Privacy Policy
Effective Date: June 22, 2026
Pantri ("we," "our," or "us"), published by NAV-INT-LLC, is committed to protecting your privacy. This Privacy Policy explains how Pantri collects, uses, and safeguards your information when you use our iOS application.
1. Information We Collect
1.1 Information You Provide
- Food inventory data: Items you add (names, expiry dates, quantities, prices, categories, storage locations, barcodes, notes, and optional photos).
- Preferences: Dietary restrictions, allergies, cuisines you love or avoid, cooking skill level, spice tolerance, household size, and equipment.
- Recipe ratings: Ratings you assign to cooked recipes (1–5 stars).
1.2 Information Collected Automatically
- iCloud sync: If iCloud is enabled on your device, your food inventory, preferences, shopping list, and cooked recipe history are synced across your devices signed into the same iCloud account using Apple's CloudKit private database. This data is stored in your personal iCloud container (
iCloud.NAV-INT.Pantri) and is not accessible to us. - Camera & Photos: With your explicit permission, Pantri accesses your camera for barcode scanning and your photo library for receipt OCR. Images are processed entirely on-device. Receipt photos are not uploaded to any server.
- Barcode lookup: When you scan a barcode, Pantri queries the Open Food Facts public database (
world.openfoodfacts.org) to retrieve product information. The barcode number is transmitted over the network for this lookup only. - Subscription status: Pantri uses Apple's StoreKit 2 framework to manage subscriptions. Transaction receipts are verified on-device. We do not collect or store your payment information — all payments are processed by Apple.
1.3 AI Recipe Generation
Recipe generation runs entirely on your device using Apple Foundation Models (Apple Intelligence). The prompt sent to the on-device model includes your food inventory, preferences, and cooking history. No recipe data leaves your device. If your device does not support Apple Intelligence, a fallback proxy service may be used (see Section 4).
2. Information We Do NOT Collect
We do not collect, store, or have access to:
- Your name, email address, or phone number
- Your Apple ID or iCloud credentials
- Your payment card details (processed entirely by Apple)
- Your precise location
- Your device's advertising identifier (IDFA)
- Your browsing history or usage analytics
- Your contacts, calendars, or other personal data
3. How We Use Your Information
All data processing happens on your device or within your personal iCloud account. We use your information to:
- Display your food inventory and track expiry dates
- Generate personalized recipes based on your expiring items and preferences
- Send local push notifications about items nearing expiry
- Sync your data across your own devices via iCloud
- Manage your Pantri Pro subscription status
- Calculate savings and waste statistics
We do not use your data for advertising, profiling, or any purpose other than providing the app's core functionality.
4. Third-Party Services
4.1 Open Food Facts
Barcode lookups query the Open Food Facts API. Their privacy policy is available at world.openfoodfacts.org/legal. Only the scanned barcode number is transmitted.
4.2 Apple Services
Pantri relies on Apple's platform services:
- iCloud (CloudKit): For cross-device sync. Governed by Apple's Privacy Policy.
- StoreKit 2: For subscription management. Governed by Apple's Privacy Policy.
- Apple Foundation Models: For on-device recipe generation. All processing is local.
- Vision Framework: For on-device receipt OCR. All processing is local.
4.3 Recipe Proxy (Optional Fallback)
If your device does not support Apple Intelligence and the proxy service is configured, recipe generation requests are sent to a server-side proxy. The request includes your food inventory and preferences but does not include any personally identifiable information. Proxy availability and configuration are at the discretion of the app publisher.
5. Data Storage and Security
- On-device storage: Your data is stored locally on your device using Apple's SwiftData framework, which leverages the device's built-in encryption.
- iCloud storage: If enabled, data syncs via CloudKit to your private iCloud database. Data is encrypted in transit and at rest by Apple. We do not have access to your iCloud data.
- Photo storage: Item photos are stored locally in the app's Documents directory. They are not uploaded to any server.
- Data retention: Data remains on your device and in your iCloud account until you delete it. Deleting the app removes all local data. iCloud data can be removed via your device's Settings → [Your Name] → iCloud → Manage Account Storage → Pantri.
6. Your Rights and Choices
- Access and portability: Your data is on your device and in your iCloud account.
- Deletion: Delete items individually within the app, or delete the app entirely to remove local data. iCloud data can be removed as described in Section 5.
- Notifications: Local notification permissions can be managed in your device's Settings → Notifications → Pantri.
- Camera and photo access: Manage in your device's Settings → Privacy & Security → Camera / Photos.
- iCloud sync: You can disable iCloud for Pantri in your device's Settings → [Your Name] → iCloud → Show All → Pantri. The app will continue to work with local-only storage.
- Do Not Track: Pantri does not track your activity and does not respond to "Do Not Track" signals because we do not track you in the first place.
7. Children's Privacy
Pantri is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.
8. International Users
Your data is stored on your device and in your personal iCloud account (operated by Apple). Apple's iCloud servers may be located in various countries. By using Pantri, you consent to Apple's data handling practices as described in Apple's Privacy Policy.
Pantri complies with applicable data protection laws, including the GDPR (European Union), UK GDPR, CCPA (California), and PIPEDA (Canada). Since we do not collect or process personal data on our own servers, our obligations are limited to ensuring the app functions in a privacy-respecting manner.
9. California Privacy Rights (CCPA)
Under the California Consumer Privacy Act, California residents have the right to:
- Know what personal information is collected
- Know whether personal information is sold or disclosed and to whom
- Access their personal information
- Request deletion of their personal information
- Not be discriminated against for exercising privacy rights
Since Pantri does not collect, sell, or share your personal information (all data remains on your device and in your personal iCloud account), these rights are inherently preserved. To delete your data, simply delete the app and remove iCloud data as described in Section 5.
10. European Privacy Rights (GDPR)
Under the General Data Protection Regulation, users in the European Economic Area, United Kingdom, and Switzerland have rights including:
- Right of access: All your data is accessible within the app.
- Right to rectification: Edit items directly in the app.
- Right to erasure: Delete items or the app itself.
- Right to data portability: Contact us for an export.
- Right to object to processing: Discontinue using the app.
The legal basis for processing your data is legitimate interest (providing the core functionality you expect from a food expiry tracker) and, where applicable, performance of a contract (your Pantri Pro subscription). Since all processing is on-device and within your personal iCloud account, the data controller is you.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted within the app and are effective immediately upon posting. Your continued use of Pantri after any changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or Pantri's data practices, please contact us at:
Email: NAV-INT-LLC@pm.me
This privacy policy was last updated on June 22, 2026.