Privacy Policy

Welcome to PantryPrix. This Privacy Policy describes how Kinetic Flux LLC, doing business as PantryPrix (“PantryPrix,” “we,” “us,” or “our”), collects, uses, shares, and protects information when you use the PantryPrix iOS app, the PantryPrix Android app, and the web application at pantryprix.com (together, the “Service”).

By using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

Information you provide to us:

• Account information: email address, name, and (for password sign-up) password. If you sign in with Apple, we receive an Apple-issued user identifier and the email Apple shares with us, which may be a private relay address (Hide My Email). If you sign in with Google (Android), we receive a Google-issued subject identifier and the email address associated with your Google account.
• Profile information: dietary preferences, allergies, household size, and notification preferences.
• Pantry and recipe content: pantry items (name, quantity, unit, expiration date, category), saved and generated recipes, ratings, and shopping list entries.
• Photos: images you capture or upload of pantry items, receipts, or recipes.
• Recipe-generation prompts: the ingredient lists, dietary filters, and cuisine requests you submit when generating a recipe.
• Support correspondence: messages you send through the in-app feedback form or the contact form.

Information collected automatically:

• User identifiers: a Cognito-issued user ID is assigned to your account and written to our application logs to help us debug and operate the Service.
• Push-notification token: if you grant notification permission, we receive a device token, either from Apple Push Notification Service (APNs) on iOS or Firebase Cloud Messaging (FCM) on Android, so we can send expiration and recipe alerts.
• Purchase history: StoreKit (App Store) receipts on iOS, Google Play Billing purchase tokens on Android, and Stripe (web) subscription state, all needed to provision the tier and daily allowance you paid for. We do not see or store payment-card numbers. Apple, Google, and Stripe handle those.
• Diagnostic data: request logs (timestamps, endpoints, status codes, partial-redacted email on auth failures) used to operate, secure, and improve the Service.
• Device and app version information: the mobile app sends its version and your device's model and operating-system version with its requests. We keep the most recent values with your account to troubleshoot version-specific issues and provide customer support. These values are deleted with your account.
• Advertising signals (free tier only): when ads are enabled, the Google Mobile Ads SDK on iOS and Android, and Google AdSense on the web, collect device-level signals (such as device model, OS version, IP address, locale, and app/page context) for ad delivery, measurement, and frequency capping. See “Advertising” below.
• Device-integrity & anti-fraud signals (at sign-up): to prevent abuse of referral trials and rewards (for example, repeatedly deleting and recreating accounts on the same device to claim a referral trial more than once), we verify a device-integrity attestation when you create an account. On iOS this uses Apple's DeviceCheck, which lets us record, via Apple's servers, whether a device has already claimed a referral trial, without Apple or us storing a device identifier on our side. On Android this uses Google's Play Integrity API together with the Android device identifier (SSAID), which we store only as a one-way hash. On the web, where no device attestation is available, we use the request IP address to limit how many referral-trial sign-ups originate from one address. These signals are used solely for fraud prevention and are not used to track you or for advertising.

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Develop, train, evaluate, and improve PantryPrix's own features and automated systems (including the tools that read your receipt and pantry photos, recognize food items, and generate recipes) so they become more accurate over time. We do this using content you submit (such as the de-identified text extracted from your receipts, never the photos themselves) in de-identified or aggregated form, stripped of information that identifies you. This work is performed within our own AWS environment and is never used to train the third-party foundation models described in “AI-Powered Recipe Generation” below.
• Generate AI recipe suggestions personalized to your pantry contents, dietary preferences, and allergies.
• Send expiration alerts and recipe notifications you have opted in to receive.
• Process and validate your subscriptions, in-app purchases, and daily usage counts.
• Respond to your support requests and feedback.
• Detect, prevent, and respond to fraud, abuse, and security incidents.
• Comply with legal obligations and enforce our Terms of Service.

PantryPrix generates recipe suggestions using Anthropic's Claude model accessed through Amazon Bedrock, hosted in our AWS account. When you request recipes:

• Your pantry items, dietary preferences, and allergies are sent to the model as part of the prompt so it can generate relevant suggestions.
• Per Amazon Bedrock's data-handling terms, your prompts and the model's outputs are not used to train Anthropic's or AWS's foundation models. This is separate from the limited, de-identified use of your own content to improve PantryPrix's in-house features, described under “How We Use Your Information.”
• We retain your generated recipes and the originating prompt under your account so you can review your history. They are deleted when you delete your account.
• AI-generated recipes are suggestions only and may contain inaccuracies. Always use your own judgment regarding food safety, allergens, and cooking temperatures.

PantryPrix analyzes your photos server-side within our AWS account using Amazon Rekognition (pantry photos, for object and text detection) and Amazon Textract (receipts, for line-item extraction). We do not use facial recognition or biometric identification.

We automatically remove personal and payment information from receipt text. Before any extracted receipt data is stored or used to improve our features, an automated process redacts details such as names, email addresses, phone numbers, street addresses, loyalty and account numbers, transaction identifiers, and payment-card numbers, replacing them with a placeholder. We may then retain the resulting de-identified or aggregated data (for example, anonymized item names and categories) to measure and improve the accuracy of our food-recognition and receipt-scanning features. This derived data no longer identifies you and may be kept after you delete your account; your original photos are deleted as described under “Data Retention.”

The free Free tier is supported by a single banner ad. Paid tiers (Sous Chef, Head Chef, Executive) are ad-free.

• iOS: we use the Google Mobile Ads (AdMob) SDK. Even with personalized advertising disabled and without IDFA access, AdMob collects device-level signals (device model, OS version, IP address, app information) for ad delivery, SKAdNetwork attribution, and frequency capping. Per Apple's definition this is considered tracking; we declare it as such in our App Store privacy nutrition label.
• Android: we use the Google Mobile Ads (AdMob) SDK and the Google User Messaging Platform (UMP) SDK. AdMob collects device-level signals (device model, OS version, IP address, Android Advertising ID, app information) for ad delivery, measurement, and frequency capping. For users in the EEA, UK, and Switzerland, the UMP SDK presents a Google-certified consent dialog and records your choice; ads are served in personalized or non-personalized mode based on that choice. We declare AdMob and its data collection in our Google Play Data Safety form.
• Web: we use Google AdSense. AdSense and its partners may set cookies and process device/IP data to deliver and measure ads. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to our site and other sites on the Internet.
• We do not share your PantryPrix user ID, email, or pantry/recipe content with advertising networks.

You can manage Google's personalized advertising at adssettings.google.com. On iOS, you can opt out of cross-app tracking under Settings → Privacy & Security → Tracking. On Android, you can reset or delete your Advertising ID under Settings → Privacy → Ads. If you are in the EEA, UK, or Switzerland, you can withdraw or change your ad-consent at any time from the in-app Profile → Privacy → Ad Consent screen, which re-opens the Google Consent Management Platform dialog. To remove ads entirely, upgrade to any paid tier.

PantryPrix runs on Amazon Web Services (AWS) in the United States (US-East region). Information you provide is stored in:

• Amazon Cognito for authentication credentials.
• Amazon DynamoDB for profiles, pantry items, recipes, achievements, and subscription state. All tables are encrypted at rest and have point-in-time recovery enabled.
• Amazon S3 for uploaded photos, with server-side encryption.
• AWS Secrets Manager and AWS Systems Manager Parameter Store for credentials and configuration secrets.

All traffic between your device and our servers is encrypted in transit using TLS. We apply rate limiting, security headers, and least-privilege access controls. While we take reasonable measures to protect your information, no system is perfectly secure and we cannot guarantee absolute security.

When you scan a recipe, the screenshots are used only to read the recipe and are deleted right after (with a backstop that removes any leftover within 1 day).

Recipes you add are private by default and are visible to you and your family. A recipe is shared with other PantryPrix users only if you choose to share it.

We retain information for as long as needed to operate the Service:

• Profile, recipes, achievements: retained until you delete your account.
• Pantry items with an expiration date: automatically deleted ~90 days after the item's expiration date.
• Shopping list items: automatically deleted ~90 days after creation.
• Pantry and receipt photos: deleted automatically 30 days after upload. Until then, they are used only to troubleshoot a problem you report to support.
• Subscription records: retained for billing audit and tax purposes, even after account deletion, to the extent required by law.
• Diagnostic logs: retained for a limited operational window (typically 30 days).
• Anti-fraud records: to stop deleted accounts from re-claiming a referral trial, we keep a minimal record after deletion: a one-way hash of your email (retained for roughly 30 days, or until any paid subscription would have lapsed) and, on Android, a one-way hash of the device identifier. These records contain no readable email or contents and exist solely for fraud prevention. (On iOS the equivalent signal is held by Apple via DeviceCheck, not by us.)

When you delete your account, we hard-delete your profile, pantry, recipes, photos, shopping list, and achievements. We retain only the minimal anti-fraud and billing-audit records described above, plus any copies that persist briefly in encrypted backups before they age out.

We rely on the following service providers, each bound by their own terms:

• Amazon Web Services (AWS): hosting, storage, authentication (Cognito), AI inference (Bedrock), image analysis (Rekognition), and receipt text extraction (Textract).
• Apple: Sign in with Apple, App Store in-app purchase processing, push-notification delivery (APNs), and DeviceCheck for sign-up fraud prevention on iOS.
• Stripe, Inc.: payment processing for web subscriptions. Stripe receives card details and customer information directly; we receive only the resulting customer/subscription identifiers.
• Google LLC: Sign in with Google (Android), Google Play Billing (Android in-app purchase processing), Firebase Cloud Messaging (Android push- notification delivery), AdMob (iOS and Android) for in-app advertising on the free tier, AdSense (web) for browser advertising on the free tier, the Play Integrity API for sign-up fraud prevention on Android, and the User Messaging Platform (UMP) SDK for GDPR consent collection in the EEA, UK, and Switzerland.
• Amazon SES: transactional email delivery (verification codes, subscription receipts, support replies).
• KineticFlux: product analytics for the web app. KineticFlux receives page-view events, feature-interaction events, and (when you are signed in) your account ID, email address, and subscription tier. An anonymous session identifier is stored in your browser's local storage. By using the Service you consent to this analytics collection, consistent with the terms you accepted at account creation.

We do not sell your personal information. We share information with these providers only as needed to operate the Service.

PantryPrix is operated from the United States and stores data in AWS US-East. If you access the Service from outside the United States, your information will be transferred to and processed in the United States. By using the Service you consent to this transfer. For users in the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses or other lawful transfer mechanisms with our sub-processors where applicable.

The PantryPrix web app uses browser local storage to keep you signed in and to cache minor UI preferences. We use cookies sparingly:

• Strictly necessary: session and security state.
• Analytics: KineticFlux stores an anonymous session identifier in local storage to measure page views and feature usage. No third-party cookie is set; the identifier lives in localStorage only.
• Advertising (free tier only): cookies set by Google AdSense and its partners to deliver and measure ads. See the “Advertising” section above.

You can control or block cookies in your browser settings; doing so may impair some features. The iOS and Android apps do not use browser cookies.

You have the following rights regarding your personal information:

• Access & portability: request a copy of the personal data we hold about you.
• Correction: update inaccurate profile information directly in the app.
• Deletion: delete your account and associated data from the iOS or Android Profile screen (Settings → Profile → Delete Account), via the public web form at pantryprix.com/delete-account (no sign-in required), or by contacting us through our feedback form.
• Opt-out: disable push notifications in the app or in iOS Settings; unsubscribe from marketing email through the link in any marketing message.

To exercise these rights, contact us through our feedback form from the address on your account so we can verify your identity. We respond within 30 days.

If you are located in the European Economic Area, United Kingdom, or Switzerland, the UK GDPR or EU GDPR applies. Our legal bases for processing are:

• Performance of a contract: to provide the Service you sign up for.
• Legitimate interests: to operate, secure, and improve the Service, including limited analytics, fraud prevention, and developing and improving our features using de-identified data. Before using your content for product improvement we de-identify or aggregate it so it no longer identifies you; you may object to this processing at any time by contacting us through our feedback form.
• Consent: for push notifications, marketing email, and personalized advertising where required by law. You may withdraw consent at any time.
• Legal obligations: for tax, accounting, and law-enforcement requests.

You have the right to access, rectify, erase, restrict, or port your data, to object to certain processing, and to lodge a complaint with your local supervisory authority. We act as the data controller for information we collect through the Service.

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the right to:

• Know what personal information we collect about you and how we use it.
• Request access to and a copy of the personal information we have collected about you.
• Request deletion of your personal information.
• Correct inaccurate personal information.
• Opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising.
• Not be discriminated against for exercising any of these rights.

Do Not Sell or Share My Personal Information. PantryPrix does not sell your personal information for money. To the extent that the cookies and identifiers used by Google AdSense and AdMob on the free tier constitute “sharing” for cross-context behavioral advertising under CCPA, you can opt out in any of the following ways:

• In-app (iOS and Android): open Profile → Privacy → “Do Not Sell or Share My Personal Information” to record your opt-out. We use Google's User Messaging Platform (UMP) SDK to persist this choice and signal it to AdMob.
• On the web: send a Global Privacy Control signal from your browser (we honor GPC where technically feasible), or contact us through our feedback form with “Do Not Share” in your message. The mobile in-app path above is the most immediate; web users without an account should use GPC or the feedback form.
• By contact form: reach us through our feedback form with “Do Not Share” in your message.
• By upgrading: any paid tier removes ads entirely, which removes the data sharing that would otherwise occur.

The opt-out applies to the device and account where it is set. If you sign in on a new device or browser, you may need to record the choice again. We honor your opt-out for as long as your account exists.

To exercise California rights, contact us through our feedback form from the address on your account. You may designate an authorized agent to act on your behalf with written authorization.

PantryPrix is not directed to, and we do not knowingly collect personal information from, children under the age of 13 (or the equivalent minimum age in your jurisdiction). The App Store and Google Play age ratings are intended to reflect the appropriateness of the content. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will post the updated version here and revise the “Last Updated” date. If the changes are material, we will provide additional notice (for example, an in-app message or email). Your continued use of the Service after the effective date constitutes your acceptance of the updated policy.

If you have questions about this Privacy Policy or our practices, please contact us:

• Contact form: pantryprix.com/feedback
• Entity: Kinetic Flux LLC (d/b/a PantryPrix), United States
• Postal address: Available on request through the contact form.