Privacy Policy

1. Information PantryScan Uses

• Account information: Google account identifier, email address, display name, and profile image used to sign in and identify your account.
• Household information: Household membership, invite information, shared pantry state, preferences, and household-level settings.
• Receipt and purchase information: Receipt images, merchant/date/total/tax information, line items, quantities, prices, transaction identifiers when available, and corrections you make.
• Product information: Product names, brands, UPC/GTIN values, categories, dietary tags, images, and enrichment information.
• Preferences and safety context: Dietary preferences and allergen selections you choose to save so PantryScan can flag relevant information.
• Operational information: Rate-limit records, diagnostic/error records, IP address in limited operational logs, and administrator audit events used to protect and maintain the service.

2. How Information Is Used

Information is used to provide pantry tracking, receipt processing, household synchronization, shopping and spending tools, product lookup, safety warnings, diagnostics, abuse prevention, and service administration.

3. Third-Party Processing

PantryScan may send data needed for a requested feature to service providers such as Google Gemini or OpenAI for AI-assisted receipt/product processing, OpenFoodFacts for product lookup, Google for sign-in, and Bunny infrastructure for media delivery/storage. PantryScan does not sell your personal information.

4. Household Data

Some information is intentionally shared with members of the same PantryScan household, including receipts, pantry state, shopping information, and household analytics. Do not join a household unless you intend to share household-level information with its members.

5. Your Data Controls

• Export My Data creates a downloadable JSON copy of account-linked receipt, purchase, and waste records available to your user account.
• Clear Household Purchase History removes shared receipt, purchase, pantry-stat, waste, and related receipt-media history for the household. It does not delete member accounts.
• Delete My Account removes your user identity from PantryScan and deletes your profile media. If other household members remain, shared receipt/purchase facts may be retained in anonymized form so their household history is not destroyed; your user association is removed. If you are the only household member, the household's stored history is removed with the account.

6. Safety Information

Allergen, dietary, ingredient, and product information can be incomplete or outdated. PantryScan is designed to distinguish known conflicts from unknown information, but it is not a substitute for the product label or professional medical advice. For allergy decisions, verify the current package label and manufacturer information.

7. Retention and Security

PantryScan uses access controls, CSRF protection, encrypted HTTPS media transfer, server-side validation, diagnostic logging, and other safeguards. Some operational records may be retained for security, abuse prevention, debugging, or legal/operational needs after user-facing content is removed. No internet service can guarantee absolute security.