Legal

Privacy Policy

Last updated: 6 July 2026

1. Who we are

PAntry is operated by Pantry App Ltd ("we", "us", "our"), a company registered in England and Wales (company number 16550847) with its registered office at 20 Wenlock Road, London, N1 7GU. Pantry App Ltd is the data controller for your personal information. This policy explains what information we collect when you use the PAntry app and website, how we use it, and the choices you have. If you have any questions, contact us at hello@pantry-app.co.uk.

2. Information we collect

  • Account details. Your email address, display name and password when you create an account. Passwords are handled by our authentication provider and are never visible to us.
  • Content you add. Your pantry items, saved recipes, dietary preferences, allergies, dislikes and chat messages.
  • Photos you choose to take. If you scan a receipt, the photo is uploaded and processed to read the items on it. Receipt photos are used for that purpose only.
  • Voice input. If you use voice features, your speech is processed to convert it into text so the app can act on it.
  • Subscription status. Your subscription tier and a customer reference from our subscription provider. We never see your payment card details; payments are handled entirely by Google Play or the Apple App Store.
  • Usage information. How you use the app, including feature usage counts (such as recipes generated per day), device type, and interactions with the app's screens. See section 6 for details on analytics.

3. How we use your information, and our legal grounds

UK data protection law requires us to have a legal ground for each way we use your information. These are ours:

  • To provide PAntry — managing your pantry and saved recipes, generating recipe suggestions, answering your cooking questions, and operating your subscription and its limits. Legal ground: performing our contract with you.
  • To personalise recipes around your allergies and dietary needs. Legal ground: your explicit consent (see section 4).
  • To send essential service messages, such as email confirmation and password resets. Legal ground: performing our contract with you.
  • To send you tips, recipes and updates, if you've opted in. Legal ground: your consent, which you can withdraw at any time.
  • To understand how PAntry is used so we can improve it. Legal ground: our legitimate interest in improving the service. You can opt out of analytics at any time in the app's Settings.
  • To keep PAntry secure and prevent fraud or abuse. Legal ground: our legitimate interest in protecting the service and its users.
  • To meet legal obligations, such as tax and accounting rules. Legal ground: legal obligation.

4. Allergy and dietary information

Information about your allergies and dietary needs is health-related, so the law treats it as special category data with extra protection. We ask for your explicit consent before you first add it, and we use it only to personalise recipes and suggestions and to warn you away from unsuitable ingredients. You can withdraw your consent at any time by removing the information from your preferences or deleting your account.

5. AI processing

PAntry's recipe suggestions and chat are powered by artificial intelligence. To provide these features, relevant parts of your data, such as your pantry contents, dietary preferences and chat messages, are sent through our servers to our AI provider (OpenAI) for processing. Under our agreement with them, this data is used only to generate your results and is not used to train their models.

6. Analytics

We use PostHog, an analytics service hosted in the European Union, to understand how PAntry is used. This covers events such as screens visited and features used, linked to a pseudonymous user reference rather than your name or email address. We do not record your screen or capture what you type. You can opt out of analytics at any time in the app's Settings, and the app will stop sending analytics events from that device.

7. Payments and subscriptions

Subscriptions are purchased through Google Play or the Apple App Store, which handle all payment processing. We use RevenueCat to manage subscription status. We receive confirmation of your subscription tier and its renewal state, but never your payment details.

8. Our service providers

We share data with a small number of providers who process it on our behalf:

  • Supabase: account authentication and subscription/usage records
  • Microsoft Azure: application hosting, data storage and error monitoring
  • OpenAI: AI processing for recipes and chat (section 5)
  • RevenueCat: subscription management (section 7)
  • Google Play / Apple App Store: payment processing
  • PostHog: analytics (section 6)
  • Resend: sending account emails such as confirmations and password resets

9. Where your data goes

Your data is stored in the UK and the European Union. Some of our providers (OpenAI, RevenueCat and Supabase) may process data in the United States. Where that happens, the transfer is protected by standard contractual clauses with the UK addendum approved by the Information Commissioner, or by the UK-US Data Bridge for providers certified under it (such as Resend). You can ask us for details of these safeguards at any time.

10. Information sharing

We do not sell, trade or rent your personal information. Beyond the service providers above, we share information only with your consent, to comply with legal obligations, to protect our rights and prevent fraud, or, if our business is sold or reorganised, with the new owner on the same terms as this policy.

11. Data security

All data is encrypted in transit and at rest. We apply appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure or destruction.

12. Data retention and deletion

We keep your personal information for as long as your account is active. You can delete your account at any time from the app's settings, which removes your personal data from our active systems straight away; residual copies in backups and logs are deleted on a rolling basis within around 35 days. We keep basic subscription and transaction records for up to six years, as tax and accounting law requires. If you can no longer sign in, email us at hello@pantry-app.co.uk and we will delete your account for you. Deleting your account does not cancel an active subscription; manage that in your Google Play or App Store account.

13. Your rights

Under UK data protection law you have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict how we use it, and to withdraw any consent you have given at any time. You can exercise most of these directly in the app, or by contacting us. If you are unhappy with how we handle your data, please complain to us first at hello@pantry-app.co.uk or via the contact form, and we will respond within 30 days. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

14. Marketing communications

If you opt in, we may send you tips, recipes and updates about PAntry. You can unsubscribe at any time in your account settings or via the link in any marketing email. Essential service emails are sent regardless, as they are required to operate your account.

15. Automated decisions

PAntry uses AI to generate recipes and suggestions, but we do not make any automated decisions about you that have legal or similarly significant effects.

16. Children's privacy

PAntry is not intended for children under 13, and we do not knowingly collect personal information from children under 13.

17. Changes to this policy

We may update this policy from time to time. We will post any changes on this page and update the date at the top; for significant changes we will notify you in the app or by email.

18. Contact us

Questions about this policy or your data: hello@pantry-app.co.uk, or use the contact form.

By using PAntry, you agree to the collection and use of information in accordance with this policy.