Privacy Policy — forkr

PLACEHOLDER — NOT LEGAL ADVICE. This text is a working scaffold

that mirrors the structure called out in docs/compliance.md. A

qualified attorney must review and rewrite every section before this

page is published. Do not represent this as final policy. The Phase 9

compliance work-stream tracks lawyer review as a TODO.

Last updated: PLACEHOLDER

What we collect

PLACEHOLDER — describe each data category we collect:

• Account identifiers (email, display name, region, locale, timezone)
• User-generated content (recipes, cookbooks, meal plans, pantry, photos)
• Usage telemetry (page views, feature interactions, error reports)
• Payment metadata (last-4 of card, billing region — handled by Stripe)
• Device fingerprints + cookies (for session continuity)

Where we store it

PLACEHOLDER — name the AWS regions we store data in (us-east-1 today; EU residency is on the Phase 12 roadmap). Note third-party processors where data also lives.

How long we keep it

PLACEHOLDER — describe retention windows per data category:

• Active account data: kept while the account is open
• Soft-deleted accounts: 30-day grace period before hard-delete
• Telemetry: PLACEHOLDER days
• Backups: PLACEHOLDER days

Your GDPR rights

PLACEHOLDER — describe each right and how to exercise it:

• Right to access — POST /v1/users/me/data-export produces a ZIP

archive of every user-owned record. Download URL valid for 7 days.

• Right to erasure — DELETE /v1/users/me?confirmation=PERMANENT

soft-deletes the account; hard-delete follows after the grace period.

• Right to rectify — edit your profile in the app.
• Right to data portability — same as the export above.
• Right to object — opt out of recommender participation in

Settings → Privacy.

Third-party processors

PLACEHOLDER — list every subprocessor with purpose:

• Anthropic — recipe extraction LLM. Receives evidence packets

(extracted text), never raw user uploads.

• Voyage AI — embedding model for the recipe similarity index.
• Stripe — payment processing. PCI scope is theirs, not ours.
• Sentry — error monitoring. PII scrubbed at the SDK boundary.
• AWS — infrastructure (compute, storage, CDN).

Cookies

PLACEHOLDER — describe each cookie + its purpose. Phase 9 will add a cookie consent banner; until then, only the session cookie is set (strictly necessary).

Contact

PLACEHOLDER — privacy@forkr.app. Replace with the real address before publication.