Fornetto
Privacy
Last updated 8 October 2026
Fornetto is a recipe, weekly-menu and shopping-list app run from the United Kingdom. This page explains what we collect, why, how long we keep it, and what you can ask us to do. It is short on purpose, so that you will actually read it.
Who is responsible for your data (the “controller”): Fornetto is a trading name of SJ Bloxham Ltd, registered in England and Wales, company no. 13031231. Registered office: 1 Mead Villas, Hare Street, Buntingford, England, SG9 0EA. You can reach us at hello@fornetto.app.
What we collect
- Your account. Your name, email address and password. The password is stored in a form we cannot read. We also record when you signed up and when you last used the app, and, if the link that brought you here said where it came from (for example our Instagram, or a recipe someone shared with you), that name, and whether you joined through a friend’s link.
- What you make. Your recipes, photos, weekly menu, shopping lists and collections, and your answers to the getting-started questions about what you eat. If you share a household, the other members see the same recipes, menu and lists.
- How you use it. Which features you use and roughly when, and the type of device you use. We look at this in aggregate to see what works.
- What you tell us. If you answer “How did that shop go?” in the shop, or the one question we email after your first month, your answer and anything you write with it, kept with your account.
- Your email choices. Whether you want tips and what’s new, whether you’d rather not get getting-started emails, and when and where you changed either.
- Your reminders, if you turn them on. Which of the two reminders you want and on which day, when and where you chose, and, for each phone or browser you turn notifications on in, the address its notification service gave us, the keys that encrypt a message to it and the kind of device it is. That browser also keeps a note of which account turned them on, so a reminder never reaches a device someone else has since signed in on, and so that signing back in on it brings your reminders back.
- Payments. If you buy Premium, a payment provider handles your card. We never see or store card numbers. We keep your plan and whether your subscription is active.
- Our server’s log. Each request to our server is written to a log line: the time, what was asked for and how it was answered, and the IP address it came from — never your password or your session. Our hosting provider keeps those lines for seven days. Basis: our legitimate interest in running and securing the service.
Why we use it
Each purpose, and the legal basis we rely on for it:
- To run Fornetto: signing you in, showing your recipes, building your list. Basis: our contract with you.
- To provide the AI features you ask for. When you import a recipe from a link or photo, ask for one from a title, improve a recipe, estimate nutrition or sort a list by aisle, the relevant text or image is sent to an AI provider to do that job. It is not used to train their models. Basis: our contract with you.
- To support you and improve the app. We may look at how Fornetto is used, including what people add, and read what you tell us when the app asks how a shop went, to fix problems, help with a request, and decide what to build. We keep this to what is needed. Basis: our legitimate interest in running and improving the service.
- To know which of our posts and links bring people here. Links we share, and the page a shared recipe opens on, can say where they came from, and if yours did we keep that name with your account and count sign-ups by it. Nothing is stored on your device for this. Basis: our legitimate interest in knowing where our effort is worth spending. If you’d rather we didn’t keep it, email hello@fornetto.app and we’ll remove it.
- To see whether our homepage does its job. We count visits to our homepage and our sign-up page, and which of our links, if any, each one came through. The count has no name, address or device on it and can’t be tied to you. We don’t share it, and nothing is stored on your device for it. So that one connection can’t flood the count, we use your IP address briefly. Basis: our legitimate interest in improving those pages.
- To give you and a friend what their link offered. If you sign up through a friend’s link, we keep a record of whose link it was for as long as you have an account, so that after your household’s first shop you get what the link offered (an extra week of Premium, or extra AI credits if you’re already on Premium), your friend gets their credits unless their household has had the most it can, and each friend is counted once. Your friend sees how many people joined through their link, not who. Nothing is stored on your device for this. Basis: providing what the link offered you both. If you’d rather we didn’t keep it, email hello@fornetto.app and we’ll remove it.
- To send the reminders you turned on. A notification on the morning you shop, or on the evening you plan the week. It reaches your device through your browser’s own notification service (Apple, Google, Mozilla or Microsoft), encrypted so that only your device can read it, and it never contains your list. Nothing else is ever sent this way. Basis: your consent. Each reminder is off until you turn it on, and you can turn it off again in Account → App, or in your browser’s settings.
- Account emails: verification, password resets, household invites, your subscription, and anything you ask us to send, like the install link. They arrive unless the address stops accepting email, because your account can’t work without them. Basis: our contract with you.
- Getting-started emails: a few emails to help you settle in, including the two reminders before a free Premium trial ends. You can say no when you sign up, in Account → Profile, or with the Unsubscribe link in any of them. Basis: our legitimate interest in helping new customers use what they signed up for, as the email rules allow for existing customers unless they say no.
- Tips and what’s new: a monthly email, and, if you ticked the box on or after 2 October 2026, an occasional note: one if you haven’t opened Fornetto for a fortnight and a last one after a month, one about Premium a week after a free trial ends, and one question after your first month. Four at most, ever. Only if you asked for it — at sign-up, in Account → Profile, or (for the monthly email alone) when the app asked you once. Basis: your consent, which you can withdraw at any time with the Unsubscribe link at the foot of any of them or in Account → Profile.
We also record whether each email was delivered, bounced or reported as spam, so that we stop sending to addresses that don’t work. We don’t track whether you open our emails. The links in them say which email they came from, so we can count how many visits each email brings; we don’t record who made them. Basis: our legitimate interest in keeping our email deliverable and knowing which emails are worth sending.
Withdrawing consent, or telling us to stop, doesn’t affect anything we did before.
Trying it before you sign up
Our homepage lets you paste a recipe link to see what Fornetto makes of it. You don’t need an account for that, so here is what happens to what you paste:
- The link is sent to our server, which fetches that page and sends back the recipe on it. No AI is involved, and we don’t save the link or the recipe.
- We count how many times the demo is used and whether it worked. The count says nothing about who used it or which page they pasted.
- So that one connection can’t overuse it, we keep your IP address for about a day. Basis: our legitimate interest in keeping the service running.
- If you press Sign up to keep it, the link travels in the verification email we send you and in the address its button opens, so the recipe is waiting when you confirm. Nothing is stored on your device while you try the demo or sign up. If you open that button in a browser where you aren’t signed in, the link is kept in that browser so it is still there once you sign in; after an hour it is ignored.
Who sees it
The people who run Fornetto, and the companies that provide our hosting, photo storage, payments, email delivery, error monitoring and AI features, each only for that purpose. Some of these companies are outside the UK. Where they are, we rely on safeguards approved under UK data-protection law. We do not sell your data and we do not share it with advertisers.
How we protect it
Everything travels over encrypted connections, passwords are hashed, and access to the systems behind Fornetto is limited to the people who need it.
How long we keep it
For as long as you have an account. Deleting your account (Account → Delete account) removes it straight away, with your email choices and your answers to “How did that shop go?” and to the one question we email, and with your recipes, lists and photos if you are the only person in your household. If you share a household, the shared recipes stay with the other members with your name removed. Anonymous usage figures that cannot identify you are kept.
A device’s notification address goes sooner: when you sign out on that device (signing back in there sets it up again, unless someone else has signed in on it in between), when you turn notifications off on it, or about a month after you last opened Fornetto on it.
A few other things go sooner. Sign-in attempts are counted by IP address for up to an hour and the count is removed within a couple of hours. A link to confirm your address or reset your password is removed a day after it expires. An invitation to a household that nobody accepted is removed a week after it expires. And an account that is never confirmed and never signed in to is deleted after thirty days.
One thing stays after you delete your account. If email to an address bounces or is reported as spam, or you ask us never to email an address again, we put it on a do-not-email list — the address, the reason and the date, nothing else — and keep it for as long as Fornetto sends email, so that we never email it again by mistake. (Unsubscribing is kept with your email choices instead, and goes with your account.) Basis: our legitimate interest in honouring your objection and in keeping our email deliverable.
Saying no to marketing email
You can tell us to stop marketing emails — getting-started emails, trial reminders and tips — at any time, and we will. Use the Unsubscribe link at the foot of any of them, untick the boxes in Account → Profile, or email hello@fornetto.app. Account emails still arrive.
Your rights
You can ask for a copy of your data, ask us to correct, delete or stop using it, object to how we use it, or take it elsewhere. Email hello@fornetto.app and we will reply within a month. You can also download your data yourself from Account → Data. If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk.
Cookies and children
Fornetto uses one cookie, to keep you signed in. There are no advertising or tracking cookies. Fornetto is not intended for children under 13.
Changes
If this page changes in a way that matters, we will tell you in the app. The date at the top is when it last changed.