How Pantri handles personal information
This notice explains, in plain terms, what Pantri processes to run recipe storage, trusted sharing, household planning, billing, notifications, subscriptions, and AI-powered features.
Last updated: 23 October 2026
Who controls your information
Pantri Limited is the controller responsible for personal information processed through Pantri. For privacy questions, rights requests, or concerns, email support@pantri.pro.
What Pantri currently collects
• Account details such as name, email address, sign-in provider, and profile photo
• Recipe information you save, import, edit, share, comment on, rate, or plan
• Household and Friends & Family membership details and related collaboration activity
• Subscription and billing status from Stripe, Apple, and RevenueCat, including plan state and renewal timing
• Notification tokens and technical security information needed to deliver alerts and keep sessions, permissions, and account actions safe
• AI prompts, relevant recipe or planner context, photos, and voice recordings when you intentionally use the corresponding Pantri AI feature
• Dish, ingredient and dietary search terms when you ask Pantri to find recipes beyond your collection
• A versioned record of whether you accepted or withdrew Pantri AI permission and confirmed that you are 18 or older
• Import progress and results, recoverable Assistant replies, and usage counters needed to resume interrupted requests and apply your plan limits
• Community safety reports, relevant reported content, blocking preferences, and moderation decisions
Why Pantri uses it
Pantri uses personal information so it can authenticate users, save and organise recipes, manage Friends & Family sharing, coordinate household planning, operate subscriptions, deliver notifications, and support AI features the user actively requests.
Lawful basis
Contract / service delivery
Most core product processing exists so Pantri can provide the account, recipe storage, sharing, planning, and subscription features you asked for.
Legitimate interests
Pantri also processes some information to keep the service secure, prevent abuse, investigate failures, improve reliability, and maintain a coherent product experience.
Consent
Consent is the basis for sending content you choose to Google Gemini for Pantri AI features, optional cookie categories, and any future optional analytics or marketing technologies that are not strictly necessary.
Legal obligations
Some billing or compliance records may need to be retained where law or financial record-keeping rules require it.
Third-party services and transfers
• Firebase for authentication, database, storage, and secure session support
• Stripe for subscriptions, billing checkout, and customer billing management
• Apple for Sign in with Apple, App Store subscriptions, purchase restoration, and store-managed billing
• Google for Google sign-in, Gemini AI processing, recipe image or text analysis, and safety screening of community photos
• RevenueCat for mobile subscription status, entitlements, purchase restoration, and billing lifecycle events
• Expo for delivering push notifications to devices that opt in
• Brave Search for finding public recipe pages from the dish, ingredient and dietary search terms needed for your request
These services may process data outside your home jurisdiction. Pantri requires providers to protect personal information consistently with this notice and applicable law, uses the contractual, security, and transfer safeguards that apply to each service, and limits data sharing to the functions described here.
Pantri AI and Google Gemini
Pantri AI is optional and available only to people who confirm they are 18 or older. Before first use, Pantri asks for specific permission to send the content needed for the chosen feature to Google Gemini. This can include your prompt, recent conversation, relevant saved recipes or planner context, a photo you selected, or a voice recording you asked Pantri to transcribe.
Pantri sends only the context needed to answer the request. Google may retain inputs and outputs for a limited period to operate its service, maintain security, and detect prohibited use under the terms applying to Pantri's Gemini API account. Do not include confidential or sensitive personal information in prompts, photos, or recordings.
When you search beyond your saved and shared recipes, Pantri can send relevant dish, ingredient and dietary search terms to Brave Search, then read public recipe pages to check the results. Pantri does not send your account identifiers, saved collection or conversation history to Brave. Brave processes search queries under its service and privacy terms, including retention for billing and troubleshooting. Source links can be kept with your Assistant history and recipes you save.
You can decline or withdraw permission from Profile at any time. AI features then stop, while ordinary recipe storage, manual entry, planning, shopping lists, and account controls remain available. If this notice changes materially, Pantri will ask you to review the new version before using AI again.
AI output may be inaccurate. Always check ingredients, allergens, quantities, food-safety instructions, cooking temperatures, and dietary suitability before relying on it.
Retention and deletion
Account and recipe content
Kept while the account is active so the product can function, then removed through the account-deletion process unless a limited retention need applies.
Comments, ratings, notifications, and planner activity
Kept while the related account and shared spaces remain active, unless removed through account deletion or specific feature cleanup. Adding a recipe to a household plan saves a cooking copy in that shared week. Changing or deleting the original personal recipe does not change that planned copy; it can be removed from the shared plan separately.
Billing records
Some subscription and payment records may be retained for longer where financial, tax, fraud-prevention, or audit obligations require it.
Security and troubleshooting data
Kept only for as long as reasonably needed to investigate incidents, defend claims, or maintain service integrity.
Pantri AI permission
Your current permission record is kept with your account and updated when you accept a newer notice or withdraw permission. It is removed when you delete your account. Withdrawing permission stops new AI requests; it does not recall content already processed by a provider.
Assistant and import recovery
Chat history is stored in your browser or app storage. Pantri also stores Assistant replies and request fingerprints on its servers to recover interrupted requests without charging twice. Photo imports can store uploaded source images, progress, and extracted recipe drafts before you save a recipe. Source images are removed after processing or when the import is cancelled or replaced. Recovery records and remaining import files are included in account deletion.
Community safety
Reports and relevant content are kept for investigating abuse and recording moderation decisions. Account deletion removes the associated reporter or reported-user identifiers and relevant report details or content; limited moderation records may remain for service safety.
Your controls and rights
• Ask for access to the personal data Pantri holds about you
• Ask for inaccurate data to be corrected
• Ask for data to be deleted where erasure rights apply
• Object to or restrict some processing in the situations the law allows
• Complain to the ICO or relevant supervisory authority if you think your data is being handled unlawfully
Pantri already includes account deletion, profile controls, billing management, notification settings, cookie settings, and support routes for account or privacy questions.