Privacy Policy
Privacy Policy
This Privacy Policy explains how Pantri collects, uses, shares, and retains information when you use the Pantri website, mobile app, and related services.
1. Overview
InsideOut Solutions, LLC provides the Pantri product and related services. In this Privacy Policy, "Pantri," "we," "us," and "our" refer to InsideOut Solutions, LLC as the operator of the Pantri mobile app and https://getpantri.com. This Privacy Policy explains what personal information we collect, how we use and disclose it, how long we keep it, and the rights and choices you may have.
This Privacy Policy applies to information collected through the Pantri website, Pantri mobile app, and related support interactions.
2. Personal information we collect
We collect personal information you provide directly, information generated through your use of the service, and limited information from service providers that help operate the product.
- Account information: email address, household membership, login identifiers, subscription status, and settings.
- User content: pantry items, shopping lists, meal plans, recipe preferences, dietary filters, household notes, and other content you submit.
- Scan and upload data: receipt images, pantry photos, barcode scans, and extracted item data such as product names, quantities, and purchase details.
- AI interaction data: prompts, pantry context, preferences, generated outputs, feedback, and safety or abuse signals used in recipe generation or import flows.
- Support and communications: messages, attachments, survey responses, and related correspondence.
- Device, log, and analytics data: IP address, browser or device type, operating system, app events, crash diagnostics, timestamps, referring pages, and approximate location inferred from IP address.
- Cookies and similar technologies: website cookies, local storage, pixels, and similar tools used for essential site operations, analytics, and preference storage.
3. How we use personal information
We use personal information to provide, maintain, protect, and improve Pantri; to operate household collaboration and AI-assisted features; and to communicate with you about the service.
- Provide core features such as account access, household sync, pantry tracking, receipt extraction, shopping lists, and recipe generation.
- Personalize product behavior, including pantry-aware suggestions, saved preferences, and onboarding or support experiences.
- Process subscriptions, credits, entitlements, refunds, and purchase status through the relevant app-store or payment platform.
- Monitor quality, debug issues, measure performance, prevent fraud or abuse, and maintain the security and integrity of the service.
- Respond to support requests and send service, security, legal, and product communications.
- Comply with legal obligations, enforce our Terms, and establish, exercise, or defend legal claims.
4. Legal bases and consent
Where privacy law requires a legal basis for processing, we rely on one or more of the following: performance of a contract, legitimate interests in operating and improving the service, compliance with legal obligations, and consent where required by law or platform rules.
If consent is required for a specific use, you may withdraw that consent where supported, but doing so may limit the related feature.
- Contract: account features, household sharing, pantry management, subscriptions, and support.
- Legitimate interests: security, analytics, debugging, service improvement, and abuse prevention.
- Legal obligation: tax, accounting, app-store, consumer-protection, and lawful-request compliance.
- Consent: optional marketing communications, certain cookies or tracking where required, and optional access to user-selected uploads or device features.
5. Scans, uploads, and AI-assisted features
When you upload a receipt, pantry photo, or other scan, Pantri uses Google ML Kit and related application logic to extract structured pantry or recipe data and return app functionality. When you request AI-assisted recipe, import, or pantry suggestions, Pantri may send relevant prompt text, pantry context, preferences, and generated outputs to Google Gemini through our backend services.
Detected grocery items may be presented for review before they affect your pantry. AI-generated outputs may be incomplete, inaccurate, or unsuitable for certain dietary or safety needs, so you should review them before relying on them for shopping, cooking, or allergen-related decisions.
- Receipt and image uploads are used to extract item names, quantities, and related pantry information.
- Barcode and receipt tools are intended to reduce manual entry, but you remain responsible for reviewing detected items.
- Pantri uses built-in or platform-level scan-processing capabilities for receipt and image extraction rather than a separate standalone OCR vendor.
- Pantri does not permit its AI vendors to use submitted prompts, pantry context, or generated outputs for model training.
6. How we disclose personal information
We do not sell personal information for money. We may disclose personal information to service providers and other parties in the circumstances described below.
- Service providers and processors: Google Firebase for authentication, Firestore, cloud functions, and storage; analytics or crash-reporting tooling used by the app or website; customer support and email-delivery tooling; security tooling; subscription validation; and Google Gemini for AI processing.
- App stores and platform providers: Apple, Google, and related services that process subscriptions, entitlements, refunds, and platform analytics under their own terms and privacy policies.
- Household members: content you add to a shared household may be visible to other members of that household.
- Professional advisors and authorities: lawyers, auditors, insurers, regulators, courts, law enforcement, or other parties when disclosure is necessary for compliance, safety, or legal claims.
- Business transfers: counterparties and advisors involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, subject to appropriate safeguards where required.
7. Data retention
We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. The exact period depends on the data category, account status, security needs, backup cycles, and legal or accounting obligations.
- Account and household data is generally kept while your account remains active and for a limited period afterward for backup, legal, and audit purposes.
- User content may remain until you delete it, your household deletes it, or the account is deleted, subject to backup and legal-retention constraints.
- Scans are retained on a status-based schedule: confirmed or discarded scans for 7 days, parse-empty or error scans for 3 days, and in-flight scan states for about 24 hours.
- Import attempts are retained for 7 days, import issue reports for 5 days, cook sessions for 30 days after the last update, and export requests for 30 days.
- Support records, security logs, and transaction records may be retained longer where needed for fraud prevention, accounting, compliance, or dispute resolution.
8. Your privacy rights and choices
Depending on where you live, you may have rights to request access to, correction of, deletion of, or portability of personal information, and to object to or restrict certain processing. You may also have the right to appeal a decision on a privacy request.
To submit a request, email info@insideout.nyc. We may need to verify your identity and household authority before acting on certain requests.
- Account controls: update certain profile, pantry, list, and household data directly in the app where supported.
- Marketing choices: unsubscribe from non-essential emails using the unsubscribe link or by contacting support.
- Cookies: manage browser cookies and local storage in your browser settings; some features may not function if essential storage is disabled.
- App permissions: manage camera, photo, or notification permissions in your device settings.
- Subscriptions: manage renewal, cancellation, and platform billing through Apple App Store or Google Play if your purchase is handled by those platforms.
9. U.S. state privacy disclosures
If state privacy laws apply to Pantri, residents of California and certain other U.S. states may have additional rights regarding access, correction, deletion, portability, and opt-out from certain targeted advertising, sale, or sharing uses.
Pantri does not sell personal information for money and does not use the service for third-party targeted advertising or cross-context behavioral advertising.
- Residents of applicable states may request access, correction, deletion, and portability rights as provided by law.
- Pantri does not describe collecting precise geolocation through the website, and the website does not currently include a targeted-advertising flow.
- If Pantri later introduces targeted advertising or other practices that trigger additional notice or opt-out requirements, this Privacy Policy will be updated accordingly.
10. International data transfers
Pantri may process and store personal information in the United States and other countries where we or our service providers operate. Those countries may have privacy laws that differ from the laws in your country or state.
Where required by law, Pantri will use appropriate safeguards for cross-border transfers of personal information.
11. Security
We use administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, and alteration. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
If you believe your account or personal information has been compromised, contact us promptly using the email address below.
12. Children's privacy
Pantri is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to Pantri, contact us so we can review and delete it as appropriate.
If we learn that we have collected personal information from a child under 13 without appropriate authorization, we will take steps to delete it.
13. Third-party links and services
The app or website may link to third-party websites, app stores, or services that are not operated by Pantri. Their privacy practices are governed by their own policies, not this Privacy Policy.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above and provide additional notice where required by law or where the change materially affects how we handle personal information.
15. Contact us
For privacy questions or requests, contact InsideOut Solutions, LLC at info@insideout.nyc or by mail at PO Box 8509, New York, NY 10116-8509.
You may also contact us to request access to, correction of, or deletion of your personal information, subject to applicable law.