Privacy Policy

PantryPal ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the PantryPal mobile application (the "App"). Please read this policy carefully. By using the App, you agree to the collection and use of information in accordance with this policy.

1. Information we collect

1.1 Account information

When you create an account, we collect:

• Email address
• Display name
• If you sign in with Google: your Google account name and email address

1.2 User preferences

To personalize your experience, you may optionally provide:

• Dietary restrictions
• Cooking skill level
• Preferred cuisines
• Cooking time preferences
• Default serving sizes
• Pantry staples (commonly used ingredients)

1.3 User-generated content

We store content you create within the App, including:

• Recipes you generate or save (titles, ingredients, instructions, tags)
• Favorite recipe selections

1.4 Usage data

We collect limited usage data for the purpose of enforcing subscription tier limits:

• Monthly recipe generation count
• Timestamps of recipe generation requests

1.5 Information we do not collect

• We do not collect precise location data
• We do not collect contacts or address book data
• We do not collect photos, videos, or audio from your device
• We do not use behavioral analytics or tracking SDKs
• We do not serve advertisements or use advertising identifiers

2. How we use your information

We use the information we collect to:

• Create and manage your account
• Generate personalized recipe suggestions using AI based on your ingredients and preferences
• Save and organize your recipes
• Enforce usage limits based on your subscription tier
• Process and manage your subscription
• Communicate with you about your account (e.g. password reset emails)

3. Third-party services

The App uses the following third-party services, each governed by their own privacy policies:

3.1 Firebase (Google)

We use Firebase for authentication, cloud database storage (Firestore), and server-side processing (Cloud Functions). Your data is stored on Google's servers and is subject to Firebase's Privacy Policy.

3.2 Google Sign-In

If you choose to sign in with Google, we receive your name and email address from your Google account. This is governed by Google's Privacy Policy.

3.3 OpenAI

Recipe generation is powered by OpenAI's API. When you request a recipe, the ingredients and preferences you provide are sent to OpenAI's servers for processing. No personally identifiable information (such as your name or email) is sent to OpenAI. OpenAI's use of data is governed by OpenAI's Privacy Policy.

3.4 RevenueCat

We use RevenueCat to manage in-app subscriptions and purchases. RevenueCat may collect purchase history, device identifiers, and subscription status. RevenueCat's use of data is governed by RevenueCat's Privacy Policy.

4. Data storage and security

• All data is transmitted over encrypted HTTPS connections
• User data is stored in Google Cloud Firestore with encryption at rest
• API keys and secrets are stored securely on the server side and are never exposed to the client application
• User authentication is handled by Firebase Authentication with industry-standard security practices
• Each user can only access their own data, enforced by Firestore security rules

5. Data retention

We retain your personal information for as long as your account is active. If you delete your account, all associated data — including your profile, preferences, and saved recipes — is permanently deleted from our servers.

6. Your rights and choices

6.1 Access and deletion

You can:

• View your profile information and preferences within the App
• Delete individual saved recipes at any time
• Delete your entire account and all associated data from within the App

6.2 Account deletion

When you delete your account, we permanently delete:

• Your user profile
• Your preferences
• All saved recipes
• All usage data
• Your Firebase Authentication account

6.3 Opt-out

You may stop all collection of information by uninstalling the App. You may also opt out of Google Sign-In by using email/password authentication instead.

7. Children's privacy

The App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete that information. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

8. International data transfers

Your information may be transferred to and processed in countries other than your own, including the United States, where our third-party service providers (Firebase, OpenAI, RevenueCat) operate their servers. By using the App, you consent to such transfers.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date at the top of this policy. Your continued use of the App after changes are posted constitutes your acceptance of the updated policy.

10. Contact us

If you have any questions or concerns about this Privacy Policy or our data practices, please reach out.