Pantry PilotPrivacy policy
Effective November 2, 2026. Draft: this policy will be reviewed by a lawyer before Pantry Pilot opens to the public.
In short: Pantry Pilot is in private testing with one household. We collect only what the app needs to plan meals and keep your shopping list, we never sell your household's data, and you can delete everything at any time.
What we collect
- Household setup: your store, how many people eat, food rules and allergies, and how much time and money you want to spend.
- Your shopping list, what you mark as bought or used up, and your meal ratings.
- Shelf tags you scan and receipts you choose to send (a photo or a screenshot after a trip).
What we never collect
- Store passwords, payment or card numbers.
- Your location beyond the store you pick.
- Pharmacy lines on a receipt.
- Background camera or microphone recordings. The camera is on only while you can see it's on.
Connecting your store account (optional)
If you connect your grocery store account so the app can add your list to your online cart, you sign in on the store's own website. We never see your password. We keep only a sign-in key limited to adding items to your cart. You can disconnect with one tap, and the key is deleted when you do.
Prices we get from a store's own systems are shown to you as the store gives them. We do not keep them, and we do not show them side by side with other prices.
Photos
Camera frames are read on your phone and then dropped. The only pictures we may keep are small images of shelf tags alone (no packages, no people), used to check that tag reading stays accurate. They are never sold.
What we share
- We never sell or share a single household's data.
- Allergies and food rules never leave your household.
- What you scan or mark at home (your stash and leftovers) is never sold or shared, in any form.
- Any shared price information is grouped across many households, with nothing that points back to you.
Deleting your data
Use the delete button in the app, or email us. We delete your household's data the night after you ask, and it is gone from our backups within about 30 days. Shelf prices you helped record stay in the price catalog with no link to you.
Children
The app is for adults running a household. Children can be listed in the household without their own account.