Privacy Policy

1. Introduction

ForkSure, LLC ("ForkSure," "we," "us," or "our") is a Delaware limited liability company. This Privacy Policy describes how we collect, use, disclose, and protect your information when you use our Services, which include:

• The ForkSure mobile application available on the Apple App Store (the "App"); and
• The ForkSure website (the "Website").

Together, the App and Website are referred to as the "Services." This Privacy Policy applies to both platforms. Where a practice differs between the App and the Website, we note the difference clearly.

By using the Services, you consent to the data practices described in this Privacy Policy. If you do not agree, please do not use the Services. This Privacy Policy is incorporated by reference into our Terms of Service.

2. Information We Collect

2.1 Information You Provide Directly

When you create an account or use the Services, you may provide:

• Account information: name, email address, and password
• Dietary and health profile: food allergies, intolerances, dietary restrictions, special diet types (e.g., vegan, gluten-free, diabetic), and related preferences
• Symptom and reaction logs: records of symptoms, adverse reactions, or health notes you choose to enter
• Food photographs: images you upload or capture using the AI food identification feature (App only)
• Shared content: dietary profiles or notes you voluntarily share with third parties through the sharing feature
• Communications: messages or inquiries you send to us via the Website contact form or by email
• Interview and assessment responses: answers to in-app questionnaires and educational assessments

2.2 Information Collected Automatically

When you use the Services, we and our third-party service providers may automatically collect the following:

From the Mobile App

• Device information: device type, operating system version, unique device identifiers, and mobile network information
• App usage data: features accessed, pages viewed, time spent in the App, and interaction logs
• Crash and performance data: error reports, crash logs, and App performance metrics
• General location: coarse geographic location derived from IP address (we do not collect precise GPS location unless you explicitly grant permission)

From the Website

• Browser and device information: browser type and version, operating system, screen resolution, and hardware model
• Website usage data: pages visited, time on page, click paths, referring URL, and exit pages
• IP address: used to estimate general geographic location and for security and fraud prevention
• Cookie and tracking data: information collected through cookies, web beacons, and similar technologies (see Section 14 for full details)
• Form submission data: information you enter into contact forms or account registration forms on the Website

2.3 Information from Third Parties

We may receive information from:

• Apple App Store: purchase confirmation, subscription status, and App installation data (governed by Apple's privacy policy)
• AI service providers: responses to food photo analysis requests you initiate through the App
• Analytics platforms: aggregated behavioral data about how users interact with the Website and App
• Social media platforms: if you choose to connect or interact with our content on social media

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain the Services (both App and Website)
• To process and fulfill your subscription and in-app purchase requests
• To personalize your dietary and allergy profile within the App and Website
• To operate the AI food identification feature and return results to you
• To enable the sharing feature when you voluntarily choose to share your information
• To send you service-related notifications, including subscription renewals, App updates, and support responses
• To send you promotional communications (only with your consent, where required by law)
• To analyze usage trends and improve the App's and Website's performance and features
• To detect and prevent fraud, abuse, and security incidents on both platforms
• To comply with legal obligations
• To enforce our Terms of Service

We do not use your dietary or health information to serve you third-party advertisements. We do not sell your personal information to third parties for their own marketing purposes.

4. Sharing Your Information with Third Parties

4.1 Service Providers

We share your information with trusted third-party service providers who assist us in operating the Services. These providers are contractually prohibited from using your data for any purpose other than providing services to ForkSure and are required to implement appropriate data security measures. Categories of service providers include:

• Cloud infrastructure and hosting providers (servers and data storage for both App and Website)
• AI and machine learning processing vendors (for the App's food photo identification feature)
• Analytics providers (for aggregated, anonymized usage analysis of the App and Website)
• Customer support platforms
• Email and communications providers
• Website performance and security services

4.2 User-Directed Sharing

The Services include a voluntary sharing feature that allows you to share your dietary profile and allergy information with individuals of your choosing, such as a physician, registered dietitian, family member, or friend. Any such sharing is entirely at your direction and discretion. Once you share your information with a third party:

• ForkSure has no control over how that third party uses, stores, or discloses your information;
• ForkSure is not responsible for the actions or inactions of any recipient of your shared information;
• ForkSure cannot revoke or retrieve information already shared.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or a substantial portion of ForkSure's assets, your personal information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

4.4 Legal Compliance and Safety

We may disclose your information if we believe in good faith that disclosure is necessary to: (a) comply with applicable law, regulation, legal process, or government request; (b) enforce our Terms of Service or other agreements; (c) protect the rights, property, or safety of ForkSure, our users, or the public; or (d) detect or prevent fraud or security incidents.

4.5 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you, for research, analytics, marketing, or other business purposes.

5. Health Information and Protected Health Information (PHI)

5.1 Health-Related Data We Collect

The Services are designed to help users manage their dietary preferences, food allergies, and intolerances. In providing these features, you may voluntarily enter information that could be considered health-related. We treat this information with heightened care and do not sell it to third parties.

5.2 ForkSure Is Not a HIPAA-Covered Entity

ForkSure, LLC is not a "covered entity" or "business associate" as defined under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"). The Services are not designed, certified, or intended to handle Protected Health Information ("PHI") as defined by HIPAA.

IMPORTANT ADVISORY: You are strongly advised not to enter Protected Health Information (PHI) into the App or Website. PHI includes, but is not limited to: your medical record number, health insurance information, formal medical diagnoses, prescription details, provider treatment records, or any information that could identify you as a patient under the care of a licensed healthcare provider. ForkSure does not provide HIPAA-compliant data handling and assumes no liability for any PHI you choose to enter.

By entering any health-related information into the Services, you acknowledge that: (a) you are doing so voluntarily; (b) ForkSure does not provide HIPAA-compliant data handling; and (c) ForkSure assumes no liability for any regulatory violation, data breach, or harm arising from PHI you choose to enter.

5.3 Healthcare Providers

If you are a licensed healthcare professional, you are expressly prohibited from entering your patients' PHI into the Services. ForkSure accepts no responsibility or liability for any HIPAA or state-law privacy violation resulting from a healthcare provider's use of the Services in connection with patient information.

6. AI-Powered Food Identification and Automated Processing

The App's AI food identification feature allows you to photograph food items to receive information about potential ingredients and allergens. Please be aware:

• Food photographs you submit are transmitted to third-party AI processing providers to generate ingredient and allergen analysis. These providers process your images pursuant to their own privacy policies and our data processing agreements.
• Photographs may be retained by AI service providers for a limited period for model improvement purposes, subject to de-identification and aggregation requirements in our contracts.
• You may choose not to use the AI Feature at any time. Use of the AI Feature is entirely voluntary.
• The AI Feature does not create or store a persistent record of your food consumption unless you explicitly save an entry in the App.

AI-generated food and allergen identifications are estimates only and may be inaccurate. ForkSure makes no representations as to their accuracy, completeness, or reliability. Never rely solely on AI-generated results to determine food safety.

7. Data Security

We implement reasonable technical and organizational security measures designed to protect your information from unauthorized access, disclosure, alteration, or destruction across both the App and Website. These measures include encryption of data in transit using SSL/TLS, access controls limiting employee access to personal data on a need-to-know basis, and regular security assessments.

No method of data transmission or storage over the Internet is 100% secure. We cannot guarantee the absolute security of your information. You are responsible for maintaining the security of your account credentials and for all activity under your account.

In the event of a data breach that is reasonably likely to result in risk to your rights or freedoms, we will notify you and relevant authorities as required by applicable law.

8. Data Retention

We retain your personal information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:

• Account data is retained for the duration of your account and for up to 3 years after account deletion, unless a longer retention period is required by law.
• Food logs, dietary profiles, and symptom data are retained until you delete them or request account deletion.
• Payment and transaction records are retained for up to 7 years as required for tax and accounting purposes.
• Website analytics data is retained in identifiable form for up to 24 months, then aggregated or deleted.
• App crash and performance logs are retained for up to 90 days.

You may request deletion of your personal data at any time by contacting us at info@forksure.org. Some information may be retained in backup systems for a limited period after deletion or as required by law.

9. Children's Privacy

9.1 COPPA Compliance

The Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13 through the App or Website. If you are under 13 years of age, you are not permitted to use the Services. If we discover that we have collected personal information from a child under 13 without verifiable parental consent, we will delete that information promptly. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us immediately at info@forksure.org.

9.2 Users Ages 13 to 17

Users between the ages of 13 and 17 may use the Services only with verifiable consent from a parent or legal guardian, who must agree to the Terms of Service and this Privacy Policy on the user's behalf. If you are a parent or guardian of a user between 13 and 17, you have the right to review the information we have collected about your child and request deletion by contacting info@forksure.org.

10. Your Rights and Choices

10.1 Access and Correction

You may access, review, and update your personal information directly within the App's or Website's account settings. To request corrections to information you cannot modify yourself, contact us at info@forksure.org.

10.2 Deletion

You may request deletion of your account and associated personal data by contacting info@forksure.org or by using the account deletion option in the App or Website settings. We will fulfill deletion requests within 30 days, subject to any legal retention obligations.

10.3 Data Portability

Upon request, we will provide you with a copy of your personal dietary and profile data in a machine-readable format within 30 days of your request.

10.4 Marketing Communications

You may opt out of promotional email communications at any time by clicking "unsubscribe" in any marketing email or by contacting info@forksure.org. You will continue to receive transactional and service-related notifications.

10.5 Push Notifications

You may enable or disable push notifications through your device's operating system settings at any time.

11. California Residents — California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with the following rights:

• Right to Know: The right to know what personal information we have collected, used, disclosed, and sold about you, including from the App and Website.
• Right to Delete: The right to request deletion of your personal information, subject to certain exceptions.
• Right to Correct: The right to request correction of inaccurate personal information.
• Right to Opt-Out of Sale: We do not sell your personal information as defined by the CCPA. You do not need to opt out.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, submit a verifiable consumer request to info@forksure.org. We will respond within 45 days as required by California law.

Categories of personal information we collect include: identifiers (e.g., name, email, IP address), internet and network activity (e.g., Website browsing behavior, cookie data), and health and dietary information (sensitive personal information). We collect this information from you directly and through automated means as described above.

12. International Users

ForkSure is operated from the United States. If you are located outside the United States, please be aware that information you provide through the App or Website may be transferred to and processed in the United States, which may have different data protection laws than your country.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you may have additional rights under the General Data Protection Regulation (GDPR) or applicable local law. ForkSure's Services are primarily intended for users in the United States. If you are subject to GDPR and wish to exercise your rights, please contact us at info@forksure.org.

13. Apple App Store and Third-Party Services

Your use of the App is also subject to Apple's own privacy policy, available at https://www.apple.com/legal/privacy. ForkSure is not responsible for Apple's data practices.

The Website and App may contain links to third-party websites or services. ForkSure is not responsible for the privacy practices of third-party websites or services. We encourage you to review the privacy policies of any third-party services you access.

14. Cookies and Tracking Technologies

14.1 What Are Cookies?

Cookies are small text files placed on your browser or device when you visit a website. They allow a website to recognize your device, remember your preferences, and improve your experience. Cookies may be set by the ForkSure website ("first-party cookies") or by our service providers ("third-party cookies").

14.2 Types of Cookies We Use on the Website

Essential / Strictly Necessary Cookies

These cookies are required for the Website to function correctly and cannot be switched off in our systems. They are typically set in response to actions you take, such as setting your privacy preferences, logging in to your account, or filling in forms. Without these cookies, core Website features would not work. You can set your browser to block these cookies, but some parts of the Website may then not function.

Performance and Analytics Cookies

These cookies allow us to count visits and traffic sources to measure and improve Website performance. They help us understand which pages are most and least popular, how long visitors stay, and how they navigate through the site. All information collected is aggregated and does not directly identify individual users. If you disable these cookies, we will not be able to monitor Website performance or improve user experience over time.

Functional Cookies

These cookies enable the Website to provide enhanced functionality and personalization — for example, remembering your account login status, language preferences, or region settings. If you disable functional cookies, some features of the Website may not work as intended.

Targeting and Marketing Cookies

At this time, ForkSure does not use targeting or advertising cookies. If we introduce such cookies in the future, we will update this Privacy Policy and obtain your consent where required by applicable law.

14.3 Third-Party Analytics

Our Website uses third-party analytics services such as Google Analytics to analyze website traffic and usage patterns. These services use cookies and similar technologies to collect information such as page views, session duration, traffic sources, and general geographic location. This data is used in aggregated form to help us understand how our Website is used and to improve our Services.

Google Analytics data is transmitted to Google's servers and is subject to Google's own privacy policy. You can opt out of Google Analytics tracking across all websites by installing the Google Analytics Opt-Out Browser Add-on, available at: https://tools.google.com/dlpage/gaoptout. You can also opt out by adjusting your cookie preferences as described below.

14.4 Web Beacons and Tracking Pixels

Our Website and marketing emails may use small invisible images called web beacons, tracking pixels, or clear GIFs. These technologies help us track:

• Whether marketing or transactional emails have been opened
• Which links in emails are clicked
• General Website traffic patterns

Web beacons in emails can be disabled by setting your email client to not automatically download images. Disabling image downloads will prevent email-based beacons from functioning, but will not affect your use of the Website.

14.5 Session Replay and Heatmaps

We may use session recording tools (which create anonymized replays of user navigation) or heatmap tools (which show aggregate click and scroll patterns) to understand how users interact with the Website. These tools are configured to exclude any text you enter into sensitive fields such as passwords or payment information. If we use such tools, they are provided by third-party vendors subject to data processing agreements with us.

14.6 How to Manage and Control Cookies

You have several options for managing cookies on the Website:

Browser Settings

Most web browsers allow you to control cookie behavior through their settings. You can typically:

• View and delete existing cookies stored on your device
• Block all cookies or block cookies from specific websites
• Set your browser to notify you when a cookie is set
• Use "private" or "incognito" browsing mode, which limits persistent cookie storage

Instructions for managing cookies vary by browser. Common browsers include: Chrome (chrome://settings/cookies), Safari (Preferences > Privacy), Firefox (Preferences > Privacy & Security), and Edge (Settings > Cookies). Please note that restricting cookies may affect your experience on the Website and certain features may not function correctly.

Opt-Out of Analytics Cookies

In addition to browser settings, you can opt out of Google Analytics as described in Section 14.3. You may also be able to opt out through our cookie consent tool if one is displayed on the Website.

14.7 Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activities tracked. Our Website does not currently respond to DNT signals because there is no consistent industry standard for DNT compliance. However, you can use the cookie management tools described above to control tracking on our Website. We will update this Policy if our practices change.

14.8 Mobile App — No Browser Cookies

The ForkSure mobile App does not use browser-based cookies. Performance monitoring and analytics in the App are collected through mobile SDK equivalents (e.g., mobile crash reporting and analytics frameworks). See Section 2.2 for details on what is collected in the App. You can manage certain App tracking permissions through your iOS device settings (Settings > Privacy & Security > Tracking).

14.9 Cookie Duration

Cookies on our Website are either:

• Session cookies: Temporary cookies that are deleted when you close your browser. These help maintain your session as you navigate the Website.
• Persistent cookies: Cookies that remain on your device for a set period (ranging from a few days to two years depending on the cookie's purpose) or until you delete them manually. These remember your preferences and settings between visits.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Services, or applicable law. We will notify you of material changes by posting a prominent notice within the App, on the Website, or by sending an email to the address associated with your account at least 14 days before the changes take effect. Your continued use of the Services after a Privacy Policy update constitutes acceptance of the revised policy.

The "Last Updated" date at the top of this document indicates when this Privacy Policy was most recently revised. We encourage you to review this Privacy Policy periodically.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices — including questions related to the App or Website — please contact us:

ForkSure, LLC

Email: info@forksure.org

Privacy inquiries are typically responded to within 30 days.