Last updated: 6 November 2026
In short
- We store the places you choose and what you write about them. Nothing more.
- Post text and screenshots are read and then thrown away.
- Your location stays on your phone.
- No ads, no selling data, no cookies on this website.
- You can delete your account and all your data at any time.
1. Who handles your data
The data controller is Omunimax LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, USA, which develops and publishes the ScrollFork app and this website. For any privacy question: privacy@scrollfork.com.
Omunimax LLC is established outside the European Union. Before the app is publicly available we will name our EU representative here (Art. 27 GDPR).
2. What data we process, why and for how long
| What | Which data | Why | Legal basis | How long |
|---|---|---|---|---|
| Account | Email; name and email shared by Apple or Google if you sign in with them; account ID | Create and run your account, send you the sign-in code | Contract (Art. 6(1)(b) GDPR) | As long as you have an account |
| Your places | Links of the posts you share, saved places (Google place ID), categories, lists, “what to order”, “In short”, “Want to try / Been there” status, ratings, comments | Make the app work: maps, lists, search | Contract | Until you delete them or your account |
| Post content | Public text of the post and public name of the account that published it, read when you share the link | Work out which place the post is about | Contract | The text is used and discarded right away; we keep only the account's public name, the city and the number of places mentioned, linked to the post and not to you |
| Screenshots | The images you send us | Read the name of the place | Contract | Deleted right after reading |
| Searches by name | What you type to look up a place | Show you suggestions | Contract | Not stored |
| Location | Your phone's location, if you allow it | Show nearby places and work out distances | Consent, via the phone permission | Stays on your phone: it never reaches our servers |
| Usage statistics | Save events with no data that identifies you (path used, outcome, timing, cost), technical logs of our providers | Check the app works, fix errors, keep costs under control, security | Legitimate interest (Art. 6(1)(f)) | Events: anonymous, no expiry; logs: per provider, usually a few days |
| Waitlist | Email, language, sign-up date | Invite you to the beta | Consent (Art. 6(1)(a)) | Until the beta opens and no longer than 12 months; earlier if you unsubscribe |
| Support | What you write to us by email | Reply to you | Contract or legitimate interest | Up to 24 months |
We don't ask for access to your contacts, microphone or social media accounts. We don't read your messages, your profile or posts you don't share yourself.
3. Automatic reading of posts
When you share a post or a screenshot, an artificial intelligence model (Claude, by Anthropic) reads the text or image and suggests the place, the type of food and what to order. You always confirm or correct before saving. We make no automated decisions with legal or similarly significant effects on you. Under its commercial terms, Anthropic does not use data received through its API to train its models.
4. Google Maps
Maps and place information (location, opening hours, open status) are provided by Google Maps. By using the maps in ScrollFork you agree to the Google Maps/Google Earth Additional Terms of Service, and the Google Privacy Policy applies. We don't store Google's data: we keep only the place ID and, for at most 30 days, the coordinates.
5. Providers
We use these providers, which process data on our behalf and only for the purposes listed, under a data processing agreement:
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, account sign-in, server functions | Servers in the EU (Frankfurt); US company |
| Anthropic | Automatic reading of post text and screenshots (Claude model) | USA |
| Maps, place search, opening hours; Sign in with Google | USA and EU | |
| Apple | Sign in with Apple | USA and EU |
| Resend | Sending sign-in code emails | Servers in the EU (Ireland); US company |
| Cloudflare | Hosting this website, waitlist, cookie-free site statistics | Global network; US company |
| Expo | App distribution and updates | USA |
When data leaves the European Economic Area, the transfer relies on the European Commission's Standard Contractual Clauses and, for certified providers, on the EU-US Data Privacy Framework. You can ask for a copy of the safeguards at privacy@scrollfork.com.
When we introduce subscriptions we will add the payments provider to this list and tell you in the app before it applies to you. Payments go through the Apple and Google stores: we never see your card details.
6. What we don't do
- We don't sell or rent your data.
- We don't show ads or profile you for advertising.
- We don't use third-party analytics or advertising tools in the app.
- This website uses no cookies. Visit statistics (Cloudflare Web Analytics) are aggregated and use no cookies or device identifiers.
7. Waitlist
If you join the waitlist we store your email, language and sign-up date. We use it only to invite you to the ScrollFork beta and to tell you when the app is available. You can withdraw your consent at any time by writing to privacy@scrollfork.com or using the link at the bottom of our emails.
8. Your rights
You have the right to access, correct and delete your data, restrict its processing, receive it in a readable format (portability), object to processing based on legitimate interest and withdraw consent at any time. Write to privacy@scrollfork.com from your account's email address: we reply within one month.
To delete your account and data, see Delete your account.
You can also lodge a complaint with the data protection authority of the country where you live or work.
9. Minimum age
ScrollFork is for people aged 16 and over. If we find out an account belongs to someone younger, we delete it.
10. Security
Connections are encrypted (HTTPS). Each account's data is kept separate by access rules in the database, and service keys stay on our servers, never in the app. No system is 100% secure: if a breach affecting you ever happens, we will tell you as the law requires.
11. Changes
If we change this policy in a meaningful way, we'll tell you in the app or by email before the changes apply. The date at the top shows the latest version.