PantryMind Logo

Privacy Policy

How PantryMind collects, uses, and protects your information.

Last updated: September 28, 2026 · Applies to the PantryMind iOS app and pantrymind.app

AI for scanning only

Scan photos are sent to our AI provider solely to extract product details. PantryMind does not keep those images as part of your inventory.

Encrypted cloud sync

Account and household inventory sync through Firebase with encryption in transit and at rest.

Minimal by design

We collect what the product needs: account, household, inventory, push tokens, and diagnostic data to keep the app reliable.

No selling your data

We do not sell personal information. Inventory is shared only with household members you invite.

Information We Collect

Account information

When you create a PantryMind account, we collect:

  • Email address for authentication
  • Password credentials managed by Firebase Authentication (we never store plain-text passwords)
  • Account creation and last login metadata
  • Household membership and invite relationships

Inventory & household data

To provide shared kitchen tracking, we store:

  • Food item names, brands, categories, quantities, and notes
  • Expiration dates and related estimates
  • Grocery list items and household activity notifications
  • Household name, invite code, and member roles

AI scan images

When you use AI scanning, a compressed image (and optional on-device OCR text) is transmitted through our secure backend proxy to a third-party AI provider (currently OpenRouter and its underlying model providers) so products can be extracted. PantryMind does not retain those scan images as inventory photos. You can review and edit results before saving. An in-app setting can automatically delete local photos after processing to save device storage.

Device & diagnostics

For functionality and reliability, we may collect:

  • Device type and iOS version
  • App version
  • Push notification tokens (Firebase Cloud Messaging / APNs)
  • Crash and performance diagnostics via Firebase Crashlytics

Subscriptions

If you purchase PantryMind Plus, Apple processes payment. We store entitlement status needed to unlock Plus features for your account/household. We do not receive or store your full payment card details.

Website analytics

pantrymind.app uses Google Analytics to understand aggregate traffic (for example, page views). This is separate from the iOS app experience.

What we don't collect

  • Location: we do not track precise location for inventory
  • Contacts: we do not upload your address book
  • Advertising profiles: we do not sell data for ads

How We Use Information

  • Authenticate accounts and secure access
  • Sync inventory across household members
  • Provide AI scanning and daily scan quotas
  • Send push notifications about expiry and household activity
  • Process and restore PantryMind Plus entitlements
  • Diagnose crashes and improve reliability
  • Respond to support requests
  • Comply with legal obligations

We do not sell personal information to data brokers or use inventory contents to build advertising profiles.

Third-Party Services

We use trusted processors to operate PantryMind:

  • Google Firebase — Authentication, Firestore, Cloud Functions, Cloud Messaging, Crashlytics
  • OpenRouter (and model providers) — AI vision/text extraction for scans, via our backend proxy
  • Apple — App distribution, Sign-in/payment services as applicable, and In-App Purchases for Plus
  • Google Analytics — website traffic measurement on pantrymind.app

These providers process data under their own terms and privacy policies, and only as needed to deliver PantryMind features.

Data Security

Data in transit uses TLS. Cloud data is protected by Firebase/Google Cloud security controls. Access to household inventory is restricted by authentication and Firestore security rules so only household members can read or write that kitchen's data.

Your Rights & Controls

  • Access & correction: view and edit inventory and account details in the app
  • Deletion: Settings → Delete Account removes your Auth identity, user record, device token, and local cache. PantryMind removes you from shared households; if you are the last member, the household and inventory are deleted. If you own a household with other members, ownership transfers before your account is removed.
  • Subscription management: manage or cancel Plus through Apple ID → Subscriptions

To exercise privacy rights or ask questions, email privacy@pantrymind.app.

Data Retention

  • Account data: until you delete your account
  • Inventory data: until deleted by you/household or account teardown rules above
  • Crash diagnostics: typically up to 90 days
  • Support emails: up to 2 years for reference
  • AI scan images: not retained by PantryMind as inventory photos

Children's Privacy

PantryMind is rated 4+ for family use. We do not knowingly collect personal information from children under 13. If you believe a child provided personal information, contact us and we will take appropriate steps to delete it.

Changes to This Policy

We may update this policy to reflect product or legal changes. Material updates will be reflected on this page with a revised “Last updated” date. Continued use of PantryMind after changes means you accept the updated policy.

Contact

We typically respond to privacy inquiries within 48 hours.