About Fortesca · Open the app

Privacy and health notes

Last updated October 26, 2026.

The short version: Fortesca has no accounts and no email sign-up. Everything you log stays on your device. If you turn on sync, an encrypted copy is stored at fortesca.app that only your devices can unlock; we can't read it. If you turn on reminders, the server keeps only your phone's push address and the times to send a nudge. There are no ads and no trackers that follow you around. The website counts visits with Cloudflare Web Analytics, which uses no cookies and never sees your log. Apart from that, loading the app and its updates, Fortesca only goes online when you search for a food (and sends only what you typed) or when sync is on.

What Fortesca stores, and where

What Fortesca doesn't do

Sync between devices

Sync is off until you turn it on. When it's on, your phone compresses your log and encrypts it with a key made on your device, then stores the result at fortesca.app, on Cloudflare's servers. The key comes from your passkey (Face ID, fingerprint or your phone's PIN) or from a sync code, and it never leaves your devices. The server keeps only the encrypted copy, a random ID for it, a scrambled version of a password your devices derive from the same key, and when it was last changed. It can't tell what's inside: not your food, weight, workouts or targets. Photos are never synced.

Anyone with your sync code can unlock your synced copy, so keep it private. If you lose the code and your passkey, we can't recover the copy, but the log on your phone is untouched. You can delete the synced copy at any time from More, then Data, sync & backup. Like any web request, Cloudflare sees your IP address when your phone syncs.

Reminders

Reminders are off until you turn them on, and they're set per phone. Your phone works out which reminders are due and writes their words; the words stay on your phone. To deliver them, fortesca.app keeps your phone's push address (issued by Apple, Google, Mozilla or Microsoft), the public keys needed to encrypt a message to it, and a list of times with a random tag for each. It doesn't know what a reminder is about or anything you've logged. Each message is encrypted for your phone and carries only the tag. Turning reminders off deletes all of this from the server. If a phone stops checking in for 60 days, the server deletes its entry on its own.

Visit counts

To know roughly how many people use Fortesca, the website loads Cloudflare Web Analytics. It counts page visits without cookies and without building a profile of you. Cloudflare sees what any website sees when you load a page: the page address, the site that linked you, your browser and device type, and your approximate country from your IP address. It never sees anything you log, your targets, or your photos. Blocking it with a content blocker doesn't change how the app works. The preview version and the downloadable single-file copy don't load it.

Food search

When you tap Search or Look up, Fortesca sends the words or barcode you typed to USDA FoodData Central (a US government food database) or Open Food Facts (an open food database), and nothing else: no account, no log, no health data. Those services may record the request like any website does. The food you pick is saved to your library on your device. Food data comes from USDA FoodData Central and from Open Food Facts under the Open Database License.

Ramadan mode and location

If you choose "Use my current location" for Ramadan times, your browser asks first. The location is rounded to about a kilometer, stays on your device, and is used only to work out fajr and maghrib. Picking a city from the list shares nothing.

Hosting

The app's files are served by Cloudflare at fortesca.app, and by GitHub Pages at the old Plate address. Like any web host, they may record technical details of requests, such as IP addresses, for security and operations. That's covered by their own privacy statements. Neither receives anything you log in Fortesca, apart from the encrypted sync copy and the reminder times described above.

Feedback

If you email feedback to support@fortesca.app, we see what you send: your message, your email address, and the app version and device type the app adds. Your targets and totals are included only if you tick that box. Feedback is used only to fix and improve Fortesca.

Deleting your data

Go to More › Data, sync & backup › Erase all data. Deleting the Home Screen app, or clearing this site's data in your browser settings, also erases it. Because nothing is stored anywhere else, that's all of it.

Health notes

Changes

If this page changes, the date at the top changes with it.

Questions: support@fortesca.app