1. Overview
InsideOut Solutions, LLC provides the Pantri product and related services. In this Privacy Policy, "Pantri," "we," "us," and "our" refer to InsideOut Solutions, LLC as the operator of the Pantri mobile app and https://getpantri.com. This Privacy Policy explains what personal information we collect, how we use and disclose it, how long we keep it, and the rights and choices you may have.
This Privacy Policy applies to information collected through the Pantri website, Pantri mobile app, and related support interactions.
2. Personal information we collect
We collect personal information you provide directly, information generated through your use of the service, and limited information from service providers that help operate the product.
- Account information: email address, display name, login identifiers, authentication provider information, household membership, subscription status, profile settings, and app preferences.
- Household and kitchen content: pantry items, shopping lists, meal plans, recipes, imported recipe drafts, recipe ratings, dietary filters, allergy or preference settings, household notes, and other content you submit or choose to share with a household.
- Scan, upload, and product data: receipt images, pantry photos, barcode scans, UPC/EAN/GTIN values, product correction reports, import files or URLs, extracted item data, quantities, purchase details, and related review decisions.
- AI interaction data: prompts, pantry context, preferences, generated recipes, cook sessions, substitutions, import outputs, feedback, safety signals, abuse-prevention signals, and technical metadata used to provide AI-assisted features.
- Device, permission, and notification data: device type, operating system, app version, approximate location inferred from IP address, camera/photo/notification permission state, Expo push notification tokens, and app lifecycle events.
- Purchase and entitlement data: subscription product identifiers, renewal or cancellation status, purchase state, credits, entitlement tier, and app-store transaction metadata received through Apple, Google Play, RevenueCat, or related platform services.
- Support and communications: support messages, attachments, survey responses, export requests, account-deletion requests, and related correspondence.
- Log, analytics, and diagnostics data: IP address, browser or device type, operating system, app events, crash diagnostics, performance traces, timestamps, referring pages, and security logs.
- Cookies and similar technologies: website cookies, local storage, pixels, and similar tools used for essential site operations, analytics, and preference storage.
3. How we use personal information
We use personal information to provide, maintain, protect, and improve Pantri; to operate household collaboration and AI-assisted features; and to communicate with you about the service.
- Provide core features such as account access, household sync, pantry tracking, receipt extraction, shopping lists, and recipe generation.
- Personalize product behavior, including pantry-aware suggestions, saved preferences, and onboarding or support experiences.
- Process subscriptions, credits, entitlements, refunds, and purchase status through the relevant app-store or payment platform.
- Deliver notifications you request or enable, including cook timers, account, household, and pantry-related notifications.
- Operate subscriptions, top-ups, credits, household entitlements, billing support, refund workflows, and purchase validation.
- Maintain product quality by reviewing barcode corrections, failed scans, import errors, crash reports, support requests, and abuse-prevention signals.
- Monitor quality, debug issues, measure performance, prevent fraud or abuse, and maintain the security and integrity of the service.
- Respond to support requests and send service, security, legal, and product communications.
- Comply with legal obligations, enforce our Terms, and establish, exercise, or defend legal claims.
4. Legal bases and consent
Where privacy law requires a legal basis for processing, we rely on one or more of the following: performance of a contract, legitimate interests in operating and improving the service, compliance with legal obligations, and consent where required by law or platform rules.
If consent is required for a specific use, you may withdraw that consent where supported, but doing so may limit the related feature.
- Contract: account features, household sharing, pantry management, subscriptions, and support.
- Legitimate interests: security, analytics, debugging, service improvement, and abuse prevention.
- Legal obligation: tax, accounting, app-store, consumer-protection, and lawful-request compliance.
- Consent: optional marketing communications, certain cookies or tracking where required, and optional access to user-selected uploads or device features.
5. Scans, uploads, and AI-assisted features
When you upload a receipt, pantry photo, recipe file, recipe URL, barcode, or other scan, Pantri uses on-device processing where available, Google ML Kit, Open Food Facts, USDA FoodData Central, Google Gemini, OpenAI, and related application logic to extract structured pantry, product, recipe, or shopping data and return app functionality. When you request AI-assisted recipes, cook sessions, import help, substitutions, scan parsing, or pantry suggestions, Pantri may send relevant prompt text, pantry context, preferences, uploaded text, and generated outputs to OpenAI or Google Gemini through our backend services.
Detected grocery items may be presented for review before they affect your pantry. AI-generated outputs may be incomplete, inaccurate, or unsuitable for certain dietary or safety needs, so you should review them before relying on them for shopping, cooking, or allergen-related decisions.
- Receipt and image uploads are used to extract item names, quantities, and related pantry information.
- Barcode and receipt tools are intended to reduce manual entry, but you remain responsible for reviewing detected items.
- Pantri uses built-in or platform-level scan-processing capabilities for receipt and image extraction rather than a separate standalone OCR vendor.
- Pantri does not permit OpenAI or Google Gemini to use submitted prompts, pantry context, uploaded content, or generated outputs to train their foundation models for third-party use.
- Barcode and product data may come from Open Food Facts, USDA FoodData Central, user correction reports, household overrides, or Pantri moderation.
- Product, nutrition, allergen, recall, freshness, and package metadata can be incomplete or outdated. You remain responsible for reviewing labels and product information before relying on it.
7. Data retention
We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. The exact period depends on the data category, account status, security needs, backup cycles, and legal or accounting obligations.
- Account and household data is generally kept while your account remains active and for a limited period afterward for backup, legal, and audit purposes.
- User content may remain until you delete it, your household deletes it, or the account is deleted, subject to backup and legal-retention constraints.
- Scans are retained on a status-based schedule: confirmed or discarded scans for 7 days, parse-empty or error scans for 3 days, and in-flight scan states for about 24 hours.
- Import attempts are retained for 7 days, import issue reports for 5 days, cook sessions for 30 days after the last update, and export requests for 30 days.
- Barcode correction reports, product lookup misses, household product overrides, and moderation actions may be retained as long as needed to maintain product quality, prevent abuse, and improve the product catalog.
- AI prompts, generated outputs, and related technical metadata may be retained with the associated household content or in operational logs for troubleshooting, safety, abuse prevention, quality review, and cost accounting, subject to deletion, backup, and legal-retention limits.
- Push notification tokens are kept while notifications are enabled or while needed to deliver requested notifications, and are updated or removed when the app detects permission or account changes.
- Support records, security logs, and transaction records may be retained longer where needed for fraud prevention, accounting, compliance, or dispute resolution.
8. Your privacy rights and choices
Depending on where you live, you may have rights to request access to, correction of, deletion of, or portability of personal information, and to object to or restrict certain processing. You may also have the right to appeal a decision on a privacy request.
For account deletion, use the in-app deletion flow and the public delete-account guide at https://getpantri.com/delete-account. For other privacy requests, email support@getpantri.com. We may need to verify your identity and household authority before acting on certain requests.
Deleting your Pantri account does not automatically cancel subscriptions or purchases managed by Apple App Store or Google Play. You must cancel those subscriptions through the applicable app-store account.
- Account controls: update certain profile, pantry, list, and household data directly in the app where supported.
- Marketing choices: unsubscribe from non-essential emails using the unsubscribe link or by contacting support.
- Cookies: manage browser cookies and local storage in your browser settings; some features may not function if essential storage is disabled.
- App permissions: manage camera, photo, or notification permissions in your device settings.
- Subscriptions: manage renewal, cancellation, and platform billing through Apple App Store or Google Play if your purchase is handled by those platforms.
9. U.S. state privacy disclosures
If state privacy laws apply to Pantri, residents of California and certain other U.S. states may have additional rights regarding access, correction, deletion, portability, and opt-out from certain targeted advertising, sale, or sharing uses.
Pantri does not sell personal information for money and does not use the service for third-party targeted advertising or cross-context behavioral advertising.
- Residents of applicable states may request access, correction, deletion, and portability rights as provided by law.
- Pantri does not describe collecting precise geolocation through the website, and the website does not currently include a targeted-advertising flow.
- Pantri does not use third-party advertising SDKs in the mobile app for cross-context behavioral advertising.
- If Pantri later introduces targeted advertising or other practices that trigger additional notice or opt-out requirements, this Privacy Policy will be updated accordingly.
10. International data transfers
Pantri may process and store personal information in the United States and other countries where we or our service providers operate. Those countries may have privacy laws that differ from the laws in your country or state.
Where required by law, Pantri will use appropriate safeguards for cross-border transfers of personal information.
11. Security
We use administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, and alteration. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
If you believe your account or personal information has been compromised, contact us promptly using the email address below.
12. Children's privacy
Pantri is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to Pantri, contact us so we can review and delete it as appropriate.
If we learn that we have collected personal information from a child under 13 without appropriate authorization, we will take steps to delete it.
13. Third-party links and services
The app or website may link to third-party websites, app stores, or services that are not operated by Pantri. Their privacy practices are governed by their own policies, not this Privacy Policy.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above and provide additional notice where required by law or where the change materially affects how we handle personal information.
15. Contact us
For privacy questions or requests, contact InsideOut Solutions, LLC at support@getpantri.com or by mail at PO Box 8509, New York, NY 10116-8509.
You may also contact us to request access to, correction of, or deletion of your personal information, subject to applicable law.
For subscription cancellation or refund requests, you may also need to use the App Store or Google Play account that processed the purchase.