Privacy Policy
Last updated 15 August 2026
The short version. Fork Ally is a paid-or-free app, not an advertising business. We do not sell your data, we do not share it with advertisers or data brokers, and there are no third-party trackers or ad SDKs in the app or on this website. Your food log, your weight and anything read from Apple Health are used to run the app for you and nothing else. You can export everything, or delete all of it, from inside the app.
This policy explains what Fork Ally (“the app”) collects, why, who else touches it, and how to get rid of it. Fork Ally is operated by Outer Creative, Inc. (“we”, “us”). If anything here is unclear, write to support@forkally.com and we will answer in plain language.
What we collect
| What | Why | Where it lives |
|---|---|---|
| Account details — your email address, and the name you choose to be called. If you use Sign in with Apple, we receive an opaque Apple identifier and whatever address you elect to share, including a private relay address. | To create your account, sign you in, and let you recover it. | Our database. |
| What you log — the foods, quantities, meals, recipes, pantry items, supplements and dietary restrictions you enter. | It is the product. It also backs up so a lost phone doesn't cost you your history. | Your device, and our database. |
| Body measurements — height, weight, body-fat percentage, lean mass and similar figures you enter or that come from Apple Health, plus body-composition scan reports you choose to upload. | To compute your calorie and macro targets and chart your progress. | Your device, and our database. |
| Apple Health data — weight, body fat and active energy, read only if you grant permission. | To keep your daily budget honest against what you actually burned. | Your device. Derived figures sync to our database as part of your account backup. |
| Diagnostics — crash reports and performance data, including device model and OS version. | To find and fix crashes. | Our database and our crash-reporting provider. |
| AI usage records — which feature you used, when, and how many tokens it cost. | To meter usage, enforce fair-use limits, and stop abuse. | Our database. These records do not contain your meal text. |
What we do not collect: we have no advertising identifier, no analytics SDK, no location tracking, no contacts access, and no cross-app or cross-site tracking of any kind. This website sets no cookies and loads nothing from anyone else's servers.
Dictation
When you tap the microphone, the app records what you say and sends that recording to our server, which passes it to Google's Gemini API to be turned into text. The audio is used for that one request and nothing else: we don't store it, and it is processed under Google's API terms, which do not permit it to be used to train their models. Only the resulting text is kept — in the field you were typing in — and it is analysed only if you then ask the app to.
Apple Health
Fork Ally reads from Apple Health and never writes to it. Access is entirely under your control in the Health app and can be revoked at any time.
Specifically, and as Apple requires us to state:
- Health data is used only to provide the app's features to you.
- Health data is never used for advertising or marketing, and is never used to target you with anything.
- Health data is never sold, rented, or disclosed to data brokers, insurers, employers, or any similar party.
- Health data is not shared with third parties except the infrastructure providers listed below who process it on our behalf in order to run the service.
How AI processing works
When you ask Fork Ally to interpret a meal description, a photo of a plate, a nutrition label, a recipe or a body-composition report, that content is sent — through our own server, over an encrypted connection — to an AI model provider to be turned into structured numbers.
- Your account identity is not sent to the model provider. The request carries the content and a label saying which feature it is for; it does not carry your name, email, or user ID.
- We use enterprise/paid API tiers, under which the provider does not use submitted content to train their models.
- The model's answer is stored for up to 48 hours so that the result can still reach you if your phone loses connection mid-request. After that it is deleted automatically.
- AI is only invoked when you ask for it. Foods that resolve from the database built into the app never leave your phone at all.
Who else touches your data
We use a small number of providers to run the service. They process data on our behalf, under contract, and may not use it for their own purposes.
- Amazon Web Services — hosting, database and storage (United States).
- Google — the AI model that interprets meals, labels and scans, via its paid API.
- Anthropic — an additional AI model used for reading body-composition scan reports.
- Sentry — crash and error reporting.
- Apple — Sign in with Apple, push notifications, and, if you subscribe, all payment handling. We never see your card details.
How long we keep things
- Your logged data — until you delete it, or delete your account.
- AI results — 48 hours, then deleted automatically.
- Diagnostics — up to 90 days.
- Usage records — kept while the account exists, for metering and abuse prevention.
Your choices
- Export — take a full copy of your data to your phone from Account → Back up my data.
- Delete — Account → Delete my account removes your account and everything attached to it from our servers, and wipes the copy on your phone. This is immediate and cannot be undone.
- Correct — every number in the app is editable, and the app keeps a change history so you can see what moved and why.
- Revoke Health access — at any time, in Apple's Health app.
Depending on where you live you may have additional rights over your personal data, including access, correction, deletion, portability, and the right to object to certain processing. The controls above cover most of these directly; for anything else, write to us and we will action it.
We have never sold personal information, and we do not “share” it for cross-context behavioural advertising, as those terms are defined under California law.
Security
Traffic is encrypted in transit. Data is encrypted at rest. Each account's rows are isolated at the database level, so one account cannot read another's even if application code is wrong. Passwords are stored only as salted hashes; we cannot read yours. No system is perfect, and we will tell you promptly if something happens that affects you.
Children
Fork Ally is not directed at children and is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has given us data, write to us and we will delete it.
International transfers
We operate from the United States and our infrastructure is hosted there. If you use Fork Ally from elsewhere, your data will be processed in the United States.
Changes
If this policy changes in a way that materially affects you, we will say so in the app before the change takes effect. The date at the top always reflects the current version.
Contact
Outer Creative, Inc.
support@forkally.com