Pantro ("we", "our", or "us") operates the pantro.app website and mobile application. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our service.
Information We Collect
Account Information
When you create an account, we collect your email address for authentication purposes.
Beta Signup Information
If you sign up for our beta program, we collect your email address and referral source to manage the waitlist.
Food Preferences
We collect your dietary preferences, cuisine preferences, ingredient exclusions, and default serving sizes to personalize recipe recommendations.
Pantry Data
We store information about food items you add to your pantry, including names, quantities, categories, and expiration dates.
Recipe Data
We save recipes you add to your cookbook, your favorites, and your cooking history to improve your experience. When you import a recipe from a URL, our servers fetch the content of that webpage on your behalf to extract recipe data. The fetched webpage content is not stored permanently.
Shopping Lists
We store your shopping list items to sync across devices and sessions.
Usage Data
We track usage of AI-powered features (recipe generation, image generation, fridge scanning, receipt scanning, voice transcription) to manage monthly usage limits.
Web Analytics
We use Vercel Analytics, a third-party service, to collect anonymized web performance metrics such as page load times and navigation patterns. Vercel Analytics does not use cookies and does not track users across sites. We also record first-party, in-app usage events tied to your account, as described in the Usage Analytics section below. We do not share analytics data with third-party advertisers.
Push Notification Tokens
If you enable push notifications, we store device tokens to send you expiration alerts for pantry items.
Scanned Images
When you use the fridge or receipt scanning features, images are sent to AI services for processing. These images are not stored permanently on our servers.
Local Browser Storage
We use your browser's local storage (localStorage) to store authentication session tokens, UI preferences (such as collapsed sections), and cached item data for performance. This data remains on your device and is not transmitted to our servers unless it forms part of a feature described above (e.g., session tokens for authentication).
How We Use Your Information
- To provide and maintain the Pantro service
- To personalize recipe recommendations based on your preferences and pantry contents
- To send expiration alerts for items in your pantry
- To sync your data across devices
- To improve our AI features and user experience
- To enforce usage limits on AI-powered features
- To measure web performance through anonymized analytics
- To prevent abuse and enforce rate limits
- To send transactional emails (e.g., beta signup confirmations)
Data Storage & Security
Your data is stored securely using industry-standard cloud infrastructure. We use encryption in transit (HTTPS/TLS) and implement row-level security to ensure you can only access your own data. Your password is never stored in plain text.
Usage Analytics
To understand how Pantro is used and improve the product, we record first-party, in-app usage events tied to your account — for example that the app was opened, a tab was viewed, an item was added, a scan completed, or a recipe was cooked. These are behavioral counters only: we never store the names of your items, recipes, or any free text you type, and we do not collect advertising identifiers, fingerprints, precise location, or your IP address for analytics. The data is not shared with third parties and is not used for cross-app tracking. Analytics events are retained for 180 days and are permanently deleted when you delete your account.
Third-Party Services
We use the following third-party services to operate Pantro:
- Supabase: For secure data storage, authentication, and serverless functions
- Google Gemini: For AI-powered recipe generation, image analysis, food recognition, and as a fallback for extracting recipe data from imported URLs
- Firebase Cloud Messaging: For sending push notifications to your device
- AI Image Generation: For creating recipe images
- Vercel Analytics: For collecting anonymized web performance metrics (page load times, navigation patterns). Vercel Analytics does not use cookies and does not track users across sites
- Resend: For delivering transactional emails such as beta signup confirmations and admin notifications
Each of these services has its own privacy policy governing how they handle data. When you import a recipe from a URL, our servers make an HTTP request to that external website to retrieve its content. We identify ourselves with a "PantroBot" user agent string. The content of the external page is processed to extract recipe data and is not stored permanently.
Cookies & Local Storage
Pantro does not use traditional browser cookies for tracking. We use your browser's localStorage to maintain your authentication session, cache non-sensitive data for performance, and store UI preferences. Vercel Analytics, our third-party analytics provider, does not use cookies. You can clear localStorage at any time through your browser settings, though this will require you to log in again.
Your Rights
You have the right to:
- Access your personal data stored in our systems
- Correct inaccurate data
- Request deletion of your account and all associated data
- Export your data in a portable format
- Opt out of push notifications at any time
- Withdraw consent for data processing where consent is the legal basis
To exercise these rights, please contact us at the email address below. We will respond to your request within 30 days.
International Users
Pantro is operated from and data is processed in the United States. If you are accessing our service from outside the United States, please be aware that your data may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using Pantro, you consent to the transfer of your data to these countries.
European Economic Area (EEA) Users: If you are in the EEA, we process your personal data based on legitimate interest (to operate and improve the service), contract performance (to provide the service you signed up for), and consent (where you have opted in to features such as push notifications). You have additional rights under the GDPR including the right to data portability, the right to restrict processing, and the right to lodge a complaint with your local data protection authority.
California Residents: Under the California Consumer Privacy Act (CCPA), you have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of personal information. Pantro does not sell your personal information to third parties.
Data Retention
We retain your data for as long as your account is active. If you delete your account, your personal data will be permanently removed from our systems within 30 days, except where we are required to retain it for legal purposes.
Account deletion: You can delete your account at any time in the app (Settings → Delete account), or request deletion without the app at pantro.app/delete-account.
Waitlist & beta invites: Waitlist and beta-invite email addresses are retained until you unsubscribe or request removal.
Children's Privacy
Pantro is not intended for children under 13 years of age (or under 16 in the EEA). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will promptly delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For significant changes, we may also notify you via email if you have an account.
Contact Us
If you have questions about this Privacy Policy or our data practices, or wish to exercise any of your rights, please contact us at: