App Privacy Notice

Updated 28 September 2026.

This notice explains how the Pantry iPhone app handles your information. Pantry is operated by Sam Agnew, who is responsible for the personal data described here. Contact support@thepantryapp.co.uk, or write to Sam Agnew, Pantry, 64 College Way, Bristol BS34 7BH, United Kingdom.

The Shopify website and store have a separate Website and Store Privacy Policy and cookie information. Visiting an app information page on the website also involves the website's hosting and cookie practices.

Shopify hosts these policy and help pages on www.thepantryapp.co.uk. Cloudflare and OpenAI Sites help deliver the older thepantryapp.co.uk web links and compatibility pages. Those website services may receive request information such as your IP address and browser details; they are separate from Pantry's household database. Use the current website's cookie information for its technologies.

What Pantry uses and why

Pantry helps you organise shopping lists, kitchen stock, meals and recipes, on your own or with a shared household. An account is required for the connected features. Some processing and choices stay on your device; information saved to a connected household is synchronised with the service.

Account information: your account identifier, sign-in email, display name, chosen sign-in provider and session information provide sign-in and access to your households. Apple may supply a private relay email. Pantry does not receive your Apple or Google password.
Household information: household names, icons, member identifiers, roles, joining details and invitations provide household sharing and membership controls. An invitation may include an email restriction.
Shopping and stock: item names, quantities, priorities, purchased status, storage labels, optional food dates and update information provide lists, stock, shopping, put-away and activity features. Purchased status is stored with shared household items and is linked through membership to account profiles. Storage labels such as Fridge are organisational labels, not GPS locations.
Meals and recipes: saved meals, dates, servings, ingredients and recipe details provide shared planning and cooking. Where available, Pantry uses your stock and recipes to suggest what you can make and what you may need to buy. These comparisons run on your device.
Product information: details you confirm after scanning or looking up a product can become part of your household's stored items and product information.
NFC tags: a Pantry tag identifier, represented by a hash in stored mappings, connects a tag with its assigned household, item, action or storage location. Activity information helps handle recent actions and duplicate scans. Product names are not written to the tag.
Preferences and local information: appearance choices, caches and queued changes support the features you use, including offline work, widgets and reminders. Providers may also process IP addresses, request times and security or service logs to operate and protect the service.
Support: we receive the email address, message and attachments you choose to send. An app feedback draft can include the app/build version, sign-in status, household count and pending-change count to help investigate a problem. Opening the draft does not send it automatically.

Members of a shared household can see its lists, stock, saved meal plans and recipes, assigned tags, member display names, roles and shared profile choices. Timestamps and relevant activity help explain changes. Your sign-in email is not included in the ordinary member roster; an owner may see an email used to restrict an invitation.

Only share information you are comfortable making available to the household. Treat invitation links, QR codes and private tag links as private. Revoke an invitation if it has been shared incorrectly.

Receipt scanning, barcodes and camera use

Pantry recognises receipt text on your iPhone. Pantry does not upload or save the receipt image or raw recognised text. You review the results before accepting items. Accepted item details enter your basket and, when saved to shared household records, synchronise in the same way as manually entered items. The original photo in your Photos library is separate.

A product barcode lookup sends the barcode to Open Food Facts over an encrypted connection. That service also receives network information such as your IP address. Pantry does not include your household identifier or receipt image in the lookup. Product information can be incomplete or incorrect, so review it before saving.

QR recognition runs on your device. Camera access depends on the feature you choose and your iOS permission settings.

Profile photos and appearance choices

Profile photos are optional. You can use initials, an emoji or an icon instead. Saving a shared profile choice makes it visible to members of your shared households. A previously local-only photo is not automatically uploaded just because you update the app.

The app prepares a square JPEG of up to 512 pixels without copying the source photo's metadata. Shared photos use private storage with access checked against household membership; they are not published as open image links. Changing to initials, an emoji or an icon stops displaying the old photo, but an earlier uploaded photo may remain in private storage until it is replaced or your account is deleted. We cannot recall screenshots or copies another member has made.

Your phone's colour and appearance choices do not change the household's information.

Notifications, widgets and other iPhone features

Expiry reminders and the current daily digest are scheduled from data saved on your device. Notifications, widgets, Siri/Shortcuts and Shopping Mode Live Activities can show household names, item names or counts outside the open app, including on the Lock Screen depending on iOS settings. Choose the features and notification previews you are comfortable with. Delivery and freshness depend on your settings, synchronisation and iOS behaviour.

Our reasons for using personal data

Providing the service you request: account access, household sharing, shopping and stock records, saved meals and recipes, tag assignments and synchronisation are used to perform our agreement with you.
Legitimate interests: proportionate security logging, abuse prevention, troubleshooting and support help maintain and protect Pantry. You can object where this basis applies.
Your choices and consent where required: you decide whether to share an optional photo or enable optional device features. You can change those choices, and iOS controls permissions. Withdrawing consent does not affect earlier lawful processing.
Legal obligations: information may be retained or disclosed where the law requires it.

Without the basic account and household information, we cannot provide the connected service. Optional photos and notifications are not required. Pantry does not make solely automated decisions with legal or similarly significant effects on you.

Services that help the app operate

Supabase: account authentication, the shared database, synchronisation and private file storage.
Apple and Google: the sign-in option you select and the platform services you use. Their own privacy information also applies.
Resend: delivery of configured sign-in and service emails.
Open Food Facts: product information requested by barcode, as described above.
Our email services: routing, delivery and handling of support correspondence.

Providers and their subprocessors may handle information internationally, including outside the United Kingdom. Contact support if you need information about the arrangements relevant to your data. We may also disclose information when legally required, to protect users and the service, or to professional advisers under appropriate confidentiality.

Pantry does not include advertising or a third-party behavioural analytics SDK in the app. This statement concerns the app; the separate website policy describes Shopify's services and website technologies.

Retention and account deletion

Account and household information is kept while needed to provide Pantry. You can edit or remove items, leave a household, change your profile choice and request account deletion in the app. Owners may need to transfer ownership or resolve households first. Read the account deletion steps.

Deleting your account removes the account and memberships. Content contributed to a shared household may remain for its other members. Some synchronisation, deletion, retry and pseudonymous anti-abuse records may remain where needed to propagate changes, prevent duplicate operations and protect the service. Pseudonymous records are not necessarily anonymous.

Service logs, support correspondence and any separately configured backups have their own retention arrangements. The period depends on the record's purpose, operational need, investigations and legal requirements. Contact us about a particular record or to make a deletion request. There is no single deletion period that applies to every type of information.

Cached and unsynchronised information on your device is handled separately. Follow the in-app choices before removing local data. Uninstalling the app does not request deletion of your online account.

Your rights and privacy complaints

Depending on the circumstances, UK data-protection law gives you rights to access, correct or erase your personal data, restrict processing, object, receive portable data and withdraw consent. Email support@thepantryapp.co.uk to make a request. We may need to verify your identity and explain lawful limits, including where a request affects another household member's information.

To raise a concern about our handling of personal data, email support with the subject Privacy complaint and explain what happened and how we can help. Privacy requests and complaints are handled under the applicable data-protection requirements. Never send passwords, sign-in links, invitation codes or private tag links.

You can also complain to the Information Commissioner's Office (ICO). We would welcome the opportunity to address your concern first.

Links and changes to this notice

Use the app support page for help, and read the App Terms for using Pantry. We update this notice when the app or its data practices change. The date above identifies this version; material changes will be communicated where appropriate.