Data policy
We collect as little as possible and keep it no longer than needed. This policy covers the website as well as the mobile apps, and describes exactly what data we store, for how long and when it disappears automatically. This is not marketing, it is actually enforced in the app.
1. What data do we store?
- Account: email address, display name, language and theme preference.
- Household: name, members and their role.
- Pantry & grocery list: products, amounts, categories, emoji.
- Planner & cookbook: meal planning and your own recipes.
- Chat: messages inside the household.
- Calorie tracker: weight, calorie and protein goals and what you eat.
- Photos: photos of products, labels, receipts and plates that you take or upload.
- Subscription: premium status, chosen plan and customer number at Stripe.
2. Retention periods (cleaned up automatically)
The following cleanup runs automatically when a household member opens the app (at most once per day per user):
| Data | Retention |
|---|---|
| Ticked-off groceries | 30 days after tick-off |
| Household chat messages | 90 days |
| Suggestion history (previously used products) | 365 days since last use |
| Pantry & own recipes | As long as you don't delete them |
| Calorie and nutrition log | As long as your account exists |
| Photos of meals and labels | Until you delete the matching entry |
| Device token for notifications | Until you turn off notifications or delete the app |
| Subscription data | As long as your account exists |
| Account & profile | As long as your account exists |
| Deleted account | Irreversibly wiped within 30 days |
3. Who can see your data?
Access is enforced at the database via Row-Level Security. Pantry, list, planner, cookbook and chat are visible only to members of the same household. are strictly personal. We never sell or share your data with third parties for marketing.
4. What do we use it for?
- Making the app work (tracking stock, sharing lists, planner).
- Smart suggestions based on your own history, not anyone else's.
- Security and abuse prevention.
No ads, no tracking pixels, no third-party sales.
5. Your rights
You can view and delete your data at any time via Settings. To request an export of your data, email info@pantrics.com; you will receive it within one month. If you ask to delete your account, all related rows are permanently wiped within 30 days.
6. Security
Data is stored encrypted (in transit and at rest). Passwords are stored hashed and we check them against known breaches.
Last updated: 3 September 2026
