Privacy policy
Pantry Pro keeps an inventory of the food in your home. Doing that means holding what you tell it and what it reads from the photographs you take. This explains what is collected, where it goes, and what it is never used for.
What is collected
- Your account. When you sign in with Google or Apple, we receive the email address and display name on that account, and an identifier for it. We never receive your password.
- What you put in. Inventory, storage locations, purchases, recipes, shopping lists, meal plans, notes — everything the app is for.
- Photographs. Receipts, shelves, and cookbook pages you upload, and the data extracted from them.
- Receipts you email. Your household has an address of its own for forwarding store receipts and order confirmations. The message, its attachments, and the data extracted from them. Only what is sent to that address; we never read your mailbox.
- Operational records. Ordinary server logs, and records of photo analysis — when it ran, which model read it, and how much was used.
Photographs are read by an AI model
This is the part worth knowing. When you photograph a receipt, a shelf, or a recipe, the image is sent to Anthropic’s API to be read, and the text it returns is what populates your pantry. Recipe text you paste or import is sent the same way, and so is a receipt you email in, whether it arrives as an attachment or as the text of an order confirmation. Anthropic processes it to answer that request. Barcode scanning is the exception: it is decoded in your browser and the image is never uploaded at all.
Photograph what you mean to. A receipt shows what you bought, where, and when — and if you paid by card, the last digits are often printed on it.
Who else is involved
- Supabase — the database that stores your data, the file storage that holds your photographs, and the service that signs you in.
- Render — where the application runs.
- Anthropic — reads photographs and recipe text, as above.
- USDA FoodData Central and Open Food Facts — looked up for nutrition and product information by item name or barcode. Product photographs come from Open Food Facts, and load straight from their servers when a screen showing them is displayed. Like any image hosted elsewhere, that request goes out from your device rather than from us; it does not tell them who you are here, and it does not carry the page you were on.
- Google and Brave search APIs — used to find recipes when you search for them. Your search terms are sent; nothing about your pantry is.
- Stripe — takes payment if you subscribe. Card details go to Stripe directly and are never seen by, or stored on, this service.
- Resend — receives mail sent to your household’s receipt address and holds it for 30 days so it can be read; it also delivers sign-in and invitation email. Nothing reaches Resend unless you send it there, and it sees only that message, never your mailbox.
- Grocery partners — only if you ask. Choosing to send a shopping list to a store transmits the item names and quantities on that list, and nothing else. It needs your explicit permission first, and you can withdraw it at any time in Settings. Following a plain store link sends nothing about you at all.
Recipe pages you import are fetched from the site they are published on, which will see that request.
What does not happen
- Your personal information is not sold, and it is not shared for cross-context behavioural advertising.
- There is no advertising in the app, and no advertising or analytics tracker on this site.
- There are no tracking cookies. Signing in stores a session token in your browser so you stay signed in; that is the only thing kept there.
- Your data is not used to train AI models.
Keeping and deleting
Data is kept while the account exists. Deleting an item, recipe or receipt in the app removes it, including the stored photograph.
You can take a copy or delete everything yourself, under Settings. The download is one file containing every row your household holds. Deleting removes the household and everything in it, deletes the stored photographs and cancels any subscription; it cannot be undone and no copy is kept, so take the download first if you want one. Anything else — a correction, a question about what is held — goes to privacy@pantry-pro.app. If you no longer have the app, see Delete your account.
If you are in California
The CCPA as amended gives you the right to know what is collected, to have it deleted, to a portable copy, and not to be discriminated against for asking. Use the address above, or use the controls in Settings. A Global Privacy Control signal from your browser is honoured automatically and stored against your household. Personal information is not sold or shared for cross-context behavioural advertising, so there is nothing an opt-out has to stop — but the preference is recorded all the same, because a signal honoured only from the day it becomes inconvenient is not honoured at all.
Children
Pantry Pro is not intended for children under 13 and accounts are not knowingly created for them.
Changes
Material changes will be reflected here with a new date above. Paid plans and grocery referral links are live and described above. Advertising, and receiving receipts by email, are described above whenever this deployment offers them.