Pantry PalsPrivacy Policy
1. Who we are
Pantry Pals is made by Cloudy NI, a sole trader based in Northern Ireland. We are registered with the UK Information Commissioner's Office — data protection registration number ZC222090.
2. What data the app processes
2.1 Pantry content (your shared fridge)
- Pantry items you add: name, quantity, unit, zone, use-by date, sharing setting and optional photo.
- The recorded owner of each item — your chosen display name.
- Consumption history and shopping list entries (item, quantity, store, estimated cost, who is buying).
2.2 Member profiles
- Your display name within the shared pantry.
- Allergen profiles and dietary preferences you add. Allergen and dietary information can be sensitive personal data; it is used only to show you warnings, and you choose what to enter.
2.3 Account and optional cloud sync
- If you create an account or enable live sync, we process your email address and an account password. Authentication and storage are handled by Supabase (our processor, servers in the EU, eu-west-2).
- Live sync shares pantry items, profiles and the shopping list across your kitchen's devices. It is opt-in.
2.4 Scanning and product lookups
- When you scan a barcode, the barcode number is sent to OpenFoodFacts to fetch product name, nutrition, ingredients and allergens. No personal data is sent with that request.
- Receipt OCR runs entirely on your device; the image is not uploaded to us.
2.5 Advertising (free tier)
- The free version shows ads served by Google AdMob, which may process the Android advertising ID and standard ad-request data (IP address, device model, approximate usage) under Google's policies.
2.6 Purchases and support
- Premium subscriptions are sold through Google Play Billing; we receive only an entitlement status, not your payment details.
- If you email support, we process the content of your message and your email address to reply.
3. Data that stays on your device
Core Pantry Pals data — items, history, preferences and photos — is stored in private app storage on your phone (SQLite). In local-first mode nothing is uploaded. Uninstalling the app or clearing app storage removes this data.
4. Cloud sync and accounts (optional)
Creating an account and enabling live sync is a choice. When enabled, the pantry content in sections 2.1 and 2.2 is synced to Supabase (eu-west-2) so every member of your kitchen sees the same fridge. You can stop syncing at any time in the app, and deleting your account removes the cloud copy (see the delete-data page).
5. Advertising choices
You can reset or limit your Android advertising ID at any time in Android settings. Ad-Free Premium and Kitchen Premium remove all ads. We do not sell personal data, and we do not use your pantry data for ad targeting.
6. Third parties (processors)
- Google (AdMob / Play Billing / Play Services) — advertising on the free tier and subscription payments.
- Supabase — optional account authentication and cloud sync (servers in the EU).
- OpenFoodFacts — public product database used for barcode lookups (community-maintained).
7. Legal basis
- Contract — providing the app and the subscriptions you buy.
- Consent — advertising identifiers (controlled in Android settings), optional account and sync, and any sensitive profile data you enter.
- Legitimate interests — operating the service and responding to support enquiries.
8. Retention
Local data stays until you clear it or uninstall. Cloud-sync data stays until you delete your account or stop syncing. Support emails are kept only as long as needed to handle your request and are deleted on request within 90 days.
9. Data deletion
You can delete items and profiles in the app at any time. To delete your account and its cloud copy, open the app → More → Live sync → Delete account (type DELETE to confirm), or follow the instructions on the Request data deletion page for the email route (processed within 90 days).
10. Security
All network traffic uses HTTPS. Passwords are handled by Supabase Auth. We apply reasonable measures for a local-first app — protect your phone with a lock screen and keep Android updated.
11. Children
Pantry Pals is not directed at children under 13. If you believe a child has provided personal data via support email, contact us and we will delete what we can identify.
12. International transfers
Google and OpenFoodFacts may process data on infrastructure outside the UK/EEA under their own terms and safeguards. Supabase data is stored in the EU.
13. Your rights
Under UK data protection law you have rights to access, correct, erase, restrict, port, and object to processing of your personal data, and to withdraw consent. To exercise any right, email support@cloudyni.com. You can also complain to the ICO at ico.org.uk.
14. Changes
We may update this policy. The effective date above changes when we do; material changes are reflected in the Play Store listing.
15. Contact
Questions: support@cloudyni.com. Subject line suggestion: "Pantry Pals privacy".