Privacy Policy

PurePantry Privacy Policy Effective Date: August 30, 2026 Last Updated: August 30, 2026 PurePantry is operated by Addison Wittkamp (“PurePantry,” “we,” “us,” or “our”). This Privacy Policy explains how PurePantry collects, uses, stores, and shares information when you use the PurePantry mobile application, website, and related services. By using PurePantry, you acknowledge the practices described in this Privacy Policy. 1. Information We Collect Account Information When you create an account, we process: • Your email address • Your chosen username • Your password through Firebase Authentication • A unique account identifier • Authentication and security information, such as your IP address and device or browser information processed by Firebase Passwords are handled by Firebase Authentication and are not stored in PurePantry’s application database. Pantry, Recipe, and Cooking Information PurePantry stores information you create or enter, including: • Grocery lists and grocery items • Item quantities, units, completion status, categories, and ordering • Recipes, ingredients, instructions, notes, categories, source URLs, and serving information • Cooking records, preferences, and app settings • Shared-list membership and recipe-sharing information • Invitations sent to or received from other users This information is generally private to your account unless you choose to share it with another user or publish it to the Community. Community Information If you use PurePantry Community, we may process: • Your public username and Community profile • Recipes you choose to publish • Recipe titles, ingredients, instructions, categories, creator notes, and cover photos • “Made It” posts, notes, ratings, and photos • Likes, saves, shares, follows, badges, points, and Community activity • Accounts you follow or block • Reports you submit about Community content • Moderation decisions and related records Content you publish to Community is visible to other PurePantry users. Do not publish information or images that you want to remain private. Private recipe notes and private “Made It” notes are not included in public Community posts unless you explicitly choose to publish that information. Photos and Image Processing PurePantry may request access to photos you select from your photo library. The app does not require unrestricted access to your entire photo library. Photos may be used for: • Importing recipe text from screenshots or images • Adding a cover photo to a Community recipe • Adding a photo to a “Made It” cooking record Recipe screenshot text extraction is performed on your device. Images selected only for recipe text extraction are not uploaded by that feature. Community recipe covers and “Made It” photos are uploaded to Firebase Cloud Storage. A private “Made It” photo remains private unless you choose to share the post publicly. Photos voluntarily submitted for public Community use are analyzed using Google Cloud Vision SafeSearch to help detect adult, violent, or otherwise inappropriate imagery. Google states that online Vision API image data is processed in memory, is not used to train Cloud Vision models, and is not made public or shared for unrelated purposes. Google Cloud Vision Data Usage Information: https://cloud.google.com/vision/docs/data-usage PurePantry may store a moderation result associated with an uploaded image so the same image does not need to be analyzed repeatedly. Sharing Information PurePantry lets users share grocery lists and recipe copies by username or exact email address. When you share content: • Recipients may see your username • Members of a shared grocery list may see list contents and member usernames • Recipe recipients receive a separate copy of the shared recipe • A recipient may continue to retain a recipe copy after you delete your original recipe or account You are responsible for ensuring that you have permission to share information you submit about other people. Notifications If you grant notification permission, PurePantry collects an Expo push token associated with your device. We use it to deliver notifications about invitations, shared content, and Community activity. Notification delivery may involve Expo Push Service and Apple Push Notification Service. Notification payloads and device tokens are transmitted to these services to deliver notifications. You can disable notifications through your device settings. PurePantry attempts to remove the current push token from your profile when you sign out. Technical and Security Information Our service providers may automatically process limited technical information, including: • IP address • Device and browser information • Authentication events • App integrity attestations and App Check tokens • Request timestamps and network metadata • Security, abuse-prevention, and diagnostic information PurePantry uses Firebase App Check with Apple App Attest or DeviceCheck to verify that requests come from a legitimate installation of the app. When you visit the PurePantry website, its hosting provider may process standard request information such as your IP address, browser type, requested pages, and timestamps for delivery, reliability, and security. Support Communications If you contact us, we collect the information included in your message, such as your email address, support request, screenshots, and any other information you choose to provide. 2. How We Use Information We use information to: • Create, authenticate, and maintain accounts • Sync data across devices • Store and display grocery lists, recipes, and cooking records • Enable shared grocery lists and recipe sharing • Operate Community profiles, publications, and activity • Deliver notifications • Process selected photos and recipe imports • Screen public text and images for prohibited content • Review reports and enforce Community Guidelines • Prevent fraud, abuse, unauthorized access, and security threats • Respond to support requests • Maintain, troubleshoot, and improve the reliability of PurePantry • Comply with legal obligations and enforce our policies Where applicable, we process information to perform our agreement with you, with your consent, to protect our legitimate interests in operating and securing PurePantry, and to comply with legal obligations. 3. Public Content and Moderation Community content is user-generated content. Information you publish may be viewed, saved, shared, or copied by other PurePantry users. PurePantry uses automated text screening, Google Cloud Vision SafeSearch, user reporting, blocking tools, and manual moderator review to help maintain Community safety. Reports may include the reporting account, reported content, reason, timestamps, and moderation status. Reports are available only to authorized moderators, except for status information shown to the reporting user. We may reject, restrict, hide, or remove content that violates our Community Guidelines, legal requirements, or the rights and safety of others. Automated screening is not guaranteed to identify every inappropriate item and may occasionally classify content incorrectly. 4. When We Share Information We disclose information only as needed to operate PurePantry, when you direct us to share it, or when required for legal or safety reasons. Our service providers include: Google Firebase Used for authentication, database storage, file storage, Cloud Functions, and app- integrity verification. Firebase Privacy and Security Information: https://firebase.google.com/support/privacy Google Cloud Vision Used for SafeSearch screening of images voluntarily submitted for public Community use. Google Cloud Vision Data Usage Information: https://cloud.google.com/vision/docs/data-usage Expo Used for push-token generation and push-notification delivery. Expo Privacy Policy: https://expo.dev/privacy Apple Apple App Attest, DeviceCheck, and Apple Push Notification Service may process information required for app-integrity verification and notification delivery. Apple Privacy Policy: https://www.apple.com/legal/privacy/ Website and Infrastructure Providers Website hosting and infrastructure providers may process limited technical information required to deliver, secure, and maintain our services. Third-Party Recipe Websites When you ask PurePantry to import a recipe from a URL, a request is sent to the website associated with that URL. That website may receive standard connection information such as your IP address and browser or request information. Our service providers process information on our behalf or as necessary to provide their services. We require service providers to handle information only for permitted purposes and with protections consistent with this Privacy Policy and applicable law. We may also disclose information: • To comply with a valid legal request or applicable law • To protect users, PurePantry, or the public from harm, fraud, or abuse • In connection with a merger, acquisition, financing, or transfer of the service, subject to appropriate notice and protections 5. No Sale, Advertising, or Cross-App Tracking PurePantry does not sell personal information. PurePantry does not share personal information for cross-context behavioral advertising, use advertising networks, or track users across unrelated apps and websites for advertising purposes. PurePantry does not currently use third-party analytics or advertising SDKs. 6. Data Storage and Retention Private account content is retained while your account remains active or until you delete the content or your account. Community content is retained until you remove it, unpublish it, delete your account, or it is removed through moderation. Moderation and report records may be retained as necessary to operate safety features, resolve reports, prevent abuse, and comply with legal obligations. When you delete your account, PurePantry initiates deletion of: • Your Firebase Authentication account • Private grocery, recipe, cooking, and settings data • Your username and private email lookup • Your Community publications and profile • Community photos stored under your account • Likes, follows, reports, blocks, notifications, challenge progress, and other account- linked Community records • Shared-list memberships and pending invitations Copies of recipes that you previously shared or that another user saved to their own account may remain in that user’s account. Information may also remain temporarily in encrypted backups, security logs, or service- provider systems until their ordinary deletion cycles are complete. Firebase states that authentication information deleted at a customer’s request may take up to 180 days to be removed from live and backup systems. Firebase may retain authentication IP logs for several weeks and temporarily process IP addresses for Cloud Functions. Firebase Privacy and Security Information: https://firebase.google.com/support/privacy Google Cloud Vision processes immediate SafeSearch requests in memory and may temporarily log request metadata, such as request time and size, for service operation and abuse prevention. Expo states that push-notification contents are retained only as needed for delivery and that push receipts are removed after a limited period. Expo Push Notification Information: https://docs.expo.dev/push-notifications/faq/ 7. Account and Content Deletion You can permanently delete your account from within PurePantry by going to: Settings → Delete Account Account deletion requires password confirmation and initiates deletion of the account and associated cloud data described above. The separate Clear All Data option clears app data stored locally on that device. It does not delete your account or guarantee deletion of data stored in the cloud. Use Delete Account when you want permanent account and cloud-data deletion. You may also request assistance by contacting: support@purepantry.app https://www.purepantry.app/support We may need to verify your identity before completing a privacy or deletion request. 8. Your Choices and Rights Depending on where you live, you may have the right to: • Access personal information associated with your account • Correct inaccurate information • Delete your information • Obtain a portable copy of certain information • Object to or restrict certain processing • Withdraw consent where processing is based on consent • Appeal or complain to an applicable privacy authority You can exercise many choices directly in the app by: • Editing your username • Editing or deleting your content • Unpublishing Community recipes • Deleting “Made It” posts • Blocking other users • Changing device permissions • Signing out • Permanently deleting your account You may withdraw photo or notification permission through your device settings. Previously uploaded content remains stored until you delete the content or your account. To submit a privacy request, email support@purepantry.app. We will not discriminate against you for exercising applicable privacy rights. 9. Security PurePantry uses technical and organizational safeguards designed to protect information, including: • Authenticated access controls • Firebase Security Rules • Firebase App Check • Encrypted network connections • Restricted moderator access • Separation between private and public data No internet service or storage system can guarantee absolute security. You are responsible for using a strong, unique password and protecting access to your device and account. other countries where they operate. These locations may have data-protection laws that differ from those in your country. Where required, we rely on appropriate contractual or legal safeguards for international 11. Children’s Privacy PurePantry is not directed to children under 13 or the minimum age required by applicable local law. We do not knowingly collect personal information from children who are not legally permitted to use the service. If you believe a child has provided personal information without appropriate authorization, contact support@purepantry.app so we can investigate and delete the information where required. 12. Changes to This Privacy Policy We may update this Privacy Policy as PurePantry changes or as required by law. When we make material changes, we will update the effective date and provide additional notice when appropriate. Continued use of PurePantry after an updated policy takes effect means the updated policy applies to future use of the service. 13. Contact Us For privacy questions, account-deletion assistance, or requests concerning your information, contact: PurePantry Operated by Addison Wittkamp Email: support@purepantry.app Support Website: https://www.purepantry.app/support