Privacy Policy
Effective date: 27 September 2026
This policy explains what personal data HealthFork collects, why, who it is shared with and the choices you have. HealthFork is made and run by Sandesh, an independent developer based in Pune, Maharashtra, India. In this policy, "we" and "us" mean Sandesh as the developer of HealthFork. If you have questions, email support@healthfork.in or visit www.healthfork.in.
The short version
- We collect what the app needs to work: your account details and the health and food information you choose to log.
- We never sell your data, never show ads, and never share your health information for advertising.
- You can delete your account and everything in it at any time from Settings → Delete my account.
Information we collect
Account information. Your email address, username and password. Passwords are handled by our authentication provider and stored only as a secure hash, never in readable form. If you sign in with Google (or Apple), we receive your name and email address from that service; we do not receive your Google or Apple password.
Profile and household information. For each person you add: name, age, sex, height, current and target weight, goal, activity level, diet type (for example vegetarian), workout level, equipment, preferred cuisines and avatar colour. These are used to calculate calorie, macro, water and step targets.
Allergies and health conditions (optional). If you choose to add them, we store food allergies and health conditions (such as diabetes, pregnancy or a heart condition) for each person. We use them only to keep plans, recipes and workouts safer (for example, hiding recipes with a listed allergen or turning off weight-loss goals during pregnancy) and to show relevant safety notes. They are never used for advertising or shared except with the service providers listed below, who store them on our behalf. You can change or remove them at any time in Settings.
Health and activity logs. Meals and drinks you log (with portions and nutrition values), water intake, steps, workouts, body weight, body measurements and notes, custom foods and favourites, and reminder settings. This is health information, and we treat it with extra care.
Voice logging. When you use the microphone, speech is converted to text by your device's or browser's speech-recognition service (for example Google or Apple), under that provider's privacy terms. HealthFork receives only the resulting text, turns it into log entries, and shows them to you for confirmation before anything is saved. We do not store audio recordings.
Step counting. If you allow motion access, steps are counted on your device from its motion sensors. Only the daily step count is saved; raw sensor data never leaves your device.
Purchase information. If you subscribe, Apple or Google processes the payment. We receive a record of which plan you bought, its status and its renewal or expiry date. We never receive your card or bank details.
Device storage. The app stores your sign-in session and a copy of your data on your device so it works quickly and offline.
We do not use third-party advertising or analytics tools, and we do not track you across other apps or websites.
How we use your information
- To provide the app: calculating your targets, storing and syncing your logs across your devices, and showing your progress.
- To run your account: sign-in, email verification codes, password resets and security.
- To manage subscriptions and free trials.
- To respond when you contact us.
- To keep the service secure and prevent abuse.
We do not use your health information for advertising, and we do not use it to make decisions that have legal or similarly significant effects on you.
Legal bases (for users in the EU, UK and similar regions). We process account and log data to perform our contract with you (providing the app). We process health information (including any allergies and health conditions you add) based on your explicit consent, which you give when you create a profile and choose to add it; you can withdraw it at any time by deleting the data or your account. We process limited data for our legitimate interests in keeping the service secure.
Who we share it with
We share data only with service providers that help us run HealthFork, under contracts that limit their use of it to providing their service to us:
- Supabase — secure database hosting, sign-in and email delivery infrastructure.
- Google and Apple — sign-in (only if you choose it), in-app payments, and speech recognition on your device.
- RevenueCat — managing subscription status across app stores.
- Our email provider — sending verification and password-reset emails.
We may disclose information if required by law, or to protect the rights, safety or property of our users or others. If HealthFork is ever transferred to a new owner, your data would move under the same protections described here, and we would tell you first.
Where your data is stored
Your data is stored on servers in India (Mumbai). If you use HealthFork from another country, your data may be transferred to and processed in that region. Where the law requires it, we use appropriate safeguards (such as standard contractual clauses) for these transfers.
How long we keep it
We keep your data for as long as you have an account. When you delete your account, we delete your profiles, logs and account details from our active systems immediately, and from backups within 30 days. We may keep limited records longer where the law requires it (for example, purchase records for tax purposes).
Your rights and choices
- Access and correction: you can view and edit your information in the app at any time.
- Deletion: delete individual entries, a household member, or your whole account from Settings.
- Copy of your data: download everything from Settings → Download my data (a JSON file), or email support@healthfork.in and we will send it to you.
- Withdraw consent / object / restrict: email support@healthfork.in.
- Complaints: you can contact your local data-protection authority. In India, you can raise a grievance with us first (see below) and then with the Data Protection Board of India.
We respond to requests within 30 days.
Children
HealthFork accounts are for adults aged 18 or over. An account holder may add household members, including teenagers aged 14 to 17, only as their parent or legal guardian, and is responsible for that use. HealthFork is not designed for children under 14, and we do not knowingly collect their data. If you believe a child's data has been added, contact us and we will delete it.
Security
Data is encrypted in transit (HTTPS) and protected at rest by our hosting provider. Access controls ensure each account can reach only its own data. No system is perfectly secure, so please use a strong, unique password.
Changes to this policy
If we make significant changes, we will tell you in the app before they take effect. The effective date at the top shows when this policy last changed.
Contact and grievance officer
Sandesh, Pune, Maharashtra, India
Email: support@healthfork.in
Website: www.healthfork.in
Grievance officer: Sandesh, support@healthfork.in