Privacy Policy

1. Introduction

This Privacy Policy describes how we collect, use, and protect your personal information when you use Whisk, our iOS mobile application for saving and organizing recipes.

For questions or concerns, contact us at hello@forkflow.io.

2. Information We Collect

2.1 Information You Provide

• Account Info: Email address and authentication data via Apple Sign-In or Google Authentication.
• Recipe Content: Text, links, and images you input or upload.
• User-Generated Data: Notes or photos attached to saved recipes.

2.2 Automatically Collected

• Usage Data: Interactions with the app, collected via PostHog.
• Device Info: iOS version, device model, and identifiers.
• Performance Logs: IP address, error reports, performance data.
• Subscription Data: Purchase history via RevenueCat.

2.3 Recipe Extraction

If you share recipe links (e.g., from websites or videos), we use services like RapidAPI and Google AI to extract structured information (e.g., ingredients, steps, images). We do not access your social media accounts or credentials.

3. How We Use Your Data

• Enable core app features like saving, organizing, and formatting recipes.
• Improve app performance and usability through analytics (PostHog).
• Manage subscriptions and payments (RevenueCat).
• Provide customer support and send important notifications (if enabled).
• Cache images and content to speed up loading.

4. Third-Party Services

We use trusted infrastructure and tools:

• Firebase (Google): Hosting, auth, storage.
• Hetzner (EU): Additional infrastructure.
• RevenueCat: Subscription and billing management.
• PostHog: Privacy-respecting analytics.
• RapidAPI & Google AI: Recipe parsing and structuring.
• Expo: Push notifications (if enabled).
• Apple App Store: Payment processing.

All services operate under data protection agreements and follow GDPR standards where applicable.

5. Data Storage & Security

• Data is stored on Firebase (USA) and Hetzner (EU).
• We encrypt data in transit and at rest.
• Access is restricted to authorized personnel only.
• We do not sell or share your data with third parties for advertising.

6. Children's Privacy

The app is available for users aged 4 and up, but we do not knowingly collect personal data from children under 13 without verified parental consent. If we learn such data was submitted, we delete it promptly.

7. Your Rights (EU/GDPR)

You may request:

• Access to your data
• Correction or deletion
• Export of your recipes
• Restriction or objection to processing
• Account deletion

Contact us anytime at hello@forkflow.io.

8. Data Transfers

Data may be processed in the EU and USA. We ensure protection via:

• Standard Contractual Clauses (SCCs)
• GDPR-compliant agreements
• Technical and organizational safeguards

9. Payments

• All payments go through the Apple App Store.
• We don't store or access your credit card details.
• Subscription status is managed via RevenueCat.

10. Contact