Privacy Policy
Effective Date: February 18, 2026
1. Introduction
Pantry is operated by SOSA PROJECTS, LLC ("SOSA PROJECTS," "Company," "we," "our," or "us"). Pantry is a mobile application (the "App") that helps users manage and track their pantry inventory, meal planning, and grocery lists.
This Privacy Policy describes how we collect, use, store, and protect information when you use the App.
By accessing or using Pantry, you acknowledge that you have read and agree to this Privacy Policy. If you do not agree, you must not use the App.
2. Nature of the Service
Pantry is a utility and lifestyle application. Pantry:
- Is not a medical or dietary advisory service
- Does not provide nutritional guidance
- Does not verify product safety or recalls
- Is not intended for allergy management
All inventory and list data is:
- Voluntarily entered
- Self-reported
- Used solely for App functionality
Users assume all responsibility for entries they create.
3. Information We Collect
A. Pantry & Inventory Data
When a user manages their pantry, we may collect:
- Item names and categories
- Quantities and expiration dates
- Grocery lists
- Notes and labels
- Device identifier
- Account identifier
This data is necessary to provide inventory tracking and list functionality.
B. Social & Household Data
If you participate in shared household features:
- Usernames
- Household connections
- Shared lists and inventory
are processed to enable shared functionality.
No shared access occurs unless explicitly invited and accepted.
C. Automatically Collected Technical Data
We may collect:
- Device type
- OS version
- App version
- IP address
- Crash logs
- Anonymous analytics
4. How We Use Information
We use collected information to:
- Operate and maintain the App
- Display pantry inventory and lists
- Enable shared household features
- Send notifications (e.g. expiration reminders)
- Improve functionality
- Detect fraud or abuse
- Enforce our Terms of Service
We do not:
- Sell personal data
- Rent personal data
- Share data with advertisers
- Use inventory data for targeted marketing
5. Data Sharing & Third-Party Processors
We do not sell personal information. We may share data only:
- With cloud hosting or infrastructure providers strictly for App operation
- If required by law, subpoena, or court order
- To protect legal rights or investigate misuse
- In connection with a merger, acquisition, or corporate restructuring
Service providers are contractually obligated to maintain confidentiality.
Named Third-Party Processors
We use the following third-party services to operate Pantry:
- Firebase / Google Cloud (US) — Authentication (Firebase Auth), push notifications (Firebase Cloud Messaging), and file storage (Firebase Storage)
- PostHog (EU) — Product analytics and usage insights
6. Legal Basis for Processing (GDPR)
If you are in the European Economic Area (EEA), we process your data under the following legal bases:
- Contract performance (Art. 6(1)(b) GDPR) — Account creation, inventory management, shared features, and core App functionality
- Consent (Art. 6(1)(a) GDPR) — Push notifications and optional data collection
- Legitimate interest (Art. 6(1)(f) GDPR) — Fraud prevention and service improvement
7. Data Retention
We retain account and inventory data while your account remains active.
Upon account deletion:
- Personal identifiers (display name, username) are removed immediately.
- Inventory and list data is deleted.
- Your Firebase authentication account is permanently deleted.
We may retain information where legally required.
8. Data Security
We implement commercially reasonable security safeguards, including:
- Encrypted data transmission (TLS/HTTPS)
- Secure server infrastructure
- Access controls
- Monitoring practices
However, no system can guarantee absolute security. Use of the App is at your own risk.
9. Children
Pantry is intended for users aged 18 and older only. We do not knowingly collect information from individuals under 18. If we learn that we have collected personal data from a user under 18, we will take steps to delete that information promptly.
10. California Privacy Rights
If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA), including:
- Right to know
- Right to deletion
- Right to non-discrimination
Pantry does not sell personal information.
11. Your Rights (GDPR / EEA Users)
If you are in the EEA, you have the following rights under the GDPR:
- Right of Access (Art. 15) — Request a copy of your personal data via the "Download My Data" feature in Settings
- Right to Erasure (Art. 17) — Delete your account and all associated personal data via the "Delete Account" feature in Settings
- Right to Data Portability (Art. 20) — Export your data in a structured, machine-readable JSON format
- Right to Rectification (Art. 16) — Update your profile information at any time
- Right to Withdraw Consent — Revoke permissions via device settings at any time
To exercise any of these rights, use the in-app features or contact us at [email protected].
12. International Users
If you access Pantry outside the United States, your information may be transferred and processed in jurisdictions where data protection laws differ. By using the App, you consent to such transfer.
13. Limitation of Liability
To the maximum extent permitted by law, Pantry and its operators shall not be liable for:
- Indirect, incidental, consequential, or punitive damages
- Claims arising from user-generated content
- Third-party misuse of information
Your sole remedy for dissatisfaction is discontinuing use of the App.
14. Changes to This Policy
We may modify this Privacy Policy at any time. Continued use of Pantry after updates constitutes acceptance.
15. Contact
SOSA PROJECTS, LLC
Email: [email protected]