Privacy policy

Last updated October 8, 2026

forkit (the website at forkit.us and the iPhone app) keeps only what it needs to run your recipes, list and meal plan. There are no ads and no tracking, and we never sell your data.

What we store

• Your account: name, @username, email, an optional profile photo and your settings. Your password is stored only as a secure hash; passkeys are stored as public keys.
• What you make: recipes, photos, cook notes, saved recipes, collections, your household’s grocery list and meal plan.
• Your household: its name, members and time zone (so reminders arrive in the morning where you are).
• Devices: when you allow notifications, a push token from Apple so we can send them; the names of devices signed in to your account, so you can sign them out.
• Safety records: the IP address you signed up from, and a record of content our checks turned away, to stop spam and abuse.
• Support payments, if you choose to give: the amount and date, and a Stripe customer id. Card details go straight to Stripe and never reach us.
• Email you send to [email protected], so we can answer it.

We don’t collect your location, contacts or anything from other apps, and we don’t use analytics or advertising trackers.

Cookies and on-device storage

The website uses one cookie to keep you signed in. The website and the app keep a copy of your grocery list on your device, so it works with no signal.

Who sees what

• Private recipes: only you.
• Household recipes, the grocery list and the meal plan: the people in your household.
• Public recipes: anyone, including search engines. Your name, @username and profile photo show on them.
• People you invite to edit a recipe can see and change that recipe.

Services that help run forkit

These companies process data for us, only to provide forkit:

• DigitalOcean: hosting, the database and photo storage.
• Anthropic (Claude): reads recipes you import (a link, pasted text or a photo) to pull out the ingredients and steps. It also checks photos and public recipes against the community rules, and suggests meals if you use “Plan my week”. Anthropic doesn’t use this data to train its models.
• Resend: sends account emails (confirmations, password resets) and receives mail sent to forkit.us addresses.
• Apple: delivers push notifications.
• Stripe: handles support payments.

How long we keep it

• Your account and content stay until you delete them.
• Items cleared from the grocery list can be put back for 24 hours, then they’re gone.
• Photos uploaded but never added to a recipe are deleted after a day.
• Records of payments are kept as long as tax law requires.

Deleting your account

Delete it any time in Settings → Delete account (on the website or in the app). This removes:

• your private recipes and their photos
• your notes, saves and collections
• your sign-ins and devices
• any monthly support, which is cancelled

Two exceptions. Public recipes stay up, credited to “Deleted user” rather than you, because others may have saved or forked them. Household recipes pass to another member of your household. Content locked for a serious safety reason may be kept where the law requires it.

You can also email us to ask for a copy of your data, a correction or deletion.

Children

forkit isn’t meant for children under 13, and we don’t knowingly collect their data. If you think a child has signed up, email us and we’ll delete the account.

Changes

If this policy changes in a way that matters, we’ll update the date above, and for big changes we’ll email you.

Contact

Questions or requests: [email protected].