Pantryfox Privacy Policy
Last updated: October 21, 2026
Pantryfox ("Pantryfox", "we", "us") is a kitchen app that tracks your pantry, plans meals, and suggests recipes. It is run by Saahil Padwal (operating as Pantryfox). Questions about this policy: pantryfoxapp@gmail.com.
This policy explains what we collect, why, who handles it, and the choices you have. We wrote it to be read.
The short version
- We collect what the app needs to work: your account, your kitchen, your preferences, and the photos you choose to scan.
- We do not sell your data, show ads, or track you across other apps and websites.
- The app has no analytics or advertising tools in it.
- Photos of receipts and your fridge are sent to an AI service to read them, then deleted from our storage when you finish the scan, or within about 24 hours if you abandon it.
- Recipe suggestions are written by an AI service. It is told your allergies, diets, dislikes, equipment and pantry items. It is not told your name or email.
- You can delete your account and data. See "Your choices" below.
What we collect
Account. Your email address, a display name, and a username. When you create an account we also record that you agreed to these documents: which version, and when. Your password is handled by our sign-in provider and stored only as a secure hash; we never see or store it in readable form.
Preferences you enter. Allergies (including any you type yourself), diets, ingredients you dislike, calorie and nutrient goals, cooking skill, measurement units, household size, weekly grocery budget, takeout price estimate, kitchen equipment, theme days, time zone, language, and your notification settings and times.
Allergy, diet and nutrition goals can be health-related. We use them only to filter and write recipes for you and your household. We do not use them for advertising.
Your kitchen. Pantry items, quantities, expiry dates, storage locations, prices you enter, grocery lists, saved and generated recipes, cookbooks, reviews, what you cooked and when, streaks, and badges.
Photos and barcodes. Photos of receipts or your fridge that you take or choose, to add food to your pantry. Barcode numbers you scan. We read only the photos you pick; we do not access the rest of your photo library.
Friends, sharing and households. Friend connections and requests, blocks, share links you create, and who is in your household. If you turn on sharing of progress, friends can see your streak and badge count.
Device and notifications. If you turn on notifications: a push token, your device type, and the device name, so we can send reminders to your phone.
Reports and blocks. If you report a recipe, cookbook or person, or block someone, we keep what you reported, why, and which account sent it, so we can act on it and stop repeat abuse. The person you reported is not told it was you.
Payments. If you subscribe to a paid plan, you pay on a page run by Stripe, our payment processor. Stripe collects your card and billing details; we never see or store your card number. We keep your Stripe customer ID, whether your subscription is active, when it renews or ends, and which household it belongs to.
Records of AI use. When you use scanning, recipe, or image features we record the time, which feature, and the usage and cost, so we can enforce fair-use limits and keep costs under control.
What we do not collect. Your precise location, contacts, microphone audio, advertising identifier, card number, or browsing activity. Pantryfox has no analytics or crash-reporting service.
How we use it
- To run the app: sign you in, keep your pantry and lists, apply your allergy and diet filters, track expiry, and show your stats.
- To read your photos and barcodes and add food for you.
- To write recipes, swap ingredients, and make a picture of a dish.
- To send reminders you have asked for.
- To keep the service safe and fair: limits, abuse prevention, and fixing problems.
- To follow the law.
Who handles your data
We use these service providers. Each handles data only to provide its service to us.
| Provider | What it does | What it receives |
|---|---|---|
| Supabase | Hosts our database, sign-in, file storage, and server code. Data is stored in the United States (US West). | Everything the app stores, as described above. |
| Google (Gemini API) | Reads receipt and fridge photos; makes dish pictures. | The photo you scan, or a text description of a dish. We use Google's paid API. Google's terms say prompts and responses on paid services are not used to improve its products, and that it keeps logs for a limited time to detect abuse, keep the service secure, and meet legal duties. |
| Anthropic (Claude API) | Writes recipes and ingredient swaps; helps name items. | Your allergies, diets, dislikes, skill level, equipment, and pantry item names, quantities and expiry. Not your name, email, or account details. Anthropic's terms say API inputs and outputs are not used to train its models by default. Anthropic deletes them from its systems within 30 days, and may keep content flagged for breaking its usage policy for longer. |
| Open Food Facts | Looks up products from barcodes. | The barcode number, sent from our server, not tied to who you are. |
| U.S. Department of Agriculture FoodData Central | Nutrition values. | Ingredient names. |
| Stripe | Takes payment and manages paid subscriptions. | You give your card and billing details to Stripe directly. We send it your email address and your household's ID. Stripe handles payment data under its own privacy policy. |
| Expo and Apple | Deliver push notifications. | Your push token and the notification text. |
If you share, others can see some of it:
- Household members see the shared pantry, grocery list and budget.
- Friends you accept see your display name and username, cookbooks you shared with friends, and your streak and badge count if you allow it.
- Anyone with a share link can read the recipe or cookbook it points to, and the sharer's display name, without signing in. You can revoke a link at any time.
We may disclose information if the law requires it, to protect people's safety, or in a sale or merger, in which case this policy continues to apply unless you are told otherwise.
We do not sell personal information or share it for advertising.
AI features
Scanning, recipes, swaps and images use AI. AI can be wrong. Read "Pantryfox is an aid, not a guarantee" in our Terms, especially about allergies. We send your content to the AI providers above only to produce the result you asked for, and under their current terms they do not train their models on it. They may keep it briefly to detect abuse, as described above.
How long we keep it
- Account and kitchen data: until you delete it or your account.
- Scan photos: deleted when you add the scan to your pantry. A scan you abandon is deleted automatically after about 24 hours.
- Dish pictures are shared between users who get the same dish and do not contain personal information.
- AI usage records: until you delete your account.
- Payment records: Stripe keeps invoices and payment records for as long as tax and financial law require, even after you delete your account. We keep nothing about your card.
- Reports: kept for as long as needed to keep people safe, with your identity removed from them if you delete your account.
- Backups: deleted data can remain in encrypted backups for up to 7 days and then expires.
Your choices
- Delete your account and data from the You tab in the app, then Delete account, or email pantryfoxapp@gmail.com. We will act within 30 days. If you have a subscription, deleting your account cancels it.
- Access or export your data: email pantryfoxapp@gmail.com.
- Notifications: change or turn them off in Settings, and in your phone's system settings.
- Sharing: turn off showing your streak and badges to friends, and revoke any share link, in the app.
- Camera and photos: you can turn these off in your phone's settings. Scanning will not work without them.
- Unsubscribe from non-essential email: we send only account emails such as sign-in confirmation.
If you are in the EEA, UK or Switzerland: you have the right to access, correct, delete, restrict, or object to our use of your data, to move it, and to complain to your data protection authority. Our legal bases are performing our contract with you, our legitimate interests in running and securing the app, your consent where we ask for it, and legal obligations.
If you are in California or another US state with a privacy law: you may ask what we hold, ask us to delete or correct it, and be free from discrimination for doing so. We do not sell or share personal information for cross-context advertising.
Security
Data is encrypted in transit. Access to each person's data is restricted by database rules so that signed-in users reach only their own and their household's information. No system is perfectly secure, so please use a strong password and tell us at pantryfoxapp@gmail.com if you suspect a problem.
Children
Pantryfox is not for children under 13 (or the minimum age in your country, up to 16 in parts of Europe). We do not knowingly collect data from them. If you think a child has given us information, contact us and we will delete it.
International transfers
We are based in the United States and our providers store data in the United States. If you are elsewhere, your data will be transferred there.
Changes
We will post changes here and update the date above. If a change is significant we will tell you in the app before it takes effect.
Contact
Saahil Padwal (operating as Pantryfox), pantryfoxapp@gmail.com