FixMyFallout Privacy Notice

FixMyFallout is a conflict resolution platform designed to help teenagers work through friendship fallouts in a safe, private, and neutral way. It is a direct-to-consumer service, any young person can use it without needing to go through a school.

Platform name

FixMyFallout

Website

fixmyfallout.com

Contact email

help@fixmyfallout.com

As the data controller, we are responsible for deciding how and why your personal data is used. This privacy notice explains everything you need to know.

This notice is for anyone who uses FixMyFallout, including:

• Teenagers who start a case (we call you Teen A)
• Teenagers who receive an invite and respond (we call you Teen B)
• Parents or carers reading this on behalf of a young person
• Schools or organisations registering interest in the school version

If you are under 13, please read this with a parent or trusted adult.

We collect as little data as possible. Here is exactly what we collect and why:

3.1 When you start or respond to a case

Your nickname or first name

So the other person knows who is reaching out. You choose what to share, a real name, a nickname, or just an initial.

What happened

Your description of the situation, in your own words. This is read by our AI to generate a neutral summary.

How you are feeling

Your feelings about the situation. Read by the AI only.

What you would like to happen

Your preferred outcome. Read by the AI only.

Any extra context

Optional. Only if you choose to add it.

Your goal selections

The goals you select from our list (e.g. rebuild the friendship, get an apology). Used by the AI to find common ground.

3.2 Optional email address

You can optionally give us your email address for two purposes only:

• So we can send you your invite link and case link in case you lose them
• So we can notify you when your outcome is ready

We will never use your email for marketing, newsletters, or any other purpose. Your email address is deleted automatically when your case closes.

3.3 Anonymous session

When you visit FixMyFallout, we automatically create an anonymous session. This generates a hidden unique ID for your session. You never see this ID and no personal information is attached to it. It is used solely to link your submissions to your case securely, without requiring a username or password.

We also give you a recovery code after you submit, a short code like TEAL-7842-MOON, so you can access your case on a different device if needed.

3.4 Safety flag records

If our system detects content in a submission that suggests a young person may be at risk, we record a safety flag. This contains the type of concern detected and the date. It does not contain the full submission text if the submission was not saved. Safety flag records are retained for 30 days and then deleted.

3.5 School interest registrations

If a school representative fills in our interest registration form, we collect: school name, contact name, role, and email address. This data is used only to follow up about the school version of FixMyFallout. It is never shared with third parties.

We want to be clear about what we never collect:

• Full names (only nicknames or first names, by choice)
• Dates of birth or age
• Photographs or profile pictures
• Location data
• Device identifiers or IP addresses stored against your case
• Social media accounts or usernames
• Any information about your school unless you choose to mention it in your submission

Neither teen ever sees the other's raw submission. Teen A cannot read what Teen B wrote, and Teen B cannot read what Teen A wrote. Both teens only ever see the neutral AI-generated summary.

FixMyFallout uses an AI model to read both submissions and generate a neutral summary and suggested shared steps. Here is exactly how it works:

We keep your data for the shortest time necessary:

Case submissions and form responses

Automatically deleted 90 days after the case is created

Goal selections

Automatically deleted 90 days after the case is created

Your nickname

Automatically deleted 90 days after the case is created

Optional email address

Deleted when the case closes or after 90 days, whichever comes first

Anonymous session ID

Deleted when the case is deleted

AI-generated summary

Automatically deleted 90 days after the case is created

Safety flag records

Retained for 30 days after the flag was raised, then deleted

School interest registrations

Retained until you ask us to delete them or the school version launches

Anonymous case reference

Retained indefinitely for operational records only, with no personal content attached

Our auto-delete function runs every night and permanently removes all personal content from cases that have reached their retention limit.

Under UK GDPR, you have the following rights regarding your personal data:

Right to delete (erasure)

You can delete your case at any time by visiting your case page and choosing ‘I want to stop this case’. This permanently removes all your submitted content. If you cannot access your case, email us at help@fixmyfallout.com and we will delete it manually within 48 hours, no questions asked.

Right to access

You can ask us to tell you what personal data we hold about you. Contact us at help@fixmyfallout.com.

Right to correct

If any information we hold about you is inaccurate, you can ask us to correct it.

Right to object

You can object to us processing your data in certain circumstances.

Right to complain

If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO).

FixMyFallout includes safety features designed to protect young people:

Keyword screening

Every submission is automatically scanned for words or phrases that may indicate a young person is at risk of harm, including references to self-harm, abuse, or feeling unsafe. If anything is detected, the platform stops the process and directs the young person to appropriate support services including Childline (0800 1111) and Shout (text HELLO to 85258).

Bullying detection

If a submission suggests the situation involves bullying rather than a one-to-one fallout, the platform shows a prompt encouraging the young person to also speak to a trusted adult, while still allowing them to continue with FixMyFallout if they choose.

AI safety layer

The AI itself is also instructed to flag any submission it considers concerning, even if it did not trigger the keyword filter. In those cases, the AI will not generate a summary and the platform routes the young person to support resources.

Safety flag records

When a safety concern is detected, a record is created in our database. At present, because FixMyFallout is a direct-to-consumer platform, these records are reviewed by FixMyFallout staff only. A school-integrated version with direct DSL notification is under development.

FixMyFallout does not use advertising cookies or tracking cookies. We do not use Google Analytics, Meta Pixel, or any third-party advertising or tracking technology.

We use only the following:

• Authentication cookies, these are essential for your anonymous session to work and cannot be switched off
• Local storage, used temporarily to save your form progress while you are filling it in. This is cleared once you submit.

We do not sell your data. We do not share your data with advertisers. FixMyFallout products are ad-free.

All personal data is stored in the United Kingdom and the European Union only:

Database

EU West (London) region

AI processing

Submissions are sent to our AI provider server-side for processing only. Data is not retained by the AI provider after processing.

Email delivery

Used only to send case links and outcome notifications if you opt in

Hosting

EU/UK region servers

We use row-level security on our database, meaning each case is only accessible to the people directly involved in it. All connections are encrypted using HTTPS. Anonymous session tokens are used instead of passwords.

FixMyFallout is designed to be used by teenagers. We take the privacy of young people seriously and have designed the platform in line with the ICO's Age Appropriate Design Code (also known as the Children's Code).

Our approach includes:

• Collecting the minimum data necessary for the platform to work
• Never using children's data for advertising or profiling
• Providing a simple, accessible privacy notice in plain English
• Giving young people easy control over their own data including the right to delete
• Designing safety features with the best interests of the child as the primary consideration
• Not sharing personal data with third parties beyond what is strictly necessary to operate the service

If you are a parent or carer and have questions about how your child's data is handled, please contact us at help@fixmyfallout.com.

We may update this privacy notice from time to time as the platform develops. When we make significant changes, we will update the version number and date at the top of this document. We encourage you to check back periodically.

The school version of FixMyFallout, when launched, will have its own supplementary privacy notice covering school-specific data flows including DSL notifications and school-level reporting.

If you have any questions about this privacy notice or about how we handle your data, please contact us:

Email

help@fixmyfallout.com

Response time

Within 48 hours for deletion requests, within 30 days for all other requests

You can also request deletion of your case at any time directly through the platform by visiting your case page and choosing ‘I want to stop this case’, or by starting from the Recover a case page.