Pantry
Privacy Policy
Last updated: April 23, 2026
Pantry ("we," "our," or "us") is an AI-powered food and nutrition tracking app operated by Koba Labs LLC. This Privacy Policy explains what information we collect, how we use it, and your choices. By using the Pantry app or visiting heypantry.app, you agree to the practices described here.
1. Information We Collect
Account Information
- Email address and password (or your Google/Apple account identifier if you sign in with a third-party provider)
- Display name (optional)
Health & Nutrition Data
- Height, weight, and body-weight goal (cutting, maintaining, or bulking)
- Daily calorie and macro targets (calories, protein, carbohydrates, fat)
- Dietary restrictions and food preferences/dislikes
- Meal logs: meal names, calories, macronutrients, serving size, and timestamps
- Pantry and grocery items you add to the app
- Cooking skill level and maximum prep-time preference
Photos & Images
- Photos you take or upload for pantry scanning, receipt scanning, or food logging. Images are sent to our AI providers for analysis and are not stored on our servers after processing unless you explicitly save the result.
Usage Data
- App events (screens viewed, features used, button taps) collected via PostHog for analytics
- Crash reports and performance logs
- IP address and device identifiers for rate-limiting and fraud prevention
Payment Information
- Pantry subscriptions are processed entirely by Apple (in-app purchase) or Stripe (web). We do not store credit card numbers. Apple and Stripe provide us with a subscription status and renewal date only.
2. How We Use Your Information
- Personalized meal suggestions – Your health data, dietary restrictions, and pantry inventory are sent to AI providers to generate meal ideas tailored to you.
- Macro tracking – Meal logs are stored and displayed on your home dashboard to help you hit your daily goals.
- AI-powered scanning – Photos you submit for pantry or receipt scanning are sent to our AI providers for ingredient and product recognition.
- Product improvement – Aggregated, de-identified analytics help us understand which features are useful and where to improve.
- Communications – We may email you about important account or subscription changes. We do not send marketing email without your consent.
- Legal compliance & safety – We may use or disclose data as required by law or to protect our users and services.
3. AI & Third-Party Processing
Pantry uses the following third-party AI and infrastructure providers to deliver its core features. Your data (text and/or images) is transmitted to these services when you use those features:
None of these providers use your personal data to train their models under our usage agreements.
4. Data Storage & Security
Your data is stored on Supabase, a cloud database hosted on AWS infrastructure. All data is encrypted in transit (TLS) and at rest. We apply row-level security policies so that each user can only access their own data.
No system is perfectly secure. If a breach occurs that affects your data, we will notify you as required by applicable law.
5. Data Retention
- Account data – retained while your account is active. Deleted within 30 days of account deletion.
- Meal logs – retained indefinitely to preserve your history unless you delete them or your account.
- AI-processed images – not retained on our servers after processing. Third-party providers may retain logs per their own policies.
- Analytics events – retained for 12 months in PostHog.
6. Sharing Your Information
We do not sell your personal information. We share data only:
- With the AI and infrastructure providers listed in Section 3, as necessary to operate the app
- With Apple and Stripe for payment processing
- When required by law, subpoena, or government request
- To protect the rights, property, or safety of Pantry, our users, or the public
- In connection with a merger or acquisition, with notice to you
7. Your Rights & Choices
- Access & correction – You can view and update your profile data inside the app at any time.
- Delete your account – Email us at [email protected] to request full account deletion. We will process your request within 30 days.
- Revoke AI consent – You can revoke your consent for AI processing inside the app under Settings → Privacy. Revoking consent disables AI features until you re-consent.
- Opt out of analytics – Contact us to opt out of PostHog analytics event collection.
- California residents (CCPA) – You have the right to know what personal information we collect, request deletion, and opt out of sale (we do not sell data). Contact us to exercise these rights.
8. Children's Privacy
Pantry is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact us and we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. If the changes are material, we will notify you via in-app notice or email. Your continued use of Pantry after the effective date constitutes acceptance of the updated policy.