Privacy Policy

1. Who controls your data

nemFIX is the data controller for the personal data described below. Questions or requests about your data can be sent to the support address shown in the app footer or your account page.

2. What we collect

• Account details — name, email, phone number, and a hashed password.
• Vehicle and claim details — registration plate, make/model/year, insurer, and a description of the damage.
• Damage photos, and an optional voice note describing the accident.
• Location — only if you choose to share it, to help prioritise nearby workshops.
• Basic visit analytics — which pages you visit and when, and an approximate country/city derived from your IP address at the time (the IP address itself isn't stored). This does not use cookies or local storage and cannot identify you individually or across days (see section 8).
• Messages you send in the in-app chat with your workshop, or in a bid's negotiation thread.
• Claim and bidding history — the requests you've submitted, bids received, and repair progress.

We don't ask for or knowingly collect health data. If you mention an injury in free text (notes, photos, or chat), please keep it to what's relevant to the vehicle damage — that kind of detail belongs with your insurer or healthcare provider, not this platform.

3. Why we process it, and on what basis

Most of what we collect is processed because it's necessary to provide the service you've asked for — coordinating a repair between you and a workshop (GDPR Art. 6(1)(b), performance of a contract). Location sharing is based on your consent and can be withdrawn at any time by not sharing it on future claims. We also process a limited amount of data on the basis of legitimate interest — for example, to detect fraud or abuse of the platform, and to understand how the app is used (basic page-visit analytics) so we can improve it.

4. Who sees your data

• The workshop you're matched with sees the claim and vehicle details needed to bid on and carry out the repair, and the chat messages you exchange with them directly.
• Your named insurer receives the claim details needed to process it, following your policy's normal process.
• nemFIX support/admin staff can see claim and account details for support and platform operation purposes. Chat messages between you and a workshop are not shown in the admin panel — support can only access a specific conversation where necessary, such as investigating a reported dispute or safety concern, and that access is limited to what the investigation requires.

We don't sell your personal data to third parties.

5. How long we keep it

We keep claim records, including chat history, for as long as your account is active and for a reasonable period afterwards to meet insurance and accounting record-keeping obligations. If you ask us to delete your account, we'll erase or anonymise personal data that we're not legally required to keep, and confirm once that's done.

6. Your rights

Under GDPR, you can ask us to:

• Give you a copy of the personal data we hold about you (access).
• Correct inaccurate data — or do it yourself from your account profile.
• Delete your data, subject to the retention needs described above (erasure).
• Restrict or object to certain processing.
• Give you your data in a portable format.

To exercise any of these, contact support. You can also lodge a complaint with your national data protection authority — in Denmark, the Datatilsynet.

7. Security

Passwords are stored hashed, not in plain text. Access to workshop and admin accounts requires authentication, and workshop staff can only see the claims assigned to their own workshop.

8. Cookies, local storage, and analytics

We use your browser's local storage to keep you signed in — there are no third-party advertising or tracking cookies.

To understand how the app is used — including by visitors who aren't signed in — we record which pages are viewed. This doesn't use a tracking cookie or write anything to your browser's storage. Instead, each visit is tagged server-side with a one-way hash of your IP address, browser type, and the current date, combined with a secret value we control. This hash changes every day and on its own cannot be reversed to your IP address or used to link your visits across different days, so on its own it does not identify you personally. We also derive an approximate country and city from the same IP address at that moment, using an offline lookup — the IP address itself is never stored, only the resulting location.

Separately, actions you take while filing or managing a claim — submitting it, accepting a bid, sending a bid message or chat message, leaving a review, reporting an issue, signing up, or logging in — are recorded against your account, since all of these already require being signed in. This is the same activity that already appears in your claim and bidding history (section 2), not a new category of data. We process all of this on the basis of legitimate interest (GDPR Art. 6(1)(f)) in understanding and improving the platform.

9. Where your data is stored

Data is stored on servers operated within the EU.

10. Changes to this policy

If we make a material change to what we collect or how we use it, we'll ask you to accept the new version the next time you log in before you can keep using your account.