Anything touching your email is a big ask. Here's the whole deal.

One thing: food-delivery receipt emails. The main way in is forwarding — you search your Gmail with this filter (or save it as an auto-forward rule) and send the matching receipts to your personal ForkOwl address:

from:(doordash.com OR eat.grubhub.com OR postmates.com OR uber.com) in:anywhere

That's the receipt addresses of four companies: DoorDash, Uber Eats, Grubhub, Postmates — and only those. You choose what to forward and we never connect to your inbox, so anything not from those senders is never sent, which means it's never parsed, glanced at, or thought about. Your messages from your boss, your doctor, your group chat that moved to email for some reason — invisible to us by construction, not by promise. A second path does the same job: uploading saved .eml files, parsed in your browser.

The in:anywhere part means the search also checks your Archive, Spam, and Trash — still receipt senders only. If you delete receipts the moment they land (respect), they still count. One honest limit: Gmail permanently erases Trash after about 30 days, and nothing can read what no longer exists. So a first analysis can only see as far back as your oldest surviving receipt.

When a forwarded receipt reaches ForkOwl, we parse it the moment it arrives — read the totals and fees off it — and then discard the email itself. What we keep is only aggregate numbers, the same ones your dashboard shows:

• Your spending totals and the fee / tax / tip breakdown.
• Per-month totals and your most-ordered restaurants (counts and spend).
• How many orders came from each app, and a food-category tally (pasta ×14, salad ×2).
• A one-way fingerprint of each receipt, so the same one is never counted twice. It can't be turned back into the receipt.

What we never keep: the raw email, the individual line items, or anything that could reconstruct a receipt. Parsed on arrival, discarded, and we keep only your totals — that's the whole deal.

Reach into your mailbox. ForkOwl never holds a password or a connection to your email — you (or your filter) forward receipts out; nothing reaches in. We cannot send email as you, delete anything, move anything, or read a message you didn't forward. That isn't a policy we adopted; with forwarding there's simply no key to misuse.

It depends how they arrive. Forwarded receipts are parsed on our server the instant they land and then thrown away — only the totals above remain. Uploaded .eml files are parsed in your browser and never uploaded at all; those numbers are held in memory and forgotten when you reload the page. Either way there is no ForkOwl archive of your receipts and no analytics on your food beyond your own totals. We can't leak, sell, or get subpoenaed for a receipt we don't have.

Connecting your own receipts takes a paid account, and an account stores exactly three kinds of thing:

• Who you are: your email address and a hashed password, held by our auth provider (Supabase).
• Whether you're subscribed: a yes/no flag, your plan, and Stripe's reference IDs. Your card number lives at Stripe and never touches ForkOwl.
• Your forwarding address and report: a random address that routes your forwarded receipts to your account, and the aggregate report built from them — the totals described above. Never the receipts, never the line items.
• Snapshots you explicitly save: if you click “Save snapshot” on an upload analysis, we store the aggregate numbers from your dashboard — order count, total spend, overhead, monthly spend, days covered. Totals and counts, nothing more.

What is never stored, for anyone, ever: your raw mail, your receipts, your line items. To delete your account, your forwarding report, and any saved snapshots, write to us and it's done — there's nothing else to scrub.

For an upload session, “Disconnect & wipe everything” sits at the top of your dashboard: it clears everything ForkOwl put in your browser and signs you out, instantly. For forwarding, turn off your Gmail filter and the flow stops the same moment — nothing new arrives — and asking us deletes your stored totals and forwarding address. There's no receipt archive to scrub, because we never kept one.

Ways we could have gotten your order history, and why we refused:

• Your DoorDash/Uber password. Absolutely not. Nobody should ever type a password into someone else's app. This is how horror stories start.
• Bank connections (Plaid etc.). Your bank sees “DOORDASH $47.75” and nothing else — no items, no fees, no story. A bigger ask for worse data. Pass.
• Storing your receipts server-side. It would make the app faster to reopen and much easier to build. It would also make us a honeypot. Pass.

Subscriptions. ForkOwl is $12/month or $115/year, and that's the whole business. When the dashboard compares meal-plan services, nobody pays us for the recommendation — which is why we can show the math even when it says “don't switch.”

The calorie flags are ranges from published research, not measurements of your food. Nobody knows what's in a specific restaurant's alfredo, least of all the restaurant. We label every figure as an estimate and we'd rather say “roughly” a hundred times than be precisely wrong once.

ForkOwl is operated by RooFork LLC, Florida, USA. Questions about this policy, your data, or a receipt that parsed strangely: hello@forkowl.com.