This privacy policy explains how ForkReal handles your personal data when you use our website and app. We process as little data as possible and treat it carefully, precisely because information about coeliac disease or gluten intolerance is health data — a special category of personal data under the GDPR.
1. Who is responsible?
The controller for ForkReal is Rubeon (the company behind ForkReal), Theo Dobbestraat 33, 6663 RJ Lent, registered with the Dutch Chamber of Commerce under 97655414. Questions about privacy or this policy? Email [email protected].
2. What data we process
Account data
If you sign in with Apple or Google, we receive your name and email address (or the relay address Apple generates, if you choose that). We do not store passwords.
Health data (special category of personal data)
You can optionally record your gluten situation (coeliac disease or gluten sensitivity, for example) to personalise recommendations. This is health data and we process it solely on the basis of your explicit consent (art. 9(2)(a) GDPR). You can delete it again at any time in the app.
Reviews, photos and favourites
The reviews and review photos you post, your ratings and allergen tags, and the venues you save as favourites. Reviews and photos are visible to other users under the display name you choose.
Usage and device data
With your consent we collect privacy-friendly, EU-hosted usage statistics (which pages/screens are viewed, which actions are taken). Without consent we do not load them. For advertising in the app we ask for consent separately, through a consent notice.
3. Purposes and legal bases
- Providing the service (account, reviews, favourites, glutenscore) — necessary for the performance of the contract (art. 6(1)(b) GDPR).
- Personalisation based on your gluten situation — explicit consent (art. 9(2)(a) GDPR).
- Statistics and product improvement — consent (art. 6(1)(a) GDPR).
- Advertising (free version) — consent through the consent notice.
- Preventing abuse and moderating reviews — legitimate interest (art. 6(1)(f) GDPR).
4. Processors and third parties
We use service providers that process data on our behalf. We never share your data for their own purposes and we do not sell it.
| Party | Purpose | Transfer |
|---|---|---|
| Apple / Google | Signing in (social sign-in) | US — SCCs |
| RevenueCat | Processing subscriptions (Premium) | US — SCCs |
| Google AdMob | Advertising in the free app | US — SCCs |
| PostHog | Usage statistics | EU hosting |
| Cloudflare R2 | Storage of review photos | EU jurisdiction |
| Anthropic (Claude) | Menu scan | US — SCCs |
| Laravel Cloud | Hosting the application | EU region |
For transfers outside the European Economic Area we rely on the European Commission’s standard contractual clauses (SCCs). The menu scan analyses public restaurant websites and does not process any personal data about you.
5. How long we keep data
We do not keep your data longer than necessary. We keep account data for as long as you have an account; if you delete your account, we delete or anonymise your personal data within 30 days, subject to statutory retention obligations (such as tax retention periods for payments).
6. Your rights
Under the GDPR you have the right to:
- access the data we hold about you;
- rectification of inaccurate data;
- erasure (the right to be forgotten);
- restriction of, or objection to, the processing;
- portability of your data;
- withdraw your consent at any time — this has no retroactive effect.
You can arrange much of this yourself in the app (edit your profile, clear your gluten situation, delete your account). For anything else, email [email protected]. If you disagree with how we handle your data, you can lodge a complaint with the Autoriteit Persoonsgegevens, the Dutch data protection authority.
7. Cookies and consent
On the website we only use strictly necessary storage until you consent to statistics. If you decline, or make no choice, we load no analytics. In the app we ask separately, through a consent notice, for consent to statistics and personalised advertising. Your choice defaults to declining and you can change it at any time.
8. Children
ForkReal is not aimed at children under the age of 16. We do not knowingly collect data from children without the consent of a parent or guardian.
9. Changes
We may amend this policy. We will inform you of significant changes through the app or the website. The date at the top shows when we last updated the policy.
See also our terms of use.