Pantri
Privacy Policy
Last updated: 2026-04-24
Pantri is a household pantry and shopping tracker built by a solo developer. This policy explains exactly what data Pantri collects, why, and how you can control or delete it. If you have questions, email [email protected].
1. What we collect
| Data | Why | Where it lives |
|---|---|---|
| Google account UID, email, display name | Identify you within your household | Firebase Auth (Google-managed) |
| Pantry items (name, stock level, aisle, notes) | Core app function | On-device + Firebase Firestore when in a household |
| Receipts (scanned line items, prices) | Shopping history | On-device + Firestore under your household record |
| Gemini API key (if you provide one) | Authenticate receipt OCR requests | On-device only — SharedPreferences / UserDefaults, never uploaded |
We collect nothing else. No location, no contacts, no device identifiers beyond what Firebase Auth manages.
2. Camera permission
Pantri requests camera access only to scan receipts. Here is exactly what happens:
- On-device capture — no photo is saved to your camera roll or gallery.
- Sent to Google Gemini for OCR — the image is transmitted to the Gemini API to extract product names and prices. Gemini is the only external service that receives the image.
- Not stored by Pantri — once Gemini returns the parsed result the image is discarded. Pantri never caches or re-uploads receipt photos.
- Never used in the background — the camera is never accessed outside an explicit scan session and is never used for facial recognition or any other purpose.
- Optional — receipt scanning requires a Gemini API key that you supply. Without one the camera feature is unavailable and the permission goes unused.
You can revoke camera access at any time in Settings → Apps → Pantri → Permissions → Camera. All other features continue to work normally.
3. How we use data
- To run the app: sync pantry items and receipts across devices in the same household.
- To authenticate: Firebase Auth manages sign-in with Google so your household membership is secure.
- We do not use your data for advertising, profiling, or any purpose beyond operating the app.
4. Third-party services
| Service | Purpose | Their privacy policy |
|---|---|---|
| Firebase Auth (Google) | Sign-in | firebase.google.com/support/privacy |
| Firebase Firestore (Google) | Cloud sync | firebase.google.com/support/privacy |
| Google Gemini API | Receipt OCR | ai.google.dev/gemini-api/terms |
No other third-party SDKs, analytics services, or ad networks are included.
5. Data sharing
Pantry items and receipts are visible to every current member of your household. We never sell or share your data with anyone outside the Google services listed above.
- Leaving a household stops syncing immediately.
- Closing (deleting) a household removes the shared Firestore record for all members. Local copies on individual devices remain.
6. Data retention
Your data is retained in Firestore for as long as your account exists. If you delete the app without signing out, your Firestore data remains until you request account deletion (see below).
7. Your rights and controls
- Edit or delete items — directly in the app at any time.
- Sign out — Profile → Logout. Local data stays; cloud sync stops.
- Leave a household — stops your access to shared data instantly.
- Delete your account — email [email protected] with the subject "Account deletion". We will remove your Auth record and any associated household data within 30 days.
- Data export — email us and we'll provide a copy of your stored data in JSON format.
8. Children
Pantri is not directed at children under 13. We do not knowingly collect data from children under 13.
9. Changes to this policy
If we make material changes we will update the "Last updated" date above. Continued use of the app after changes take effect constitutes acceptance of the revised policy.
10. Contact
Questions, deletion requests, data exports, or anything else:
[email protected]