Your data, explained
Privacy Policy
What we collect, why we use it, and the choices you have.
Last updated: October 15, 2026
The short version.
- Your location is used only while the app is open: to find restaurants near you and to confirm you showed up. Never in the background.
- No ads, no advertising trackers, no data brokers. We do not sell personal information.
- Google sees the rough area you are searching in, never your check-in position.
- You can delete your account from inside the app. Core records and your uploaded photos are erased seven days later (see section 5).
- The website demo uses fictional restaurants and never asks for your location.
1. Who we are
Get Forked is operated by Byte Ranch, LLC, based in Asheville, North Carolina, United States (“we,” “us,” or “our”). This policy covers getforked.io and the Get Forked mobile app for iOS and Android, including pre-release testing.
The app is in development. App-related collection described below applies when you use the corresponding feature in an available build.
Our privacy contact is [email protected].
2. Information we collect
Account and profile
You can use the app without creating an account; we then keep a guest profile on your device’s session so your points and preferences persist. If you create an account, we process your email address, username, display name, sign-in identifiers, authentication records and any avatar you provide. Email sign-in uses a hashed password. Apple or Google sign-in provides the account information those services make available, such as your name and email or private relay address; we never receive your Apple or Google password.
Preferences and activity
We store preferences such as distance, price range, cuisines and dietary flags, along with restaurant collections, spins, respins, selected restaurants, double-down selections, check-in outcomes, points, levels and streaks. If you add menu information or use friend sessions, we process the content and participation information needed for those features.
Location
With your device permission, the app reads your location while you use it to discover nearby restaurants and verify check-ins. Spin requests, including their coordinates, are stored with your activity. Check-in verification compares your current location with the restaurant; we store the result, method and time, and may record the distance involved in a failed attempt. We do not store a separate position for successful check-ins.
We do not request background location. The website and its demo do not request your location.
Photos you choose to upload
If you upload a receipt to verify a visit or an avatar for your profile, we store the image privately with associated upload information. Receipts can contain personal information. Only submit your own receipts, and avoid including unrelated personal or payment details.
Device and usage information
The app sends first-party usage events such as app opens, spins and check-in attempts, including relevant event properties, platform, app version and timestamps. If you enable notifications, we process your device’s push token to deliver them. Requests to the service generate logs containing IP addresses, request information, device or browser information and timestamps.
Support messages
If you email us, we receive your email address, message and any attachments you send. Do not send passwords or full payment-card details.
3. How we use information
- Provide accounts, restaurant discovery, saved collections, double downs, friend sessions, check-ins and points.
- Deliver requested account emails and notifications.
- Understand feature usage, diagnose errors, maintain security and prevent misuse, such as rejecting check-ins made far from the restaurant.
- Respond to support, access, correction and deletion requests.
- Meet applicable legal obligations and protect the service and its users.
We do not sell personal information or use it for targeted advertising. The app uses first-party usage reporting rather than third-party advertising or analytics SDKs.
4. Providers and other disclosures
We use service providers for specific parts of the app. Information is provided as needed for those functions:
| Provider or recipient | Purpose and information |
|---|---|
| Google Places | Restaurant searches use the approximate center of a search area, roughly a kilometre across, plus search terms and filters. Your precise check-in coordinates are not sent to Google. |
| Apple and Google sign-in | Process authentication when you choose their sign-in options, under their own policies. |
| Mailgun | Processes email addresses and transactional email content, such as verification and password resets. |
| Expo, Apple and Google notification services | Process push tokens and notification content when notifications are enabled. |
| Hosting and storage providers, including Wasabi | Host service data, uploaded images and database backups. |
Your username, display name, level and avatar can be seen in user search, friend features and public profile or invitation links. Public profiles also show total points and lifetime counts of spins, check-ins, verified Double Downs and perfect runs. They do not show individual restaurants visited, precise locations or receipts. A receipt upload is used for verification, not published as a review.
Opening a restaurant in a maps app or following an external link takes you to a separate service with its own privacy policy. We may also disclose information when required by law, to protect rights or safety, or in connection with a business transfer subject to applicable privacy requirements.
We store block preferences and reports you send, including the reported content, your reason and any details you provide. Reports are private to our moderation team; the reported person is not told who submitted them. We use this information to investigate abuse, restrict contact and moderate content. Limited report evidence may be retained for safety or dispute resolution after an account is deleted.
5. Retention and account deletion
We retain account information, preferences and activity while your account is active and needed to provide the service. The account-deletion flow disables sign-in immediately and deletes your account records after seven days: account and authentication records, profile data, saved collections, spins, point history, registered device tokens, and the receipt photos and avatars you uploaded, which are stored separately and removed in the same cleanup.
To have uploaded images removed sooner, or without deleting your account, email [email protected] and we will confirm when it is done. Do not assume that uninstalling the app deletes your account or uploads.
Some diagnostic event records remain after their link to the account is removed. We may retain limited information where needed for security, dispute resolution or legal obligations. Database backups are kept for 30 days, so removed data can remain in a backup until that cycle expires. Support correspondence and operational logs are retained as needed for their purposes.
For the in-app steps and a way to request deletion without the app, visit Delete your account.
6. Your choices and privacy rights
- Permissions. Change location and notification permissions in your device settings. Disabling location limits nearby discovery and GPS check-ins; a receipt option is available for verification.
- Profile. Update account details and preferences in the app.
- Requests. Email [email protected] to request access, correction, a copy of your information, deletion, or other rights available where you live.
We may need to verify that a request comes from the account holder. We respond within the time required by applicable law and explain any lawful limitations. Depending on where you live, for example under the GDPR or the California Consumer Privacy Act, you may also have rights to restrict or object to processing, withdraw consent, or complain to your local data protection authority. We do not sell or share personal information for cross-context behavioural advertising.
7. Website demo and local storage
The website demo runs in your browser. It does not send its selections to our servers, create an account, use cookies, or save anything in browser storage. Fonts and artwork are served with the website. Hosting systems receive ordinary request and security-log information when you load a page.
8. Security and international processing
All traffic between the app, the website and our servers is encrypted with TLS. Email passwords are stored only as hashes. Uploaded files sit in private storage with restricted access. No service can guarantee absolute security; contact us if you suspect unauthorized account activity.
Byte Ranch, LLC is based in the United States. Information may be processed by us and our providers in the United States or other countries where they operate, which may have different data-protection laws. Applicable legal protections continue to apply.
9. Children
Get Forked is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact us so we can investigate and address it.
10. Changes and contact
We will update this policy as the service evolves and change the date shown on this page. We will provide additional notice or request consent for material changes where required by law.
Byte Ranch, LLC
Asheville, North Carolina, United States
[email protected]