Privacy Policy
Last updated: 24 August 2026
This Privacy Policy explains how Pantry ("Pantry", the "App", "we", "us", "our") collects and uses your personal data when you use the Pantry mobile application and related services, and the rights you have. Please read it together with our Terms & Conditions.
1. Who we are
Pantry is provided by Nadiur Rahman trading as "Pantry", of Studio 124 – Great Western Studios, 65 Alfred Road, London W2 5EU. We are the data controller for the personal data described in this policy. You can contact us about privacy at support@pantryapp.uk. We are registered with the UK Information Commissioner's Office (ICO) under registration number ZC207223.
2. What this policy covers
This policy covers personal data we process through the App and our backend services. It does not cover third-party services that have their own privacy policies (for example the Google Play Store), which we link to where relevant.
3. The personal data we collect
We collect the following, depending on how you use the App:
3.1 Account and identity data. Your email address, and — if you choose SMS sign-in — your mobile phone number. Optionally a display name you set.
3.2 Sign-in and security data. Pantry is passwordless: we generate one-time sign-in codes and process records of sign-in activity, including timestamps, whether a code succeeded or failed, your approximate IP address, and counters we use to apply rate limits and temporary sign-in locks. At each sign-in we also record basic device information — your device model and make, operating-system version, app version, and a random app-generated device identifier — which powers the "Your devices" screen so you can see where your account is signed in and sign any device out remotely. That identifier is generated by the App; it is not a permanent hardware ID such as an IMEI or serial number. We use this data to sign you in, to show and let you manage your signed-in devices, and to protect your account and our systems from abuse.
3.3 Your content. The information you create or upload in the App, including shopping lists and items, saved meals and meal plans, scanned receipts and the item and spend information extracted from them, loyalty card details you store, Team Lists you create or join (and their join codes), and any images you upload (for example a receipt or a support screenshot).
3.4 Location data. We process your precise (GPS) location for the Store Locator to find shops near you, only while you are using the App — Pantry does not use location in the background. We only use location with your device permission, and you can withdraw it at any time in your device settings, which switches this feature off (you can still search by postcode).
3.5 Usage and diagnostic data. Information about how you use the App — such as which features you use and records of AI-assisted actions (used for reliability, cost control, and enforcing the fair-use allowances set out in our Terms) — along with app version and basic diagnostic information. AI usage records include which feature ran, when, and what it cost us to run, so we can apply per-account limits and keep the service affordable.
3.6 Subscription data. Your Pantry+ subscription status and related records. Payment is processed by Google Play; we do not receive or store your card or payment-method details (see section 6).
3.7 Support data. If you contact support or use in-app support features, we process the messages and any images you send us so we can help you.
3.8 Product and feature-interest data. We record a small number of first-party product events, tied to your account:
- when you share an invitation to a Team List — we record the event, the time, and which shared list it relates to. We do not record who you sent it to, and we do not see the message you send; and
- when you register interest in an upcoming feature — we record the event, the time, and your email address, so that we can tell you when the feature is ready and so we can count how many distinct people asked for it.
These are first-party counts collected by us alone. There is no third-party analytics SDK, no advertising identifier, no device fingerprint, and no new identifier is created for this purpose. See section 13.
3.9 When you change your email address. If you change the address on your account we move the data held against the old address onto the new one, so that nothing is orphaned or lost. Records whose purpose is to show what actually happened at the time — such as which address a past sign-in was made from — are deliberately left unchanged, because rewriting them would falsify a security record.
4. How we use your data, and our lawful basis
Under UK GDPR we must have a lawful basis for each purpose. We rely on the following:
| What we do | Why | Lawful basis |
|---|---|---|
| Create your account and sign you in with one-time codes | To provide the App you asked for | Contract |
| Store and sync your lists, meals, receipts, loyalty cards and other content across your devices | Core functionality | Contract |
| Provide Pantry+ and manage your subscription | To deliver the paid service | Contract |
| Categorise items, suggest recipes/meals, rank and locate stores, and provide search | To provide App features | Contract / Legitimate interests |
| Protect accounts and systems: rate limits, sign-in lockouts, abuse and fraud prevention, image moderation | To keep the App and users safe | Legitimate interests |
| Show you which devices are signed in to your account and let you sign any of them out remotely | Account security and control | Legitimate interests |
| Keep the App reliable and improve features | To maintain and develop the service | Legitimate interests |
| Use precise location (while using the App) for Store Locator | To find nearby stores | Consent (device permission, withdrawable anytime) |
| Record when you share a list invitation, to understand whether sharing works | Product improvement | Legitimate interests ⚖️ *see 3.8* |
| Record that you asked to be told about an upcoming feature, and contact you when it ships | To answer the request you made | Legitimate interests ⚖️ *see 3.8* |
| Move your data onto your new email address when you change it | To keep your account intact | Contract |
| Send you any optional marketing or product emails | To keep you informed, if you opt in | Consent (withdrawable anytime) |
| Keep payment and tax records | To meet legal obligations | Legal obligation |
5. Who we share your data with
We do not sell your personal data, and we do not share it for third-party advertising. We share data only with service providers ("processors") who help us run Pantry, and only as needed:
- Railway — application hosting and our main database, holding your account record, receipts and spend data, saved meals, Team Lists, loyalty cards, sign-in and security logs, support messages and images, and the product events described in 3.8.
- Supabase — database and file storage for your lists, saved meals and account data.
- Brevo — sending your one-time sign-in codes. Brevo receives the email address or mobile number the code is sent to, and the code itself. It does not receive your lists, receipts, or any other content.
- Anthropic (Claude) — AI text processing: categorising shopping items, generating recipe and meal suggestions, summarising your spending, reading scanned receipts, and helping triage support requests. It receives the text needed for the task in hand (for example item names, or the text read from a receipt).
- Voyage AI — generating the search embeddings behind recipe search. It receives the text being indexed or searched.
- Google — Google Places (receives your approximate location in order to find shops near you), Google Cloud Vision (receives images you upload, to read the text on a receipt and to check images before they appear in support), and Google Play (processes Pantry+ payments — see section 6).
These providers act on our instructions under data-processing terms. We may also disclose data if required by law, to protect our rights or users' safety, or in connection with a business transfer, in which case we will tell you.
6. Payments
Pantry+ is purchased and paid for through the Google Play Store. Google processes your payment under its own terms and privacy policy. We receive confirmation of your subscription status but do not receive or store your card number or payment details.
7. International data transfers
Some of our providers may process data outside the UK and European Economic Area. Where they do, we rely on appropriate safeguards to protect your data — such as the UK International Data Transfer Agreement (or the Addendum to the EU Standard Contractual Clauses), or transfers to countries the UK government recognises as providing adequate protection. You can ask us for more detail using the contact in section 1.
8. How long we keep your data
We keep personal data only as long as we need it:
- Account and content (lists, saved meals, receipts, loyalty cards, etc.) — for as long as your account is active. If you delete your account, we delete or anonymise this data within 30 days, except where we must keep some of it longer by law.
- Sign-in and security logs — kept for 90 days to protect your account and investigate abuse, then deleted.
- Payment and subscription records — kept for as long as tax and accounting law requires (typically 6 years).
- Product and feature-interest events (section 3.8) — kept for 24 months, then deleted. A feature-interest record is deleted sooner once that feature has shipped and we have told you about it.
- Backups — routine backups are overwritten on a rolling cycle (about 35 days).
- Changing your email address does not restart or extend any of these periods; your data keeps its original age.
9. Your rights
Under UK data protection law you have the right to: be informed about how we use your data; access a copy of your data; have inaccurate data corrected; have your data erased; restrict or object to certain processing; data portability (receive your data in a portable format); rights in relation to automated decision-making; and to withdraw consent at any time where we rely on consent (for example location or marketing).
To exercise any of these, contact us at support@pantryapp.uk. This is free, and we will respond within one month. You can also ask us to delete your account and we will action it.
If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113. We'd appreciate the chance to help first.
10. Automated processing and AI
Pantry uses automated and AI-assisted processing to categorise items, suggest recipes and meals, rank and find stores, power search, and moderate uploaded images. These features are conveniences to help you use the App; they do not make solely-automated decisions that produce legal effects or similarly significant effects on you. AI-generated information (including recipe, ingredient, allergen, and nutrition information) may be incomplete or inaccurate and is not professional or medical advice — please see the corresponding section of our Terms & Conditions.
11. How we protect your data
We use appropriate technical and organisational measures to protect your data, including encryption of data in transit, encryption of stored loyalty-card details (AES-256-GCM), passwordless sign-in using signed session tokens, rate-limited one-time codes with temporary lockouts after repeated failures, access controls, and reputable infrastructure providers. You can see every device signed in to your account and sign any of them out remotely. No online service can be completely secure, but we work to protect your data and to detect and address problems.
12. Children
Pantry is not intended for children under 13. You must be at least 13 to use the App, and older where required to enter a subscription (see our Terms). We do not knowingly collect data from children under this age; if you believe a child has given us their data, contact us and we will delete it.
13. Cookies, analytics and tracking
The Pantry app does not use third-party advertising trackers, does not use a third-party analytics SDK, and does not sell or share your data with advertisers. There is no advertising identifier, and no cross-app or cross-site tracking.
We do record the small number of first-party product events described in section 3.8 — when you share a list invitation, and when you register interest in an upcoming feature. These are recorded by us alone, are tied to your account rather than to any tracking identifier, are used only to understand whether sharing works and to contact you about a feature you asked about, and are never shared with third parties or used for advertising.
The App also contains a behavioural-analytics capability that is currently switched off: it records nothing unless a consent flag is set, no consent flow exists in the App, and as at 24 August 2026 it has recorded nothing at all. If we ever turn it on, we will update this policy and our Google Play Data safety form, and ask for your consent first where the law requires it.
14. Team Lists and other people's data
If you create or join a Team List, the items and information you add are visible to everyone who has that list's join code. You are responsible for who you invite. If you add another person's personal data to the App, you confirm you have a proper basis to do so.
15. Changes to this policy
We may update this policy from time to time. If we make material changes we will take reasonable steps to let you know (for example, in the App or by email) and update the "Last updated" date above. The current version always applies.
16. Contact us
For any privacy question or request, contact Nadiur Rahman (trading as "Pantry") at support@pantryapp.uk. Our supervisory authority is the UK Information Commissioner's Office (ico.org.uk).