MyPantri ("we", "us") is made by Foundry Labs. This policy explains, in plain words, what MyPantri collects, why, who helps us run it, and the choices you have. We follow the Philippine Data Privacy Act of 2012. Questions? Write to support@foundry-labs.app.
The short version
- Your pantry, shopping lists and alerts stay on your phone. We keep a copy on our servers only if you turn on Backup & sync, and we delete it when you turn it off.
- Price reports, promos and comments you post are public — that's how the community saves. So are the points they earn you, your level and your place on the leaderboards, which you can leave, and the photos of dishes you cooked that you choose to share, once our team checks them.
- The AI features send only what they need, only after you agree in the app, to Anthropic. We don't keep that content.
- Near you uses your approximate location only when you ask, and we never store it.
- We count which screens and features are used, to improve the app — tied to a random id, never your name, email or location. You can turn it off in the app.
- We never sell your data.
- You can download your data in the app, and delete your account in the app or on this website, anytime.
What we collect
- Your account: your email address and display name. Your password is handled by our sign-in provider and we never see it.
- A check that you're not a bot: when you sign up, sign in or reset your password, in the app or on this website, Cloudflare Turnstile checks the request in the background. It looks at your device and connection, such as your IP address, and tells us only whether the check passed. We don't keep it.
- What you share with the community: price reports (product, store, price, date), promos (store, the deal, its products and last day), comments, votes, confirmations, likes on dish photos, and the flags and blocks you make. Your display name, level and character (its colour and frame) appear with them.
- Dish photos you choose to share: a photo of a dish from our recipe library that you cooked, with the rating you gave it. Until our team checks it, only you can see it; then it is public, shown on that recipe with your display name, character and the date, and others can like it, flag it or block you. The app removes the photo's location and camera details before it leaves your phone. You can delete it at any time, and it is deleted with your account.
- Your contribution points: for each price report, confirmation, comment or promo, a record of what it was, when, and the points it earned. They make your level and the weekly, monthly and all-time leaderboards, which show your display name, level, points and, if your profile is public, your character. You can hide from the leaderboards in Profile → Privacy & Security; your points still count toward your level.
- A trust score: worked out from how often others confirm your prices, how long you have been a member, and whether our team upheld reports against your posts. It decides whether your confirmations count toward verifying a price and how high your reports rank in the feed. Other users never see it; our moderators can.
- Moderation: when our team acts on your content or account (hides or restores a post, approves or hides a dish photo, or bans an account), a record of the action, with a short copy of what it was about.
- Receipt photos you choose to upload: only if you turn it on, a receipt photo as proof of a price (private — only you can open it; deleted after 180 days). There are no profile pictures: everyone appears as their MyPantri character.
- Backup & sync, only if you turn it on: a copy of your pantry items (with their notes), shopping lists, price alerts, points, badges, rewards and streak, your meal planner preferences (who eats, your kitchen, diets, allergies and dislikes), the dishes you mark as cooked with your ratings, your cookbooks, your own recipes (My Recipes) and meal plans, so you can restore them on a new phone and keep your phones in step. Only you can see it. A photo you add to one of your own recipes is never part of it.
- AI usage: how many times you used each AI feature this month, and its cost to us — not what you asked or what the AI answered.
- Notifications: when you allow notifications, your phone's push token (an id Firebase Cloud Messaging gives the app on this phone) and whether it's Android or iPhone; your notification settings and quiet hours, with your phone's time zone; and your notifications inbox — notices about activity on your own posts (comments, confirmations, badges) and in comment threads you joined (replies), and, only with Backup & sync on, price drops and promos on items you watch. Reminders about expiring items, your streak and your week are made on your phone and never sent to us.
- Usage analytics, unless you turn it off: which screens you open and which features you use — for example that you scanned a receipt and how many items it had, confirmed a price, set an alert or completed a shopping list — with your app version and device details (phone model, operating system, screen size, language, time zone and mobile carrier). They are tied to your account's id, a random code, and never include your name, email, location, notes or anything you type. Our analytics provider doesn't keep your IP address or work out your location from it. There are no session recordings and no advertising ids, and nothing is used to track you across other apps or websites.
- Pro, if you buy it: from Paddle we receive your Paddle customer and subscription ids, the email used at checkout, your subscription status and period dates, and refunds. We never receive your card details.
What stays on your phone
Your pantry items, shopping lists, price alerts, streaks, badges, your balance of points to spend on rewards, your meal planner preferences (allergies and diets included), the dishes you cooked and your cookbooks, your own recipes (My Recipes) with any photos you add to them, and your meal plans are stored on your device. Unless you turn on Backup & sync (Profile → Backup & sync), they are not uploaded or backed up to our servers, and deleting the app deletes them. Backup is off until you turn it on. Your notification settings, AI consent, receipt photos and the photos of your own recipes are never part of the backup.
Matching receipt lines to products
When you scan a receipt while online, the item names on it are sent to our server, which suggests the product in our catalog each one means (you choose whether to use it). The names are compared and not kept, and they don't go to any AI company.
When you correct a match (you pick a product with Change or Find in catalog), we keep that line's text and the product you picked, not linked to any account, to suggest better matches. Each one is checked by our team before it changes anyone's suggestions. These corrections are deleted 180 days after the last time anyone picked them, never go to an AI company, and are not sent while Usage analytics is off (Profile → Privacy & Security).
Your location
MyPantri asks for your location only when you turn on Near you on the price feed, open Stores near you, or choose "Use my location" for a price alert, and only while you use the app. It uses your approximate location, rounded to about 110 metres before anything else happens. It is sent with that one request, so we can rank prices from stores near you, and is not stored or logged. On your phone, MyPantri remembers only whether Near you is on and the city you picked, never your position. A nearby or city price alert keeps the city you chose (and your backup holds it if Backup & sync is on), never your position. When you have already allowed location, the price form also uses it to put the nearest stores first; that stays on your phone and isn't sent. You can always pick a city instead of sharing your location, and turn location off in your phone's settings.
AI features and Anthropic
MyPantri's AI features (AI receipt reading, recipe ideas, smart restock and the Pantri AI chat) are powered by Claude, made by Anthropic. Before anything is sent, the app asks for your consent once per account. When you use a feature, our servers send Anthropic only what that feature needs, to answer that one request:
- Recipes, restock and chat: your pantry — item name, quantity, unit, category, storage location, days until expiry, and whether it is running low.
- Restock: also the minimum stock, days since purchase, the product's catalog id, and the items on your open shopping list.
- Receipt scan: the recognised receipt text, with phone numbers, email addresses and an order's delivery name and address removed. When a photo you take with the camera is hard to read, a small copy of it (no location data) — never a photo or screenshot you pick from your gallery.
- Pantri AI chat: your last 10 messages in the chat.
- Never sent: your name, email, location and notes.
MyPantri does not store this content — only a count of your requests and their cost. You can withdraw or give consent anytime in the app: Profile → Privacy & Security.
Reporting an AI reply
If an AI reply or recipe is offensive, harmful or wrong, you can report it in the app. A report sends us the reply text, the reason you chose and your optional note, so we can review it. We delete reports after 180 days, or sooner with your account.
Payments
MyPantri Pro is sold by Paddle, our Merchant of Record. Paddle processes your payment, handles taxes and receipts, and keeps your payment details under its own privacy notice (paddle.com/legal/privacy). We keep only what is listed above to give you Pro.
Tester sign-up
Before launch, you can sign up on this website to test MyPantri. The form is separate from the app and needs no account. It keeps:
- Your first name, to greet you in the welcome email.
- Your email: the email of your Google account on Android, or your Apple ID on iPhone. Google Play and TestFlight invite testers by it.
- Your phone type (Android or iPhone), and when you agreed.
We use them only to invite you to the test. MyPantri's admins see the list, Postmark sends the welcome email, and when we add you, Google Play or Apple (TestFlight) receive your email to send their own invitation. The bot check (Cloudflare Turnstile) runs on the form, and to stop repeated sign-ups we keep a scrambled code made from your IP address, never the address itself, for one day. Tester sign-ups are deleted 180 days after you sign up, or when testing closes, whichever comes first. To withdraw sooner, write to support@foundry-labs.app.
This website
You can create a MyPantri account and sign in on this website. It is the same account as the app: the same email, password, name and character. When you sign in here, this browser keeps your session in its local storage until you sign out, so you stay signed in on this website. Signing out here signs out this browser only; the app on your phone, and any other browser, stay signed in. A meal plan you make on this website stays in this browser, in its local storage, with the choices you made for it (allergies and diets included) and the grocery items you tick off. It isn't sent to our servers: the planner runs in your browser, on the recipes and reference prices the page downloads. It goes when you sign out on this browser or delete your account here, and clearing this site's data in your browser deletes it too.
The landing page shows our latest Facebook posts from a copy kept on our own server, so your browser contacts Facebook only if you click one of those links or our Facebook link. The website sends no usage analytics. Its pages load their fonts from Google Fonts, which receives your IP address and browser details to send them.
Who helps us run MyPantri
- Supabase — our database, sign-in and receipt photo storage, and your backup if you turn it on (Singapore region).
- Anthropic — the AI features, only after your consent.
- Paddle — Pro payments.
- Postmark — the 6-digit codes we email you, and the welcome email when you sign up to test.
- Cloudflare — the bot check on sign-up, sign-in and password reset (Turnstile).
- Google (Firebase Cloud Messaging) — delivers push notifications to your phone: it receives your push token and the notification's title and text.
- PostHog — usage analytics: it receives the usage events described above and stores them in the United States.
- Mapbox — the map on Stores near you: it receives the map area on your screen and your IP address, not your account. It may also collect anonymous map usage data, which you can turn off from the map's information (i) button.
They process data for us only to provide their service.
We test new versions on a copy of public content only (prices, promos, comments, dish photos, public names and characters), never emails, private data or sign-in details.
Your choices and rights
- Download your data: Profile → Privacy & Security → Download My Data.
- Backup & sync: turn it on or off anytime in Profile → Backup & sync. Turning it off deletes the copy on our servers at once; the data on your phone stays.
- Delete your account: in the app, on this website (Account), or by email if you no longer have the app. See Deleting your account below.
- AI consent: withdraw or give it anytime in Privacy & Security.
- Usage analytics: turn it off anytime in Profile → Privacy & Security → Usage analytics. Sending stops at once, and this phone's analytics id is forgotten.
- Notifications: choose which ones push, and set quiet hours, in Profile → Notifications, or turn them off in your phone's settings. Signing out removes this phone's push token.
- Under the Data Privacy Act you may also ask to access, correct or erase your data, or object to its processing: write to support@foundry-labs.app.
Deleting your account
You can delete your MyPantri account and its data at any time, in any of three ways:
- In the app: Profile → Privacy & Security → Delete Account, then enter your password. It happens at once.
- On this website: sign in, open Account → Delete account, then enter your password. It happens at once.
- By email: write to support@foundry-labs.app from the email address of your account, with the subject "Delete my account". We may ask you to confirm it is your account, then delete it within 30 days and tell you when it's done.
Deleting your account cancels any Pro subscription first, then deletes your account, profile, receipt photos, points record, trust score, the dish photos you shared (and their likes), AI usage records, billing records, push tokens, notification settings and inbox, your usage analytics and your backup. Deleting in the app also deletes the data on that phone; deleting on this website also deletes what the website kept in that browser, such as a meal plan. Anything saved only on a phone stays on that phone until you delete the account there or uninstall the app. Price reports and promos you posted stay in the community, without your name. Records of moderation actions are kept for 2 years. Matching corrections are not linked to any account, so they go after their 180 days instead.
How long we keep data
Account data, including your points record and trust score, is kept while your account exists. Your backup is kept while Backup & sync is on, and deleted as soon as you turn it off or delete your account. Receipt photos are deleted after 180 days. A dish photo you share stays until you delete it or your account; one our team hid is deleted 180 days after it was hidden. AI usage records (counts and costs) are deleted after 13 months, and reported AI replies after 180 days. Payment notifications keep only ids, statuses and dates, and are deleted after 90 days. Notices in your notifications inbox are deleted after 90 days, and a push token no phone has refreshed for 270 days is deleted. Usage analytics are kept for up to 1 year. Tester sign-ups are deleted 180 days after you sign up, or when testing closes, whichever comes first. Matching corrections are deleted 180 days after the last time anyone picked them. Records of moderation actions (our team hiding or restoring a post, or banning an account) are kept for 2 years, also after an account is deleted. When you delete your account, its data is deleted as described above.
Children
MyPantri is meant for adults managing a household. It is not directed at children under 13.
Changes
We'll update this page when things change and show the new date above. Big changes will also be announced in the app.
See also our Terms of Service and Refund Policy.