and confidence scores, and not a copy of the image. These records follow the retention and deletion rules for safety records below.

Content standards

Prohibited content includes adult pornography, sexual exploitation of minors, non-consensual intimate content, graphic violence, hateful or harassing content, assistance with self-harm, fraud and other malicious activity. See our Terms of Service for the full standards and their context. Safety checks can make mistakes and do not guarantee detection of every violation.

Records and provider processing

We keep limited records of safety decisions, provider request identifiers, content fingerprints, timing and usage for safety, reliability, abuse prevention and necessary legal obligations. A fingerprint is not a copy of your prompt or media. Deleting a file or account does not immediately erase all necessary safety records or reset abuse-prevention limits.

Safety providers process and retain submitted material under their own data-handling arrangements. Where supported, we request deletion of temporary processing copies and follow up on unconfirmed deletions. Removing your local file or withdrawing access does not itself delete a provider's stored copy. We cannot guarantee that all provider copies or logs are deleted immediately.

Reports, review and your rights

You can report suspected violations or ask our team to review a safety decision you believe is mistaken. We process the information you provide to assess and respond to the request. Contact us for a report, review request, questions about this processing or to exercise your data rights.

Who FixImage shares data with

FixImage uses the following categories of service providers to operate:

Cloudflare — for hosting, our database, private file storage of your uploads, asset library and results, sending transactional email such as account or billing notices, and the optional "Improve prompt with AI" feature, which rewrites your prompt using Cloudflare Workers AI.
AI model providers — to make AI edits from the photos and instructions you provide.
Content safety providers — to run the document-type check and to check the necessary prompts, uploaded images and results against our content standards, as described above.
Payment processors (currently Stripe) — to process your purchases. They receive your payment details directly; FixImage does not store full card numbers.
Resend — if you opt into a newsletter or other marketing email, Resend may be used to send it.
Google — to authenticate your sign-in.

FixImage does not sell your personal data, and does not share your uploaded images or results with advertisers or data brokers.

Public results

Results made on the free plan, including with no-sign-up trial credits, are public. With a subscription or credit pack, results start private, and you can switch the Public Visibility setting on before an edit if you want that result to be public.

Every public result is reviewed by our team first. It is only shown on the FixImage website after it is approved. We may decline any result, for example if it shows a person who may not have agreed to it, a minor, or explicit content.
What becomes public: the result image, plus your prompt and a nickname only if you chose to show them. Your name, email address and account details are never shown.
Anyone can view and save it while it is shown. Any visitor can view a public result that we show, and their browser or other tools can save a copy of it.
Withdrawing: you can withdraw a public result at any time by deleting it from your asset library or by contacting us. It stops being shown immediately; copies already cached by browsers or our content delivery network may take up to 5 minutes to disappear. Withdrawing cannot recall copies that visitors saved while the result was shown.
How long it stays: a public result is kept as a separate public copy until you withdraw it, we decline or remove it, or you delete your account. It is not affected by the automatic removal of results described below.

Reviews

After a successful AI edit, FixImage may invite you once to leave a review. If you submit one, it is reviewed by our team before it appears on the website. Only the rating, the text you wrote, and the name and role you chose to enter (if any) are shown — never your email address or profile photo. To have a published review removed, contact us. Reviews are deleted when you delete your account.

Sending data outside the UK

Some of these providers process data outside the UK, including in the United States. When personal data leaves the UK, FixImage relies on one of the transfer mechanisms UK data protection law allows: either the country has been judged by the UK government to offer adequate protection, or the transfer is covered by the UK's International Data Transfer Agreement (or the UK Addendum to the EU Standard Contractual Clauses), together with checks appropriate to the transfer.

If you would like more detail about the safeguards used for a particular provider, contact us.

How long FixImage keeps your data

FixImage keeps your account, uploads and results for as long as your account is active and as needed to provide the service. Uploads and results are removed automatically once they are no longer needed for the service to function.

Asset library. An image in your asset library is deleted automatically 90 days after you last used it, when you delete it yourself, or when your library goes over 200 images (the image you used least recently is removed first).

Generated outputs. Images produced by your AI edits, their preview thumbnails, and the instructions and settings of each request (including requests that did not complete) are deleted automatically 60 days after the request finishes. Download any you want to keep before then. Public results are kept separately, as described above.

Payment, refund and support records. Records of payments, refunds and disputes, and the support emails connected to them, are kept for as long as we need them to handle your account, answer disputes and meet accounting and tax obligations.

Public results and reviews. Public results are kept until you withdraw them, we decline or remove them, or you delete your account. Reviews are kept until they are removed at your request or you delete your account.

Reward fairness records. If you take part in our free reward programmes, such as the sign-up gift, the no-sign-up trial, daily check-ins or invitations, we keep limited records needed to apply their eligibility and fair-use rules. These can include purpose-separated irreversible keyed hashes derived from your email address, network address or a random browser identifier, the reward decision and reason, and anonymous invitation-graph nodes used to prevent invitation loops. We do not store the raw email address, network address or device characteristics in these records, and they are deleted automatically when they are no longer needed for these checks; most expire within 90 days, subject to the retention limits below. An inviter's random browser anchor remains while the invitation is active, because removing it earlier would disable the self-invitation check, and is removed once the invitation is completed, revoked or detached and the retention window has passed.

Limited records that survive account deletion: up to 90 days. When you delete your account, we retain a purpose-separated irreversible hash of your email address to stop immediate re-registration for sign-up or invitation rewards, plus any de-identified invitation-graph node needed to prevent reward loops. Sign-up eligibility records and their network or random-browser-identifier hashes are deleted with the account. To prevent abuse of free rewards, one-way hashes of device and network identifiers linked to rewards already given may be kept for up to 90 days after deletion. The retained records contain no account ID, name, raw email address, raw network address, or device characteristics; they cannot be used to contact you, and they are automatically deleted when the 90-day period ends. The email hash used for deletion cooldown is cryptographically separated from the email hash used for invitation checks, so those two datasets cannot be joined by equality.

If you delete your account, FixImage removes your stored data, including your uploaded images, asset library, results, public results and reviews, through an automated cleanup process. That process is designed to fail closed — if any required step does not complete successfully, your account is not marked as deleted. The limited, time-bound reward fairness records described above are deliberate exceptions. Necessary safety records and provider-held copies are also subject to the retention and deletion limits described under Content safety checks and reports. Reward eligibility rows that contain your account ID are deleted; financial ledger and lot records are retained only in anonymised form where required for balance integrity and audit.

Your rights

Under the UK GDPR you have the right to:

Access the personal data FixImage holds about you, and get a copy of it.
Correct data that is wrong or incomplete.
Erase your data ("right to be forgotten") — you can do this yourself by deleting your account. The retention limits and exceptions described above also apply, including those under Content safety checks and reports. As described above, an irreversible hash of your email address is retained for up to 90 days to prevent immediate re-registration for rewards. FixImage relies on its legitimate interest in preventing fraudulent claims for this; it expires automatically and cannot be used to identify or contact you.
Restrict or object to processing based on legitimate interests.
Port your data — receive it in a portable format, or have it sent to another provider.
Withdraw consent at any time, where processing is based on consent (such as a newsletter).

To exercise any of these rights, contact us. FixImage will respond within one month. Using these rights is free, and FixImage will not treat you differently for doing so.

Complaining to the ICO

If you think FixImage has mishandled your personal data, please contact us first so it can be put right. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk or on 0303 123 1113. Complaining to FixImage first is not a precondition — you can go to the ICO directly.

Children's privacy

FixImage is not intended for anyone under 13. Under UK data protection law, 13 is the youngest age at which someone can consent to an online service on their own. Anyone under 18 should use FixImage only with a parent or guardian's permission, and purchases must be made by an adult (see our Terms of Service). FixImage does not knowingly collect personal data from children under 13 — if you believe a child has created an account or uploaded images, please contact us so it can be removed.