Privacy Notice

Pantry is operated by Ronit Srivastava, an individual based in India, who is the data controller for personal data collected through the service — meaning we decide how and why it is used. Contact: ronitsriv@gmail.com.

What we collect and why

• Account details (email, name, login credentials or Google sign-in) — to create and secure your account. Basis: contract.
• Kitchen data (ingredients, pantry items, purchase dates, saved recipes, grocery list) — to provide the service. Basis: contract.
• Photos you upload — only to identify ingredients; processed by our AI provider and not kept as a gallery. Basis: contract.
• Usage data (AI usage counts, plan status, device/browser info, IP address, error logs) — to enforce plan limits, keep the service secure, prevent fraud and fix problems. Basis: legitimate interests.
• Support messages — to answer you. Basis: contract / legitimate interests.

Ingredients you add without signing in stay in your browser and are not sent to us except to run searches and AI suggestions.

Who we share it with

• Service providers: hosting and database (Lovable Cloud), AI processing (Lovable AI gateway and its model providers), and Google if you choose Google sign-in.
• Paddle, our Merchant of Record, for selling Pantry Pro, subscription management, payments, tax compliance and invoicing.
• Professional advisers (legal, accounting) where needed.
• Authorities where required by law.

We do not sell your personal data. Some providers may process data outside India; we rely on their contractual safeguards (such as standard contractual clauses) to protect it.

How long we keep it

We keep account data while your account is active. When you ask us to delete your account, or it is no longer needed, we delete or anonymise it within a reasonable period, except where the law requires us to keep records.

Your rights

Under India's Digital Personal Data Protection Act and, where applicable, GDPR, you can ask to access, correct, delete or export your data, object to or restrict processing, withdraw consent, and complain to your data protection authority. Email us and we'll respond within one month.

Security

We use encryption in transit, access controls and per-user data isolation to protect your information.

Cookies and local storage

We only use essential browser storage — to keep you signed in and remember your ingredients. We don't use advertising or analytics cookies. You can clear this storage in your browser settings at any time.