The short version. Pantry stores your kitchen data — what's in your fridge, what you cook, what you eat — locally on your device. We don't sell your data. We don't run analytics that track you across the internet. The only data that leaves your device is what you explicitly send: photos and barcodes for AI extraction, and grocery list items for local-deal lookup.
What we collect
On your device (local only)
Your inventory — items, quantities, locations, expiry dates, notes you add
Your recipes — generated by AI from your inventory and preferences
Your meal log — what you cooked or ate and when
Your meal plans — recipes you've scheduled to cook
Your preferences — diet, allergies, macro goals, postal code, preferred grocery stores
Backups you create — exported as files for your own portability
This data lives on your device. It is never transmitted to our servers (we don't run servers for it) and we cannot access it.
What leaves your device
Three things, only when you explicitly trigger them:
Photos and text for AI processing. When you snap a photo of your kitchen, scan a barcode, or generate recipes, the relevant input (a photo, a barcode number, or a list of ingredient names + dietary preferences) is sent to Anthropic's Claude API for processing. Anthropic's privacy practices: anthropic.com/legal/privacy. Anthropic does not use API inputs to train models.
Barcode lookups. When you scan a packaged grocery item, the barcode number is sent to Open Food Facts, a public food database. No personal information is sent — just the barcode.
Grocery deal queries. When you tap "Find deals" in the grocery list, your postal code, preferred store names, and grocery list item names are sent to Anthropic's Claude API to find local pricing. We don't store any of this on our servers.
What we don't collect
We don't run analytics SDKs (no Google Analytics, no Firebase Analytics, no Mixpanel, etc.)
We don't track your location beyond the postal code you optionally enter for deal lookup
We don't access your contacts, calendar, or other apps
We don't sell or share your data with advertisers
We don't have user accounts or sync — each device is independent
Camera, photos, microphone
Pantry asks for these permissions only when you use the corresponding feature:
Camera — for barcode scanning and capturing photos of your kitchen
Photo library — for picking existing photos to extract inventory from
Microphone — for voice input via the iOS keyboard's mic button
You can revoke these permissions at any time in iOS Settings. The app will continue to work for everything except the affected feature.
Children
Pantry is not directed at children under 13. We do not knowingly collect data from children under 13.
Changes to this policy
If we make material changes to this policy, we'll update the "Last updated" date at the top and post a notice in the app on next launch.