Privacy Policy
Last updated: 26 August 2026
Who we are
Forkpie is operated by Hangatonic S.R.L. (trade registry no. J12/6512/2017, fiscal code RO38521197), based in Cluj-Napoca, Romania. We are the data controller for the personal data described here. You can contact us at hello@forkpie.com. This policy applies to the forkpie.com website and to the Forkpie app. Most of it applies to both. Where the two work differently, the section says which one it refers to.
What data we collect on the website
Email address. If you join the beta or ask for tips, we store your email address together with your language, the topic you signed up from, and the campaign link you arrived through, if there was one. Beta applicants also tell us which phone they use, which store account the invite should go to, and which topics they want help with. We use this only to send you what you signed up for and to run the test programme. Every email contains an unsubscribe link. Legal basis: consent, GDPR art. 6(1)(a). Sugar Detective photos. The photo you upload is analysed once and then discarded. We do not save it, we do not use it for training, and it is not linked to you. Legal basis: performance of the service you requested, art. 6(1)(b). Your child's age range. We ask only for a range, such as 3-5 or 6-11. We never ask for a name or a date of birth on the website. In Sugar Detective the range is sent with the photo so that the result can be compared against the correct daily limit, and it is not stored. If you sign up for the beta, the range is stored with your email address and deleted together with it. Contact messages. If you write to us through the contact form, we store your message, your email address, and your name if you give one, so that we can reply. We use it only to answer you. Legal basis: our legitimate interest in responding to enquiries, art. 6(1)(f).
What data we collect in the app
The app stores what you put into it. Your meals and your child's profile stay in your account so that the app can show them back to you over time. Account details. Your email address and the sign-in method you chose: a password, or Google, Facebook or Apple. Legal basis: performance of the service, art. 6(1)(b). Child profile. When you add a child, you provide a name, date of birth, sex, height, weight and activity level. You can also add a photo, the areas you want help with, and foods your child likes. Height and weight are health data under the GDPR, and we use them to calculate daily nutrition targets. Legal basis: your explicit consent for the health data, art. 9(2)(a), and performance of the service for the rest. Meals. The photos you take, the meals you type in, and the analysis produced from them. These stay in your account until you delete them. Legal basis: performance of the service, art. 6(1)(b). Corrections and feedback. If you correct an analysis, or tell us how a meal went, we store that and use it to improve the suggestions you are shown. Legal basis: performance of the service, art. 6(1)(b). Analysis records. For each analysis we keep a technical record of the request we sent for analysis and the response we received, so that we can investigate a result that looks wrong. These records are deleted after 90 days. Legal basis: our legitimate interest in maintaining the service, art. 6(1)(f).
Usage statistics and crash reports
The website and the app both use Google Analytics to measure which pages and screens are used, and Firebase Crashlytics to report errors. These services receive general categories rather than details. They receive an age range instead of an age, for example. They do not receive names, dates of birth, photos, or the contents of a meal. On the website, neither runs until you accept analytics cookies. In the app, both follow the analytics setting under Settings. Legal basis: consent, art. 6(1)(a).
Who processes data for us
Google. Firebase and Google Cloud store your account, your child's profile, your meals and your photos within the European Union. Google Analytics and Crashlytics are Google services as well; statistical data from these may be processed outside the EU, under the European Commission's standard contractual clauses and its adequacy decision for the EU-US Data Privacy Framework. Analysis providers. The photos and meal descriptions you submit are analysed by automated services. These run within the European Union. MailerLite. An email platform based in the EU. It stores the addresses of people who signed up through the website. Netlify. Hosts the website. All of them process data only on our instructions. If you want to know exactly which providers we use, write to us and we will tell you.
How long we keep things
Sugar Detective photos are not stored at all. Email addresses are kept until you unsubscribe, or until two years have passed with no activity from you. Beta signup details are deleted together with the signup. Everything in your app account, including your child's profile, your meals, your photos and the preferences built up from your corrections, is kept while the account exists and is deleted when you delete the account. Analysis records are deleted after 90 days. Contact messages are kept while we deal with your question and for up to a year afterwards, then deleted.
Children
Forkpie is intended for parents. Children are not users of the website or the app, and we do not knowingly collect data directly from a child. On the website we only ever ask for an age range, never a name or a date of birth. In the app you create a profile for your child and decide what it contains. The profile exists so that an analysis can be matched to the right age. You can edit or delete it at any time. When using Sugar Detective, please avoid uploading photos that show people. A picture of the food or its packaging is all Kipi needs.
Cookies
Cookies apply to the website only. The app does not use cookies, although it asks the same question about analytics in its settings. Your cookie choice is stored, so that you are not asked again. Google Analytics cookies are set only if you enable analytics, and you can disable them at any time through the "Cookie preferences" link in the footer. We do not use marketing or advertising cookies. If that changes, they will be disabled by default and used only with your explicit consent.
Your rights
You can ask us to give you a copy of your data, to correct it, delete it or export it, to restrict how it is processed, or to object to the processing. You can withdraw consent at any time. Write to hello@forkpie.com and we will reply within 30 days. If you are not satisfied with our response, you can complain to the Romanian supervisory authority, ANSPDCP (dataprotection.ro), or to the data protection authority in your own country.
Changes
If this policy changes, we will update the date at the top. If a change materially affects people whose email addresses we hold, we will tell them by email.