Privacy Policy

Last updated: June 10, 2026

This Privacy Policy explains how MyPantri ("MyPantri", "we", "us", or "our") collects, uses, and protects your information when you use the MyPantri mobile application and related services (the "Service"). We are committed to protecting your privacy and complying with the EU/UK General Data Protection Regulation ("GDPR"), the California Consumer Privacy Act ("CCPA/CPRA"), and other applicable data-protection and consumer-protection laws.

1. Who We Are (Data Controller)

MyPantri is the data controller responsible for your personal data. If you have any questions about this policy or wish to exercise your rights, contact us at support@mypantri.app.

2. Information We Collect

Category	Examples	Why we collect it
Account & identity	Email address, name, username, password (managed by our authentication provider), profile photo, bio	To create and secure your account and personalize your experience
Profile & preferences	Household size, cooking skill, favorite cuisine	To tailor recipes and recommendations
Dietary & health data	Allergies, dietary restrictions, and medical/dietary conditions you choose to enter	To warn you about ingredients and personalize recipes. Under GDPR this may be "special category" data (see Section 4)
App content	Pantry items, recipes, shopping lists, friends, and shared recipes you create	To provide the core features of the Service
Photos & camera input	Images you capture or upload to scan barcodes, receipts, or pantry items	To extract item information. Images are processed to detect items and are not used for any other purpose
Usage & device data	App interactions, log/diagnostic data, device and connection information	To operate, secure, debug, and improve the Service

3. How We Use Your Information

To provide, maintain, and improve the Service and its features;
To authenticate you and keep your account secure;
To generate recipes, nutrition estimates, and dietary warnings tailored to your inputs;
To send service-related communications, including email verification;
To respond to your requests and provide support;
To detect, prevent, and address fraud, abuse, and security issues;
To comply with legal obligations.

We do not sell your personal information, and we do not use your content to train our own advertising profiles.

4. Legal Bases for Processing (GDPR)

Contract — to provide the Service you request (account, recipes, lists).
Consent — for optional features and, in particular, for processing dietary/health information you choose to provide. This is "special category" data under Article 9 GDPR; we process it only with your explicit consent, and you may withdraw consent at any time by deleting that data or your account.
Legitimate interests — to secure, debug, and improve the Service, where not overridden by your rights.
Legal obligation — where processing is required by law.

5. Third-Party Services (Processors)

We share data with trusted service providers only as needed to operate the Service. These providers process data on our behalf under appropriate agreements:

Provider	Purpose	Data shared
Clerk	User authentication & account management	Email, name, credentials, OAuth identifiers
OpenAI	AI recipe/nutrition generation and image/photo analysis	Your prompts, recipe inputs, pantry context, and scanned images. Do not enter information you do not want processed by a third-party AI provider
Google (Gmail API)	Sending verification emails	Recipient email address and message content
Open Food Facts	Barcode product lookups	Scanned barcode numbers (no personal data)
Replit	Application hosting & database	All Service data, stored securely
Apple	App distribution via the App Store / TestFlight	As governed by Apple's privacy policy

6. International Data Transfers

Your information may be processed in countries outside your own, including the United States. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

7. Data Retention

We keep your personal data for as long as your account is active or as needed to provide the Service. You may delete your content or account at any time; upon account deletion we will delete or anonymize your personal data within a reasonable period, except where retention is required by law.

8. Your Rights

Depending on your location, you have the right to:

Access the personal data we hold about you;
Correct inaccurate or incomplete data;
Delete your data ("right to be forgotten");
Restrict or object to certain processing;
Data portability (receive your data in a portable format);
Withdraw consent at any time;
Lodge a complaint with your local data-protection authority.

California residents have additional rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of "sale" or "sharing" (we do not sell or share personal information as defined by the CCPA). To exercise any right, email support@mypantri.app. We will not discriminate against you for exercising your rights.

9. Children's Privacy

The Service is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.

10. Security

We use industry-standard technical and organizational measures to protect your data, including encryption in transit and access controls. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date and, where appropriate, by in-app notice.

12. Contact Us

For privacy questions or to exercise your rights, contact support@mypantri.app.