Privacy Policy

Effective Date:

24.06.2023

Last Updated:

22.06.2026 — added Website, Cookies & Advertising disclosures

Company:

Forkflow sp. z o.o.

Address:

ul. Szlak 77/222, 31-153 Kraków, Poland

VAT:

PL9442274383

KRS:

0000936206

REGON:

520586960

1. Introduction

This Privacy Policy describes how we collect, use, and protect your personal information when you use Whisk, our iOS mobile application for saving and organizing recipes. Section 11 additionally covers our marketing website at trywhisk.com.

For questions or concerns, contact us at hello@forkflow.io.

2. Information We Collect

2.1 Information You Provide

• Account Info: Email address and authentication data via Apple Sign-In or Google Authentication.
• Recipe Content: Text, links, and images you input or upload.
• User-Generated Data: Notes or photos attached to saved recipes.

2.2 Automatically Collected

• Usage Data: Interactions with the app, collected via PostHog.
• Device Info: iOS version, device model, and identifiers.
• Performance Logs: IP address, error reports, performance data.
• Subscription Data: Purchase history via RevenueCat.

2.3 Recipe Extraction

If you share recipe links (e.g., from websites or videos), we use services like RapidAPI and Google AI to extract structured information (e.g., ingredients, steps, images). We do not access your social media accounts or credentials.

3. How We Use Your Data

• Enable core app features like saving, organizing, and formatting recipes.
• Improve app performance and usability through analytics (PostHog).
• Manage subscriptions and payments (RevenueCat).
• Provide customer support and send important notifications (if enabled).
• Cache images and content to speed up loading.

4. Third-Party Services

We use trusted infrastructure and tools:

• Firebase (Google): Hosting, auth, storage.
• Hetzner (EU): Additional infrastructure.
• RevenueCat: Subscription and billing management.
• PostHog: Privacy-respecting analytics.
• RapidAPI & Google AI: Recipe parsing and structuring.
• Expo: Push notifications (if enabled).
• Apple App Store: Payment processing.

All services operate under data protection agreements and follow GDPR standards where applicable.

5. Data Storage & Security

• Data is stored on Firebase (USA) and Hetzner (EU).
• We encrypt data in transit and at rest.
• Access is restricted to authorized personnel only.
• We do not sell your personal data, and we do not share app data with third parties for advertising. (For advertising measurement on our website, see Section 11.)

6. Children's Privacy

The app is available for users aged 4 and up, but we do not knowingly collect personal data from children under 13 without verified parental consent. If we learn such data was submitted, we delete it promptly.

7. Your Rights (EU/GDPR)

You may request:

• Access to your data
• Correction or deletion
• Export of your recipes
• Restriction or objection to processing
• Account deletion

Contact us anytime at hello@forkflow.io.

8. Data Transfers

Data may be processed in the EU and USA. We ensure protection via:

• Standard Contractual Clauses (SCCs)
• GDPR-compliant agreements
• Technical and organizational safeguards

9. Payments

• All payments go through the Apple App Store.
• We don't store or access your credit card details.
• Subscription status is managed via RevenueCat.

10. Contact

Forkflow sp. z o.o.
ul. Szlak 77/222
31-153 Kraków, Poland
Email: hello@forkflow.io

11. Website, Cookies & Advertising

This section applies to our marketing website at trywhisk.com, which is separate from the Whisk iOS app described above.

11.1 Advertising Measurement

The website uses Google Ads (the gtag.js tag) to measure the performance of our advertising — primarily to count when a visitor clicks through to download the app. When enabled, this may set cookies and share your IP address and cookie identifiers with Google to attribute ad conversions. This applies to website browsing only and does not involve selling your personal data.

11.2 Consent

By default, advertising and analytics storage is disabled using Google Consent Mode v2. These cookies are only set after you accept them via our cookie banner. You can reject them and the website remains fully functional. You can change or withdraw your choice at any time by clearing the consent cookie (cc_cookie) in your browser, which will show the banner again.

11.3 Cookies We May Set

11.4 Google's Processing

Data processed by Google through these cookies is subject to Google's Privacy Policy. The rights described in Section 7 also apply to website data.