Forkiee: know what to order at any restaurant

This policy explains what happens to your information when you use the Forkiee app for iPhone and this website. It is written for diners, not lawyers. If something is unclear, write to us at support@forkiee.app.

Who we are

Forkiee is made by Third Floor Studios, based in Leeuwarden, the Netherlands, and registered with the Dutch Chamber of Commerce (KvK) under number 42027191. We decide how and why your information is used in Forkiee, which makes us the “controller” under the EU General Data Protection Regulation (GDPR).

You can reach us at support@forkiee.app, or in the app under Settings, Write to us.

The short version

Your Taste Passport, your chats, your photos and your dinners are stored on your phone, not on our servers, unless you share a table with friends (see Friends).
When you ask about a menu, a bill or a plate, the photos, your question and your Taste Passport (and those of anyone eating with you) go to our server and to our AI model provider, Anthropic, so they can be read and answered. We do not keep them afterwards, and they are never used to train AI.
On our side we keep one small daily counter per phone, linked to a random device identifier, to apply daily limits. Forkiee works without an account and never asks for your email address. Only the optional Friends feature has an account.
Forkiee asks your permission before it reads anything with AI, and you can take it back at any time in Settings, Reading with AI.
No ads, no tracking across other apps and websites, and we never sell your data.
Apple Health is write-only: Forkiee adds a dinner only when you tap to add it, and it never reads your Health data.
You can wipe everything Forkiee keeps on your phone with Settings, Erase everything on this phone.

What stays on your phone

Forkiee needs no account. What you put into the app is stored inside the app on your iPhone (the optional Friends feature is described in its own section):

Your Taste Passport: your name (if you give one), the foods you avoid and how strictly (allergy, intolerance or avoid, and whether traces matter), your diets, goals and taste, the foods you won’t eat, and the signature you draw for your passport.
The people you eat with: the names you give them, how they relate to you (child, partner, friend or family) and their own food rules.
Your chats: the menu photos you scan, your questions and Forkiee’s answers.
Your dinners: the place and the dish, the date and the price, the photos you take of your food and the lines you write on them, your notes for next time, your thumbs up or down, how well the staff knew your allergies, a short note of how the bill was settled, and a pin on your map if you allowed location.
Your check-ins: how you felt after a dinner and any symptoms you chose, next to what the menu said was in the dish.
A few settings, such as the language Forkiee answers in and whether check-ins are on.

Forkiee never deletes your chats or dinners on its own. They stay until you erase them or delete the app. Like the rest of your apps’ data, they are protected by your iPhone’s own security.

Parts of this information are sent to us when you ask Forkiee something, as explained in the next section. We do not keep it on our side, apart from the small things listed under “What we do keep”.

If you back up your iPhone to iCloud or to a computer, the backup includes Forkiee’s data, as it does for your other apps. Those backups are managed by Apple or by you.

What we receive when you read a menu or a bill

Forkiee reads menus, bills and plates with an AI model. To do that, the app sends the information below to our server over an encrypted (HTTPS) connection. Our server passes it on to our AI model provider, Anthropic (the maker of the Claude models), which reads the photos and writes the answer for us, and sends the answer back to your phone.

When you ask about a menu (and with every follow-up question in that chat):

the menu photos, made smaller on your phone first (up to six pages),
your question, and the earlier questions and answers in that chat,
your Taste Passport: your name, the foods you avoid and how strictly, your diets, goals and taste, the foods you won’t eat, and the language you want answers in,
the people eating with you tonight, if you added any: their names, how they relate to you and their food rules,
up to eight of your latest dinners that you rated, wrote a note about, or said how the staff handled allergies: the place, the dish, the date, your thumbs up or down, your note and the staff answer, so Forkiee remembers what worked for you,
tonight’s moment: how hungry you are, an occasion if you picked one (such as date night), and the day and time on your phone.

If you pick menu photos from your photo library, iOS shares only the photos you choose with Forkiee.

When you photograph a bill to split it: up to three photos of the bill, which your phone first crops and straightens to the paper, and your language. The names of the people you split with stay on your phone.

When you photograph your food: the photo, that evening’s menu photos if there are any, the dish you said you were getting, the line you wrote on the photo, and your language. Forkiee uses this to name the dish and to check that it is the one you chose.

With every request, the app also sends a random identifier that Apple gives our app on your phone (it is not your name, your phone number or your Apple Account), whether you have Forkiee Pro, and the anonymous customer number used for your subscription (see Purchases). As with any internet connection, our server also sees your phone’s IP address.

Why we use it: to read the menu, bill or plate and give you the answer you asked for. The legal basis is providing the app you chose to use (GDPR Article 6(1)(b)). Before the first read, the app asks for your permission to read with AI (Settings, Reading with AI); without it, nothing is sent. For allergies and other health information we rely on your explicit consent, explained in the next section.

How long it is kept:

Our server handles each request in memory while the answer is written. It does not save your photos, your questions, your passport, the people at your table or Forkiee’s answers to any file, database or log.
The AI model provider processes the request to write the answer, and may hold it in a short-term cache for about five minutes so that follow-up questions about the same menu are answered faster. It may not use your data to train its models. It keeps requests for up to 30 days for security and abuse monitoring, and then deletes them; only a request its safety systems flag for breaking its usage rules can be kept longer.

What we do keep:

A daily counter for your phone: the date, the random device identifier, how many menus were read that day and what reading them cost us. We use it to apply fair daily limits, control our costs and prevent abuse. The legal basis is our legitimate interest in running Forkiee reliably and affordably (GDPR Article 6(1)(f)). Each counter is deleted automatically after 90 days, and you can ask us to delete yours sooner.
A list of dishes we have no example photo for: the dish’s plain name, the menu’s language and the restaurant name printed on the menu, with how often and when it came up. It tells us which dish photos to add. It is not linked to you or to your phone.
Technical logs, kept for up to 30 days by our hosting provider: when a request arrived, which part of the service it used, whether it worked, and possibly the IP address it came from. They contain no photos, questions or passport details. We use them to keep the service running and secure (legitimate interest).
Request counts per IP address: to stop any one connection from sending too many requests, our server counts requests per IP address per hour in its working memory. This is never written to a database.

What we never receive: your location, your check-ins and your Apple Health data are not part of any menu, bill or plate request. A table you share with friends can carry its pin; see Friends.

No way of sending data over the internet is completely secure, which is one more reason we keep as little as we can.

Earlier versions of the app

Before Forkiee 2.0, the app (then called MenuWise) saved the answers to its welcome questions on our server: your diet, allergies, goals and food preferences and, if you gave them, your gender, birth date, height and weight. Forkiee 2.0 does not use them and no longer stores them. We deleted all of them on 23 September 2026. Copies in our database provider’s backups are erased within 7 days, as those backups roll over.

Your food profile and health information

Your Taste Passport can hold health information: allergies, intolerances, and diets such as pregnancy or low FODMAP. Some diets, such as halal or kosher, can also reveal your religion. The GDPR calls these “special categories” of personal data, and we treat everything in your passport with that extra care.

Only with your permission. You choose what goes into your passport, and you can leave any part of it empty. We use it only to check menus for you, based on your explicit consent (GDPR Article 9(2)(a)), which the app asks you for before it first reads a menu with your passport. You can withdraw your consent at any time in Settings, Reading with AI, by removing items, by using Erase everything on this phone, or by deleting the app. This does not affect menus that were already read.
Where it lives. Your passport is stored on your phone. It travels with each menu question, as described above, and is not stored on our server.
People at your table. When you add someone, their name and food rules are used in the same way, and only when they are at your table that night. Please add people only if they are happy for you to do so. For a child, you add them as their parent or guardian.
Check-ins stay private. How you felt and any symptoms you picked stay on your phone, and patterns are worked out on your phone. They are never sent to us. A pattern is a hint to talk to a doctor or dietitian, not a diagnosis. If you choose to add a pattern to your passport (for example as an intolerance), it becomes part of your passport and is used like the rest of it.
Apple Health is write-only. When you tap Add to Apple Health after a dinner, iOS first asks for your permission. Forkiee then adds one food entry named after the dish, with estimated calories, protein, carbohydrates and fat, scaled to how much you ate. Forkiee never reads anything from Apple Health and never sends Health data anywhere. Right after adding, Undo takes the entry out again; later, you can delete it in the Health app. You can switch off Forkiee’s access at any time in the Health app or in iOS Settings.
Forkiee can be wrong. Answers are created automatically from the menu and usual recipes. They are suggestions for you to decide on, not decisions about you. A menu can’t promise what a kitchen does, so always tell the staff about an allergy.

Friends

Friends is optional. It lets the people you choose see the tables you keep, and it is the only part of Forkiee with an account and information kept on our server. Nothing changes for you if you never open it.

Joining. You join with Sign in with Apple. Apple gives us an identifier that belongs only to you and Forkiee, and the name you let Apple share or type in the app. We do not receive or keep your email address. You then choose an @name (3 to 20 letters, digits or underscores). Your sign-in is kept in your iPhone’s secure keychain; our server keeps only a one-way fingerprint of it, which expires after 180 days without use.

Who sees what. Your profile is closed unless you open it in Settings, Open profile.

Anyone signed in to Friends can find you by your @name and see your name, your @name, how many people you follow and how many follow you, and whether you follow each other.
Your tables are seen only by the followers you approve or, with an open profile, by anyone signed in to Friends.
The lists of who you follow, who follows you, your requests and the people you blocked are for you alone.

What a shared table shows. Once you join, the tables you decide on are shared with your followers unless you hide them; tables from before you joined are shared only if you say yes once. A shared table carries the restaurant’s name and town, the dish, the date and time, your thumbs up (a thumbs down stays private), whether comments are on, and up to six of your photos with their captions. Your followers see it only after the evening is over: when you print the page, or at the latest the next morning.

Location: the table’s pin, the position your phone saved with that dinner, goes to our server only when the table has a restaurant name. A table without one, for example at home, goes with the town only. Your current location is never shared.
Allergy notes: your note for next time, how well the staff knew your allergies and which allergies that was about are shared only if you turn on Settings, Allergy notes. This is health information, so we ask for your explicit consent and keep the date and the wording you agreed to. Turning it off deletes these notes from all your shared tables on our server straight away.
Never shared: your Taste Passport, the people at your table, your chats, your check-ins and your Apple Health data.
Photos are stored privately with our database provider and shown only to people allowed to see the table, through links that expire after 10 minutes. Location and camera details are removed from each photo on your phone and again on our server.
Hiding: choosing Only you see this on a table removes it and its photos from our server.

Likes, saves and comments. People who can see a table can like it, save it to their Want to go list and comment on it, unless you turned comments off for that table. Likes show as a count, and nobody is told who saved a table. Before a comment is posted it is checked automatically: first by simple rules (for example against phone numbers and links), then by Anthropic’s AI model, which receives only the comment’s text and checks it for insults, harassment, hate, sexual content, threats, spam and personal details. A comment that fails is not posted and not kept. Commenting uses the permission you gave for Reading with AI.

Blocking and reporting. You can block anyone. They are not told; you stop seeing each other in Friends, and the follows, likes, saves and comments between you are deleted. You can report a table, a comment or a person. A report reaches us by email with both @names, the reason and a short excerpt of what was reported (the dish and restaurant, or the comment). What you reported disappears for you straight away, and for everyone once two different people report it. We review reports and may remove what was reported or suspend an account. A suspended account is signed out and cannot sign in, and its tables, comments and likes are hidden from everyone. We keep reports after they are handled so that we can recognise repeated abuse; if you delete your account, your name is removed from the reports you made.

Why we use this information: to provide Friends as you asked (GDPR Article 6(1)(b)), your allergy notes only with your explicit consent (Article 9(2)(a)), and checking comments, handling reports and suspending accounts to keep Friends safe for everyone (our legitimate interest, Article 6(1)(f)).

Leaving. Settings, Delete my Friends account removes your profile, your sign-ins, follows and blocks, your shared tables and their photos, and the likes, saves and comments you left, from our server, and ends Forkiee’s access to your Sign in with Apple. Your tables and chats on your phone stay. Sign out of Friends keeps your account but signs this phone out. Erase everything on this phone also takes your shared tables off Friends, and keeps trying until our server confirms it, but it does not delete your Friends account. Copies in our database provider’s backups are erased within 7 days.

Purchases

Forkiee Pro is a monthly or yearly subscription sold through Apple’s App Store. Apple handles the payment. We never see your card or payment details, and Apple does not give us your name or email address.

To know whether you have Forkiee Pro, the app uses RevenueCat, a subscription management service. RevenueCat receives an anonymous customer number created in the app (no sign-in needed), your purchase and subscription history from Apple, and basic technical details about the app and your device. If you subscribed in an earlier version of the app, your subscription is recognized the same way.

Our server may ask RevenueCat whether the customer number sent by the app has an active subscription, so that subscribers get their full daily allowance. The answer is kept in the server’s working memory for up to an hour, never in a database.

The legal basis is providing the subscription you bought (GDPR Article 6(1)(b)).

You can manage or cancel your subscription in your iPhone’s App Store settings, or in Forkiee under Settings, Manage subscription. Erasing Forkiee’s data or deleting the app does not cancel a subscription.

Service providers

We use a small number of companies to run Forkiee:

Hosting providers, which run our server and our database. For Forkiee, the database holds the daily counters and the list of dishes without photos described above and, if you use Friends, your Friends account, the tables you share and their photos. The same database provider also stores our library of example dish photos; when the app shows one, it asks only for that dish’s photo.
Anthropic, our AI model provider, which reads menu, bill and plate photos, writes Forkiee’s answers and checks Friends comments before they are posted, on our behalf. It may not use your data to train its models.
RevenueCat, which manages subscription status (see Purchases).
Apple, which provides the App Store and payments, Sign in with Apple for Friends, Apple Health (on your phone), Apple Maps (the map in your passport, restaurant name suggestions and the town of a shared table), notifications, and the check for a newer version of the app.
A public exchange-rate service: when a menu is in a foreign currency, the app downloads the day’s rates (at most once a day) and converts prices on your phone. Nothing about you is sent.
Our website host, which serves forkiee.app.
Our email provider, which delivers the messages you send to support@forkiee.app and the reports sent to us from Friends.

The hosting providers, the AI model provider, RevenueCat, our website host and our email provider work for us and may use your information only to provide their service to us. Apple provides its services under its own privacy policy. Each of these services can see your phone’s IP address when the app connects to it, as with any internet service.

We do not share your personal information with anyone else unless the law requires it, for example because of a court order.

No tracking, no ads, no selling data

Forkiee shows no ads and contains no advertising or analytics software. The only outside software in the app is RevenueCat, for subscriptions.
We do not track you across other companies’ apps or websites, and we do not use your phone’s advertising identifier. That is why Forkiee never asks for permission to track you.
We do not sell, rent or trade your personal information, and we do not share it for advertising.
We do not use your photos, questions or passport to train AI models.

This website. forkiee.app counts page visits and measures page speed with its host’s built-in statistics, which do not use cookies and do not follow you to other websites. The legal basis is our legitimate interest in knowing how the site is used.

Location and notifications

Location. After the first dinner you decide on, Forkiee asks once whether to put your tables on the map in your passport. If you say yes, iOS asks for permission to use your location while you use the app. From then on, Forkiee saves your position with each dinner you decide on, on your phone. It asks iOS for an accuracy of about 100 metres, enough to place the restaurant. The legal basis is your consent, given through the iOS permission.

Your location is never sent to the AI model provider. It reaches our server only as the pin of a table you share with friends, and only when that table has a restaurant name (see Friends).
The map in your passport is drawn by Apple Maps. When a dinner has a pin but no restaurant name, the app asks Apple Maps which places to eat are within about 90 metres of the pin and suggests one (“Were you at...?”). Nothing is renamed unless you say yes. When you share a table, Apple Maps also tells the app which town its pin is in.
Local tipping advice and prices in your own currency use your phone’s time zone and region settings, not your location.
You can turn location off at any time in iOS Settings. Your dinners are still kept, just without a pin.

Notifications. Forkiee only sends notifications for check-ins. When you tap Remind me at a dinner, the app schedules one notification on your phone for about three hours later (or 9:00 the next morning if it would arrive late at night) to ask how you feel, and iOS asks for your permission the first time. After that, every dinner you decide on gets a check-in until you turn them off in Settings, Ask how dinner felt. These notifications are scheduled on your phone: we do not run a push notification service and cannot send you messages. You can answer right from the notification, and your answer stays on your phone. You can also turn off Forkiee’s notifications in iOS Settings.

Children

Forkiee is not made for children to use on their own. You should be at least 16 to use Forkiee, or use it with the permission of a parent or guardian. Parents can add a child to their table so that menus are checked for the child’s allergies. The child’s name and food rules then stay on the parent’s phone and are only sent, as described above, when the child is at the table that night. If you believe a child has sent us personal information without permission, contact us and we will delete what we can find.

Your rights

Under the GDPR you have the right to:

get a copy of the personal data we hold about you,
have it corrected,
have it deleted,
limit how we use it, or object to it, including where we rely on our legitimate interests,
receive it in a format you can take elsewhere,
withdraw your consent at any time, without affecting what happened before,
complain to a data protection authority: in the Netherlands, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or the authority in the EU country where you live.

How to use them:

On your phone, you are in control. You can change your passport at any time. Settings, Erase everything on this phone removes your passport, your name, the people you eat with, all chats, dinners and photos, your check-ins (including any still waiting to be asked) and your signature. It cannot be undone. It does not affect your subscription, entries you already added to Apple Health, or backups made earlier. Deleting the app also removes what it stored on your phone.
For anything held on our side, email support@forkiee.app. We will answer within one month. What we hold is limited to the daily counters for your phone’s random identifier (kept for 90 days), your anonymous purchase record at RevenueCat, technical logs (kept for up to 30 days) and, if you use Friends, your Friends account and what you shared, which you can also delete yourself in Settings. We may need to ask you a few questions to find the right records, and we will tell you if we cannot.

International transfers

Some of our service providers are based in, or store data in, countries outside the European Economic Area (EEA), such as the United States. Our database, for example, is hosted in the United States. When your data is transferred outside the EEA, we rely on the European Commission’s standard contractual clauses, or another safeguard the GDPR allows, to keep it protected. You can ask us for more information about these safeguards.

Changes to this policy

When Forkiee changes in a way that affects your information, we will update this page and the date at the top. We will point out important changes in the App Store release notes for that version of the app, and if a change needs your consent, we will ask for it in the app first.

Contact

For questions, requests or complaints about your privacy:

Email: support@forkiee.app
In the app: Settings, Write to us
Company: Third Floor Studios, Leeuwarden, the Netherlands, KvK 42027191

When you write to us, we receive your email address, your message and the app version (which Forkiee adds to the subject line), and we keep them only as long as we need to help you.