Privacy Policy

1. Data we process

Pantrio49 may process the following categories of data:

• email address and technical account identifier;
• pantry, product, expiration, recipe, and meal-plan data;
• roles and actions of shared-pantry members;
• settings, AI preferences, and feature usage history;
• approximate and precise location coordinates, depending on the location supplied by the device, when you choose to use the nearby-store and promotion-map features;
• receipt images or PDFs and product-package images that you choose for recognition;
• Google Play subscription and purchase-history data, such as the product and base plan, order and purchase identifiers, purchase status, expiry, auto-renewal status, and region; Pantrio49 does not receive your full payment-card or bank-account details;
• technical logs, request IDs, app version, and device information;
• error reports, support requests, and the email used in a public deletion request;
• data needed to prevent spam, fraud, and unauthorized access.

2. Why we use data

• sign-in and session recovery;
• pantry synchronization and collaboration;
• receipt, barcode, and product-package recognition;
• nearby-store, promotion-map, recipe, and meal-plan features;
• subscription activation, restoration and account entitlement management;
• notifications and user support;
• error diagnostics, service protection, fraud prevention, and limit enforcement;
• data export and deletion requests.

3. Third-party providers

The service may use Supabase for authentication and PostgreSQL, Railway for backend hosting, Firebase for analytics, Crashlytics and App Check, OpenAI for AI features, Google Play for subscription billing, Telegram for private developer notifications, and Resend for OTP and service emails. Only the data required for each function is transferred.

Google Play processes subscription payments. Pantrio49 receives and stores the purchase metadata needed to verify, activate, restore, expire, and protect subscription access.

AI requests may contain products and food preferences entered by the user. Receipt images or PDFs and product-package images selected by the user may be sent to the Pantrio49 backend and OpenAI for recognition. Do not upload unrelated personal documents or enter unrelated personal information.

When you use the promotion map, location coordinates or a derived map area may be sent to the Pantrio49 backend and map or store-data providers such as OpenStreetMap/Overpass solely to find nearby stores and promotions.

4. Retention

Active data is kept while the account exists or while it is needed for a selected feature. Location data is used for the current promotion-map request; short-lived caches or technical logs may retain coordinates or a rounded map area only as needed to operate, diagnose, and protect the service. Original receipt and package files are used for recognition and are not retained by Pantrio49 after the request is completed. Recognized product, store, date, and price data may be saved when the user confirms it. Google Play purchase records may be retained as needed to manage subscription access, resolve billing disputes, meet legal obligations, and prevent fraud. Technical logs and abuse-prevention data may be retained longer when required for security. Processed deletion requests and error reports may be anonymized.

5. Shared pantries

After account deletion, membership ends. Actions in a shared activity log may remain in anonymized form so other members do not lose the integrity of the pantry history.

6. Your rights

The app provides data export and account deletion. When you cannot access the app, use the public deletion form. Email is verified first, followed by a separate final confirmation.

7. Security

Application data is accessed through the backend with token, role, and pantry-permission checks. No information system can guarantee absolute security.

8. Contact and updates

Send privacy questions to [email protected]. This policy may be updated when features, providers, or legal requirements change.