Privacy policy

What we collect

ForkWorkout has no account system or central profile database. Everything you create — workouts, exercises, sessions, history, body metrics, nutrition logs and settings — is stored on your device. ForkWorkout sends anonymous page-view information to Vercel Web Analytics. Your fitness data leaves your device only when you explicitly use one of the optional online, sharing, or backup features described below.

Optional sharing

When you share a workout, program or meal, ForkWorkout creates a portable copy containing only the information shown in the share flow. Self-contained links keep that copy in the URL fragment. If you create a short link or QR code, your browser encrypts the copy first; the optional share service stores only encrypted text for a limited time, while the decryption key stays in the link fragment. A recipient must review and import the shared item before it is stored on their device.

Optional AI nutrition features

When you explicitly choose to analyze a food photo or nutrition label, ForkWorkout resizes it on your device and sends the prepared image, plus an optional weight and meal details you entered, through ForkWorkout's server to OpenAI. The OpenAI API key stays on the server. A random anonymous installation identifier and a hashed representation of your IP address are used only to enforce scan limits and protect the service from abuse. ForkWorkout requests that the model response is not stored, but OpenAI may retain limited API data under its own data controls and abuse-monitoring policies.

If your optional meal details name a restaurant, brand or packaged product, the model may search public web pages for relevant menu or product information. Any sources used are linked in the estimate review. Do not include personal or sensitive information in meal details.

When you explicitly generate AI meal ideas, ForkWorkout sends the calories and macros remaining for that day, your optional dietary preference and foods-on-hand text, and a limited list of known foods, saved meals, or recipes with their nutrition values. The model selects only from those candidates, and ForkWorkout recalculates every displayed total from the local food data. Your complete diary and body profile are not sent with this request.

If food search does not provide the right result, you can explicitly request an AI nutrition estimate. ForkWorkout sends the food name, optional descriptive details, and the amount and unit you entered to OpenAI. It does not send your diary, selected meal, body profile, or identity with that request. The returned calories and macros open in the editable custom-food form and are not saved automatically.

The photo and AI estimate are never added to your local diary automatically. You review and edit the estimated foods, weights, calories, macros and available detailed nutrients first; only the confirmed nutrition values are stored on your device. Read OpenAI's privacy policy.

The random installation identifier is kept separately from your workout and nutrition data, is not included in backups, and may remain when you use the in-app data reset so that resetting the app cannot bypass AI usage limits. Clearing all site data in your browser removes it.

Data on your device

Your data stays in your browser until you clear it. Clearing your browser storage, or using the in-app reset, permanently removes it. You can export a full JSON backup at any time from the History screen.

Online food lookup

When you choose to scan or enter a barcode, that barcode is sent to Open Food Facts. After you pause typing a food name that has no local food or saved-recipe match, the search phrase is automatically sent through ForkWorkout's server to both USDA FoodData Central and Open Food Facts. You can also start that search explicitly. The private USDA API key stays on the server. ForkWorkout does not send your nutrition diary, quantity, meal, body data or identity with that request. Product information is shown for confirmation and is cached on your device only after you save it, so it can be reused offline. Open Food Facts handles barcode and name-search requests under its privacy policy, and USDA handles food-name searches under its privacy policy.

Embedded exercise videos

When you open the Video tab for an exercise, ForkWorkout may load an embedded video directly from YouTube or Instagram. The selected provider receives the technical information required to serve that embed, such as your IP address, browser details and any cookies that provider already stores in your browser. ForkWorkout does not require an Instagram login or send your workout history, body data or nutrition diary with the request. YouTube and Instagram handle the embedded content under their own privacy policies: Google's privacy policy for YouTube and Instagram's privacy policy.

Optional Google Drive backup

You may optionally connect Google Drive to back up and restore your data. This is entirely opt-in. When you use it:

• You sign in with Google directly; ForkWorkout never sees your Google password.
• A single file, forkworkout-backup.json, is written to your own Google Drive. It contains the app data you chose to back up.
• We request the narrow drive.file permission, which lets the app access only the backup file it creates — never any other file in your Drive.
• Your data goes to your Google account, not to us. Disconnecting, or deleting the file in Drive, removes it. Google's handling of that file is governed by Google's Privacy Policy.

ForkWorkout's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Tracking & analytics

ForkWorkout uses Vercel Web Analytics for anonymous, aggregated page views and basic traffic information such as the visited route, referrer, approximate location, device type, browser and operating system. It does not send workout, body or nutrition records, and it does not use advertising or third-party tracking cookies. Vercel may also record standard hosting logs to serve and secure the site. Read Vercel's Web Analytics privacy information.

Contact

Questions about this policy? Reach out anytime.