How Pantry & Plate™ handles your information

1. Scope

This Privacy Policy applies to the Pantry & Plate™ website at pantryandplate.app and the Pantry & Plate™ mobile app operated by Pantry and Plate LLC. It explains what information we access, collect, use, store, share, retain, and delete when you use Pantry & Plate.

Data Safety Summary

This summary explains the main types of information Pantry & Plate handles to operate the app. The full policy below provides more detail about service providers, connected shopping, retention, and your choices.

• Account and profile. We collect account information such as your email address, user ID, sign-in method, and optional profile details so you can sign in, sync your household, manage your account, and receive support.
• Household food data. We collect the pantry items, saved or imported recipes, meal plans, shopping lists, household membership, prompts, links, reports, and other content you choose to create or save in Pantry & Plate.
• Photos, receipts, screenshots, and uploads. When you choose photo, camera, receipt, screenshot, barcode, profile-photo, or upload features, selected images or related content may be processed to provide the feature you requested.
• AI-assisted features. AI-assisted recipe extraction, receipt parsing, and generation run only when you choose those features. Selected prompts, links, receipts, screenshots, images, or recipe content may be sent to service providers to return the requested result.
• Feedback and support messages. If you send feedback or a support request in the app, Pantry & Plate receives your message, optional email, and the app context shown before you submit so we can review the issue and follow up if requested.
• Subscriptions and purchase status. We process subscription status and purchase-history information through app-store and subscription service providers so we can start trials, unlock paid features, manage entitlement status, prevent abuse, and support billing questions.
• App interactions, crash logs, and diagnostics. We may process app interactions, crash logs, diagnostics, device/app details, operating-system details, app version, build number, identifiers, and notification tokens to operate, secure, debug, improve, and support Pantry & Plate.
• Approximate location. Approximate location may be inferred from network or analytics information, such as masked IP-derived region, or used when you choose store-search or connected-shopping features. Pantry & Plate does not collect precise GPS location unless a feature clearly asks for it.
• Connected shopping. Instacart and Kroger connected-shopping flows are live where supported. When you launch supported connected-shopping flows, retailer, store, cart, checkout, product, authorization, and attribution information may be processed to provide the flow, complete handoff, maintain integrations, and measure partner attribution.
• Availability. Connected-shopping availability may vary by platform, region, retailer availability, account eligibility, inventory, and app version.
• Deletion and choices. You can contact support to request account deletion or deletion of specific Pantry & Plate data. Account and data deletion instructions are available on the Support page.

2. Information We Collect

Information you provide

• Account and sign-in information such as your email address, user ID, profile details, and selected sign-in method.
• Pantry items, grocery and shopping lists, meal plans, household membership, recipes, imported recipes, recipe folders or collections, prompts, links, reports, and other content you create, import, organize, or sync.
• Dietary preferences, allergy details, and food preferences you choose to save, where those features are available.
• Profile photos, recipe photos, receipts, screenshots, prompts, links, images, and content you choose to upload or submit for app features.
• Support, feedback, parser reports, recipe reports, and privacy requests you choose to send. These may include your message, optional contact email, selected category or report details, and app context shown by the app before submission.
• Subscription status, trial status, purchase history, and entitlement history processed through app-store and subscription service providers.
• Connected shopping information you choose to use, such as selected grocery stores, store or product search terms, product identifiers or UPCs, quantities, reviewed cart items, checkout handoff details, fulfillment details, and account-authorization status for connected grocery providers.

Information collected automatically

• Device and app metadata such as platform, operating system, OS version, app version, build number, identifiers, and device/app details.
• Notification preferences, reminder schedules, push-notification tokens, and delivery state if you enable reminders or notifications.
• Feedback diagnostic context such as app version, platform, current area of the app, sign-in state, and device/app context shown before submission.
• Firebase Analytics, Crashlytics, and Messaging data used for app interactions, feature usage, crash logs, diagnostics, push messaging, reliability, debugging, security, support, and performance trends.
• Basic website usage signals needed for security and performance.
• Approximate location information such as masked IP-derived region, analytics region, or store-search context where needed for analytics, security, region-specific functionality, or connected-shopping/store-selection flows.
• Referral, click, campaign, attribution, and connected-shopping action data when you choose to launch Instacart or other connected grocery shopping flows.

Approximate location

We may process approximate location information, such as masked IP-derived region or store-search context, to understand app usage, support region-specific functionality, help with connected-shopping/store-selection flows, and operate or improve the app. Pantry & Plate does not collect precise GPS location unless a feature clearly asks for it.

Feedback and support messages

When you submit feedback or a support request, we may receive the message you enter, optional email address, selected category, app version, platform, current area of the app, device/app context shown before submission, and related diagnostic details. We use this information to respond to support requests, diagnose issues, improve reliability, and protect the service.

3. How We Use Information

• Provide and maintain pantry, recipe, meal-planning, barcode-scanning, and shopping workflows.
• Authenticate accounts and sync data across your devices and household members.
• Store and display photos, recipes, lists, preferences, and other content you choose to upload or save.
• Process user-submitted prompts, links, receipts, screenshots, and images for recipe extraction, receipt parsing, and generation features you choose to use.
• Deliver reminders and notifications you choose to enable.
• Respond to support, feedback, privacy, and deletion requests.
• Review user-initiated parser and recipe reports while minimizing raw recipe, pantry, grocery, receipt, image, prompt, allergy, dietary, and diagnostic content that is not needed for the report.
• Process subscription status, trial status, purchase history, and entitlement history to start trials, unlock paid features, manage entitlement status, prevent abuse, support billing questions, and maintain product reliability.
• Measure feature usage, app interactions, and reliability trends so Pantry & Plate can improve product quality.
• Support user-initiated connected shopping flows, including store and product search, reviewed cart submission, checkout handoff, attribution, fraud prevention, compliance, and partner compensation where applicable.
• Measure and attribute user-initiated connected shopping flows, prevent fraud or abuse, comply with partner program obligations, and calculate partner compensation.
• Monitor security, prevent abuse, and comply with legal obligations where required.

Pantry & Plate is not a medical or allergy-safety service. Always review ingredients, labels, allergens, and product information yourself.

4. Camera, Photos, Receipts, and AI Processing

Camera and photo access are user-started. Pantry & Plate may request camera access only when you explicitly start a camera-based feature, such as scanning a barcode, capturing a recipe, parsing a receipt, taking a screenshot-based import, or adding a profile photo. Pantry & Plate may request photo-library access only when you choose to import an image from your device.

AI-assisted recipe extraction, receipt parsing, and generation run only when you choose those features. If you choose recipe extraction, receipt parsing, or generation features, selected prompts, links, receipts, screenshots, images, recipe content, and related request data may be transmitted to Pantry & Plate services and OpenAI so the feature can analyze the input and return recipe, receipt, or shopping-list content. Camera and photo access are not used for background collection.

AI-generated or extracted content may be incomplete or inaccurate. Review recipes, ingredients, allergens, quantities, and shopping-list items before relying on them.

5. Analytics, Crash Logs, Diagnostics, and Notifications

Pantry & Plate uses Firebase Analytics to understand feature usage, app interactions, and reliability or performance trends so we can improve the app. Pantry & Plate may also use Firebase Crashlytics and related diagnostics to process crash logs, diagnostic details, device/app metadata, operating-system details, app version, build number, identifiers, and related reliability signals for debugging, security, support, and product reliability.

If you enable reminders or notifications, Firebase Messaging or platform notification services may process notification tokens, delivery state, and related device/app details to deliver and troubleshoot those messages. We do not use Firebase Analytics for advertising, cross-app tracking, or the sale of personal or sensitive user data.

6. Private Household Recipes

We understand that family recipes can be cherished, guarded, and meaningful history. If you trust Pantry & Plate with a private recipe, we honor that trust.

• Private household recipes are visible only to you and invited household members unless you explicitly choose to share or publish them.
• We do not sell, publish, or share private household recipes with other households.
• We do not use private household recipes for marketing or advertising.
• Any public sharing of a recipe must be explicit, opt-in, and clearly labeled.

Recipe folders and sharing

Recipe Collections / My Cookbook lets you organize recipes into folders in your household cookbook. Folder sharing, when available, is explicit and limited to selected households. A shared household may view a folder, or view and copy it, depending on the permission you choose. Shared edit is not enabled. Revoking a share stops future access to the original shared folder, but it does not delete copies another household already made.

7. Sharing and Disclosure

Pantry & Plate does not sell personal or sensitive user data and does not use data for cross-app advertising tracking. Data is shared only as needed to provide the feature you choose to use, operate the service, comply with legal obligations, or protect users and the service.

We use service providers to host, process, analyze, debug, secure, and support Pantry & Plate. These providers process information on our behalf. Some optional connected-shopping flows may send retailer, cart, checkout, authorization, and attribution information to connected-shopping partners when you launch those flows.

Pantry & Plate may share data with:

• Supabase for authentication, database storage, file storage, and app-backed functions.
• OpenAI for user-initiated recipe prompt, image, and receipt processing.
• Firebase Analytics for app analytics and product-improvement insights.
• Firebase Crashlytics for crash diagnostics and Firebase Messaging for push-notification delivery.
• Google Forms for user-initiated feedback or parser-report intake when configured.
• Email providers such as Resend for support, account, invite, welcome, and report-related email delivery when configured.
• Apple and Google if you choose those sign-in providers.
• RevenueCat, Apple, and Google app-store purchase systems for subscription status, trial status, purchase history, entitlement history, app functionality, billing support, fraud or abuse prevention, and product reliability.
• Instacart if you launch supported connected-shopping flows.
• Kroger if you connect a Kroger account, search Kroger stores or products, review product matches, or choose to add items to your Kroger cart. Pantry & Plate may send store selections or store-search context, product search terms, product identifiers or UPCs, item quantities, selected cart items, fulfillment information, and authorization data needed to complete the action. Kroger authorization tokens are stored encrypted server-side and can be removed by disconnecting Kroger or deleting your Pantry & Plate account.
• impact.com for affiliate link tracking, order attribution, reporting, fraud prevention, compliance, and partner compensation related to user-initiated Instacart or connected grocery shopping flows.
• Food and recipe data providers used by user-invoked features, including USDA, Spoonacular, Chomp, BigOven, and Open Food Facts.

Pantry & Plate does not directly receive your full payment-card number from Apple or Google.

8. Connected Shopping, Affiliate Links, and Order Attribution

Instacart and Kroger connected-shopping flows are live where supported. Connected-shopping flows are user-initiated and optional. You can still use Pantry & Plate for pantry tracking, recipes, meal planning, and shopping lists without launching a retailer flow.

Availability may vary by platform, region, retailer availability, account eligibility, inventory, and app version. Connected-shopping features do not guarantee that checkout will succeed, that grocery delivery or pickup will be available, or that every item can be found, matched, or added to a retailer cart.

When you choose to launch an Instacart, Kroger, or other connected grocery shopping flow from Pantry & Plate, the link, store-search, cart, or checkout handoff may include retailer, store, product, cart, checkout handoff, authorization, referral, campaign, attribution, and partner-compensation information so that Pantry & Plate, Instacart, Kroger, impact.com, and related service providers can provide the selected flow, complete handoff, maintain integrations, support users, measure qualifying actions, attribute orders, prevent fraud or abuse, comply with partner program requirements, and calculate partner compensation where applicable.

When you connect Kroger or add reviewed items to a Kroger cart, Pantry & Plate may send Kroger the selected store or store-search context, product search terms, product identifiers or UPCs, quantities, selected cart items, fulfillment details, and authorization data needed for that requested action. Kroger handles its own checkout, payment, fulfillment, and order management.

For these purposes, impact.com may process information such as referral or click data, IP address, device or browser information, mobile device identifiers, cookie or profile identifiers, campaign or sub-ID values, shared identifiers, and information about resulting actions or orders reported by Instacart or the applicable retailer. Pantry & Plate does not intentionally share raw pantry contents, private recipes, allergy or dietary details, receipt images, payment-card information, or grocery-list contents with impact.com for affiliate attribution.

Pantry & Plate may receive compensation from qualifying purchases or actions that occur after a user launches a connected shopping flow. This does not change the price you pay through Instacart, Kroger, or the applicable retailer.

9. Security

We use reasonable technical and organizational safeguards to protect data, including secure transmission practices and access controls appropriate to the service. No internet transmission or storage method is guaranteed to be perfectly secure.

10. Data Storage and Retention

Synced app data is retained for as long as needed to provide the service, satisfy legal obligations, resolve disputes, and enforce agreements. Retention windows may vary by data type and operational need.

If you request account deletion, Pantry & Plate is designed to delete account-linked data and retain only a minimal anonymized deletion audit record for up to 30 days.

11. Your Choices and Rights

• You may deny camera or photo-library permissions and continue using non-camera features.
• You may disable reminders and notifications from the app or device settings.
• You may edit or remove your content from within the app when those controls are available.
• You may request access, correction, or deletion of your account data.
• Account and data deletion instructions are available on the Support page.
• You may contact us about objections, restrictions, or questions related to processing.

Submit requests to support@pantryandplate.app. For privacy requests involving connected-shopping or attribution data processed by partners such as impact.com, Instacart, or Kroger, contact us at support@pantryandplate.app and we will coordinate with the relevant provider where required.

12. Account Deletion Requests

You can delete your account from within the app. If you choose to delete your account from within the app, Pantry & Plate is designed to remove account data from the local device and Pantry & Plate services, subject to the minimal retention described above. Account and data deletion instructions are available on the Support page. You can also request account deletion by emailing support@pantryandplate.app with subject line Account Deletion Request from the account email.

13. Children

Pantry & Plate is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect data from children.

14. Policy Updates

We may update this policy over time. If changes are material, we will update the effective date and provide additional notice where appropriate.