Skip to content

Consumer Health Data Privacy Policy

Last updated October 1, 2026

This policy covers consumer health data as defined by Washington's My Health My Data Act and Nevada's consumer health data law. It applies to everyone who uses Forkmate, wherever you live. Forkmate is a product of High Country Codes, a Colorado sole proprietorship ("we," "us"). Our general Privacy Policy covers everything else.

Consumer health data we collect

  • Your food log: the meals and foods you record, with their calories, macros, caffeine and fluid values, and any notes.
  • Body and profile details you choose to enter: sex, age, height, weight, activity level, diet style, allergies, and calorie or macro goals.
  • Your garden choices: up to two weekly intentions you pick from a fixed list (such as "Try a new vegetable" or "Eat before a long ride"), and whether you marked each one done.
  • Display preferences: whether you chose to hide calorie and macro numbers or hide the garden. We use them only to change what the app shows you. They are never sent to an AI assistant, analytics, or anyone else.
  • Your consent record: when you consented to us processing this data.
  • Usage events: records that you used a Forkmate feature and when. For example: that you gave consent; logged, edited or deleted a meal (through the web app or an AI assistant, and whether it had 1, 2–3 or 4+ foods); previewed a plate; moved through an onboarding step; opened the app; connected an AI assistant; or imported from MyFitnessPal. They never contain what you ate, food names, nutrition values, notes, body details, goals, garden choices or display preferences.
  • Anything health-related you put in feedback you send from inside the app.

We do not collect precise location, biometric data, or information about reproductive or sexual health, gender-affirming care, or health-care services you seek.

Why we collect it

To provide the food log you asked for: to store your diary, compute your daily calorie and macro totals and your targets, show them to you in the web app or through an AI assistant you connect, show you your week in the garden (which days you logged and which foods were new to you, worked out from your food log and not stored separately), remember the intentions you chose, apply the display preferences you set, and keep your account secure. We also use usage events to understand which features are used, so we can improve Forkmate and decide how to fund it. Usage analytics is a condition of using Forkmate. We do not use any of it for advertising, and we do not use it to train AI models.

Where it comes from

  • From you, directly, in the web app.
  • From an AI assistant you connect (such as Claude or ChatGPT), when you ask it to log or change something in your Forkmate diary.
  • From files you choose to import, such as a MyFitnessPal export.

Consent

We collect consumer health data only after you consent to it. Before you log anything, in the web app or through an AI assistant, we ask you to tick a box consenting to Forkmate processing your health-related data and sharing pseudonymous usage events with our analytics provider, PostHog. Usage analytics is a condition of using Forkmate, so it is one consent, not a separate choice: if you would rather not share usage events, you can withdraw your consent, which also pauses logging. If you consented before October 1, 2026, we ask you again before anything about you is sent to PostHog. Until you do, nothing health-related is saved, with two exceptions, both things you do yourself: your display preferences, which we accept before consent so hiding numbers never waits on it, and anything you choose to write in feedback you send us.

Who we share it with

We share consumer health data only with these service providers, under contract, acting solely on our behalf:

  • Cloudflare: hosting and storage for the app and your diary.
  • PostHog: usage analytics. From our server, PostHog receives records of which Forkmate features you used and when, under an identifier derived from your account ID that PostHog cannot reverse. PostHog may use them only to provide analytics to us. It never receives what you ate, food names, calories or other nutrition values, notes, body measurements, goals, garden intentions, your display preferences, your IP address or your email.

If you email us health-related information, that email is handled by Google (Workspace), our business email provider. When you or your assistant search for a food or scan a barcode, only the search term or barcode goes to the public USDA FoodData Central and Open Food Facts databases. It is never sent with your identity or account, so it is not linked to you. An AI assistant you connect receives what Forkmate returns to it, under that assistant's own terms and at your direction. The same applies if you connect through a third-party directory's gateway (such as Smithery) rather than directly to mcp.forkmate.ai: your requests and our responses pass through that service under its own terms, and it may hold the authorization that lets it read and change your diary for you until you disconnect it there. Forkmate is listed in Smithery's directory, but Smithery runs that gateway, not us. You choose whether to use it, and we don't control how it handles your data. Connecting directly to mcp.forkmate.ai avoids it.

We do not sell consumer health data, and we have not sold it. We do not share it with advertisers, data brokers or affiliates, and we do not use geofencing around health-care facilities.

Your rights

  • Access: confirm whether we hold your consumer health data, get a copy, and get the list of every third party it was shared with. Your full data export is in the app under Settings.
  • Deletion: delete your data or your whole account. Account deletion in Settings erases it from our live systems immediately. Copies in our hosting provider's point-in-time recovery expire within 30 days, and we ask PostHog to delete your usage events: PostHog removes the person record within minutes and deletes the events in its next scheduled deletion batch.
  • Withdraw consent: at any time, in Settings. We stop collecting new health data, stop sharing your diary with connected AI assistants, stop sending usage events, and ask PostHog to delete the ones tied to you (PostHog removes the person record within minutes and deletes the events in its next scheduled deletion batch). There are two exceptions, both things you do yourself: you can still change your display preferences, so you can always hide the numbers or the garden, and we still keep anything you choose to write in feedback you send us. Apart from those usage events, withdrawing deletes nothing: we keep your data only so you can still see, export or delete it, or pick up where you left off. Deletion is a separate request you make when you want it. Withdrawal does not affect processing before it.

To exercise any of these, or if something is not available in the app, email privacy@forkmate.ai. We respond within 45 days, and we will tell you if we need up to 45 more. If we decline your request, you can appeal by replying to our decision. We answer appeals within 45 days. If you are not satisfied, you can contact the Washington State Attorney General at atg.wa.gov/file-complaint or your own state's attorney general. We will not treat you differently for using any of these rights.

Changes

If we change what consumer health data we collect, why, or who we share it with, we will update this page and ask for your consent again before the change applies to you.