Privacy Policy

1. Who we are

Pantryly is operated by Opsylux, an AI-driven product studio (an "idea-to-app" incubator) of which Pantryly is one app. Opsylux operates through separate legal entities in India and the United States; the entity responsible for your data (the data controller) is the Opsylux entity serving your region: the Opsylux LLC registered in Washington, USA for U.S. users, and the Opsylux entity in Telangana, India for all other users. The app is published under the identifier in.entrybook.pantryly. For any privacy question or request, contact us at privacy@pantryly.app.

2. Information we collect

We collect the following categories of information, most of which you provide directly:

• Account & authentication data. When you create an account we process your email address and/or phone number (for one-time-passcode sign-in), and, if you use a social login, the name and email shared by Apple, Google, or Facebook. You may also use the app as an anonymous guest, in which case no account identifiers are collected until you choose to register.
• Profile & preferences. Optional details you add to personalize suggestions, including username, first and last name, avatar, country, postal code, phone, household size, date of birth or age range, sex, dietary preferences, allergies, wellness goals, preferred cuisines, and meal types.
• Kitchen content. Pantry items, grocery lists, meal plans, saved and favorited recipes, prep sessions, and recipe feedback and ratings you create.
• Receipt images (OCR). If you scan a grocery receipt, the captured image is processed to extract item names and quantities. Images are processed to derive text and are not used to build an advertising profile.
• Voice input. If you use voice commands, speech is converted to text on your device. Only the resulting text transcript may be sent to our servers to interpret your command (for example, "add milk to my list").
• Subscription & billing data. If you purchase a subscription, our payment processors handle your payment. We store a subscription tier and status and a billing customer/subscription identifier. We do not store your full card details.
• Usage & suggestion signals. To improve recommendations and avoid repeating suggestions, we record which recipes were shown to you, and whether you saved, dismissed, cooked, or added them to a plan.
• Device & technical data. Basic technical information needed to operate the app, such as app version and platform, and data required to deliver over-the-air updates. Notifications (expiry alerts and prep reminders) are scheduled locally on your device; we do not use remote push tokens for marketing.

3. Device permissions

Pantryly asks for the following device permissions, each only when you use the related feature. You can revoke any of them at any time in your device settings:

• Camera — to scan grocery receipts.
• Photos — to select a receipt image from your library.
• Microphone & speech recognition — to capture voice commands while you hold the mic button; transcription happens on-device.
• Notifications — to remind you about expiring items and upcoming cooking sessions.

4. How we use your information

We use your information to:

• provide, maintain, and sync your pantry, lists, meal plans, and recipes across devices;
• generate personalized recipe suggestions based on your pantry and preferences;
• extract items from scanned receipts and interpret your voice commands;
• send you local reminders you have enabled;
• process subscriptions and provide customer support;
• improve the Service, including tuning suggestion quality and preventing repeats;
• maintain security, prevent abuse, and comply with legal obligations.

5. Legal bases (EEA/UK users)

Where the GDPR or UK GDPR applies, we rely on: performance of a contract (to deliver the Service you request), consent (for optional profile data, voice, and device permissions, which you can withdraw at any time), legitimate interests (to improve and secure the Service), and legal obligation (where we must retain records).

6. How we share information

We do not sell your personal information. We share it only with service providers who process it on our behalf under contract:

• Supabase — authentication, database, and file storage that host your account and synced kitchen data.
• AI/LLM providers (OpenAI, Google Gemini, or a self-hosted model). To generate recipes we may send your pantry ingredients and dietary preferences; for AI-assisted receipt reading, receipt images may be processed by a vision model. We do not deliberately send your name, email, or contact details in these prompts, but content you type (such as item names) is included.
• Payment processors (e.g., RevenueCat and the app-store billing systems) — to process subscriptions.
• Expo / EAS — to build the app and deliver over-the-air updates.

We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and property of Pantryly and its users. If the business is involved in a merger or acquisition, data may be transferred as part of that transaction.

7. AI-generated content

Recipe suggestions may be produced by automated large-language-model systems and can be inaccurate or incomplete. Always check ingredients against your own dietary needs and allergies before cooking. See our Terms & Conditions for the associated disclaimers.

8. International transfers

Our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) to protect data transferred across borders.

9. Data retention

We keep your information for as long as your account is active or as needed to provide the Service. Data stored only on your device remains until you delete it or uninstall the app. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain it for legal, security, or accounting reasons.

10. Your rights and choices

Depending on your location, you may have the right to:

• access, correct, or update your personal data (most is editable in the app's settings);
• delete your account and associated data;
• object to or restrict certain processing, and withdraw consent;
• request a portable copy of your data;
• revoke device permissions (camera, microphone, photos, notifications) at any time.

You can clear locally stored data from within the app, and you can delete your account or request data removal by contacting privacy@pantryly.app. You also have the right to lodge a complaint with your local data protection authority.

11. Security

We use industry-standard measures to protect your data, including encrypted transport (HTTPS/TLS), encrypted on-device storage of session tokens, and access controls (row-level security) on our database. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

12. Children's privacy

Pantryly is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal data from children. If you believe a child has provided us information, contact us and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you in the app. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

14. Contact us

If you have questions or requests regarding this Privacy Policy or your data, contact us at privacy@pantryly.app.