Privacy Policy
1. Who we are
Forkless is a meal-planning app from Forkless based in Kirkland, WA. We’re the team behind forkless.app. If you have questions about your data, email [email protected].
2. What we collect
Right now (waitlist phase): Forkless is a waitlist. When you join, we collect your email address (so we can tell you when the app is ready). That’s it. No third-party advertising trackers on forkless.app, and no tracking pixels in email beyond standard open/click counts.
When the iOS app launches, creating an account adds:
- Account info: email, password (hashed), display name.
- Your food profile: intolerances, dietary mode, household size, and the optional refinements you add (cooking skill, prep-time limits, macro goals, appliances, cuisine preferences).
- Your meal plans and recipe history: what we generated, what you swapped, what you cooked.
- Pantry contents, if you choose to track them.
- Barcode scans, when you use the pantry scanner.
- Your grocery retailer connection, if you link one (an OAuth token; we never see your retailer password).
- Basic device and usage data: device type, app version, crash reports, which screens you used and when. We use this to fix bugs and to know which features are working.
We do not collect: precise geolocation, contacts, photo library, microphone, health/HealthKit data, or advertising identifiers (IDFA).
3. Why we collect it
- Waitlist email: to email you when Forkless is ready, and occasionally before that with launch news. You can leave the list any time. Every email has an unsubscribe link.
- Your food profile: to generate meal plans you can actually eat. If you tell us you’re allergic to peanuts, we use that to filter every recipe.
- Your meal plans and history: so the app remembers what you’ve cooked, what you liked, and what to suggest next.
- Your grocery retailer connection: so the in-app order handoff actually puts groceries in your cart. We use your retailer account only when you tap that button.
- Device and usage data: to fix bugs, understand which features matter, and keep the app fast.
We do not sell personal information. We do not share personal information with third parties for cross-context behavioral advertising.
4. Who we share it with
We share data with the vendors who help us run Forkless. We don’t sell your data and we don’t share it for advertising.
| Provider category | What we share | Why |
|---|---|---|
| Email service provider | Email, first name, engagement events | Sends our waitlist and transactional email |
| Cloud hosting provider | All application data (in transit and at rest) | Hosts our backend |
| Managed database provider | All persistent application data | Stores our database |
| Error monitoring provider | Crash reports and stack traces | Diagnoses outages and bugs |
| Product analytics provider | Event analytics (sanitized of intolerance data) | Product analytics |
| Connected grocery retailer | Grocery list and store ID, when you submit an order | Cart fulfillment (post-launch) |
| Open product database | The barcode you scan | Product lookup (post-launch) |
| AI language model provider | Recipe text and dietary constraints (no name, email, or account info) | Recipe parsing and meal-plan narrative (post-launch) |
| Recipe and nutrition data provider | Recipe queries (no account info) | Recipe corpus and nutrition data (post-launch) |
We share data with law enforcement only when legally required (subpoena, court order, etc.).
5. How long we keep it
- Waitlist signups: until you unsubscribe, or until two years after launch if you never activated an account, whichever is sooner.
- Account data (post-launch): for as long as your account is active. If you delete your account, we delete your profile, plans, history, and pantry within 30 days. Some backups may persist for an additional 90 days before they roll off.
- Anonymized usage data: we may keep aggregate, non-identifying analytics indefinitely.
- Recipe content from third-party APIs: never persisted longer than the cache windows the vendor permits.
6. Your rights
You can:
- See what we have on you. Email [email protected] and we’ll send you your data.
- Correct it. Same email, or edit it in the app once we ship.
- Delete it. Email [email protected] or, after launch, use the in-app account-deletion screen. We delete within 30 days.
- Leave the waitlist. Every email has an unsubscribe link.
- Export it (post-launch). We’ll give you your meal plans and profile in a portable format.
Regional rights
California (CCPA/CPRA): you have the right to know, delete, correct, and opt out of sale (we don’t sell) and sharing for cross-context behavioral advertising (we don’t share for that purpose), and to limit use of sensitive personal information. We won’t discriminate against you for exercising these rights.
EU / UK (GDPR): you have the right of access, rectification, erasure, restriction, portability, and objection. Forkless complies with GDPR/ePrivacy from launch (we don’t geo-fence). Lawful basis: consent for waitlist email; contractual necessity for account features; legitimate interest for analytics and crash reporting.
To exercise any of these rights, email [email protected] from the address on file. We’ll respond within 30 days.
7. Children
Forkless is for adults. You must be 18 or older to use the app or join the waitlist. We don’t knowingly collect data from anyone under 18. If you think your child signed up, email [email protected] and we’ll delete the account.
8. Security
We use HTTPS everywhere. Passwords are hashed with bcrypt; we don’t see them. Retailer OAuth tokens are encrypted at rest with an application-layer key. Our managed database and hosting providers offer encryption at rest by default. We do regular security reviews. No system is perfectly secure, but we treat your data like it’s our own, and we’ll notify you within the timeframes required by law if anything goes wrong.
9. Changes to this policy
If we change this policy in a way that affects you, we’ll email everyone on the waitlist (or, after launch, everyone with an account) at least 30 days before the change takes effect. Smaller edits get posted here with an updated “last updated” date. We won’t sneak changes in.
10. Contact & legal
Privacy questions: [email protected].
Everything else: [email protected].
Mailing address:
Forkless
PO Box 14511
218 Main St
Kirkland, WA 98034
Governing law: Washington State.
Disputes: resolved by binding arbitration. By using Forkless you agree that any dispute arising out of or relating to this policy or our services will be resolved through individual binding arbitration rather than in court, except where prohibited by law.