Where Forkin runs.
Every provider, every data centre, every byte of your data — mapped. We picked each one for the same reason: European jurisdiction, renewable contracts or a near-zero-carbon grid, and no compulsory data-sharing under foreign law.
Everything runs in the European Union
From the moment you open the app to the moment we send you a notification, your data stays inside the EU. We do not use US-headquartered hosting providers, US-headquartered CDNs, or US-headquartered AI providers for personal data. The only US service we touch is Apple's APNs (for iOS push notifications) — which is legally unavoidable and carries only an opaque device token.
Who hosts what
Hetzner
Germany 🇩🇪Application servers, PostgreSQL database, Qdrant vector search, ETL pipeline.
European cloud, renewable-energy-powered data centres in Nuremberg and Falkenstein, ISO 27001-certified. Not subject to the US Cloud Act.
Bunny.net
Slovenia 🇸🇮Edge CDN for static assets and image delivery (EU-only routing).
EU-headquartered, EU-only edge routing for our pull zone, no US points-of-presence for our traffic.
Hyperstack
Iceland 🇮🇸 (EEA)Always-on AI GPU — image and text embeddings (DINO, BGE-M3), speech-to-text (Whisper), meal scan depth pipeline, and text-to-speech.
GPU cloud in Reykjavik on near-zero-carbon geothermal and hydro (~28 gCO₂e/kWh). EEA jurisdiction, GDPR applies. Only model tensors transit — no personal data.
Scaleway
France 🇫🇷Generative AI (VLM/LLM) for label extraction and content moderation.
European OpenAI-compatible inference in their Paris data centre, on France's low-carbon grid (nuclear + renewables); Scaleway publishes its environmental footprint. No data leaves the EU.
Brevo
France 🇫🇷Transactional and marketing email.
EU-headquartered ESP. All mail relayed from French infrastructure under EU jurisdiction.
Sentry (EU region)
Germany 🇩🇪Error monitoring.
Their EU-region ingest stores all events inside the EU. Personal identifiers are scrubbed before send.
Stripe
Ireland 🇮🇪 (EU)Merchant of record for web payments.
Stripe Payments Europe, Ltd. (Ireland) processes web payments under EU law and handles VAT and chargebacks. We never store card details.
What never leaves the EU
- Your scan history and pantry.
- Your diet preferences, allergens, and health-related signals.
- Your body measurements and progress photos.
- Your recipes, meal plans, and shopping lists.
- Your authentication credentials and account email.
The unavoidable exceptions
- iOS push notifications via Apple's APNs (US-routed, opaque device token only — no message content sent in clear).
- Android push notifications via Google's FCM (same as above, opaque token only).
- App Store and Google Play purchase receipts (validated via their APIs).