PurePantry is operated by Addison Wittkamp (“PurePantry,” “we,” “us,” or “our”). This Privacy Policy explains how PurePantry collects, uses, stores, and shares information when you use the PurePantry mobile application, website, and related services.
By using PurePantry, you acknowledge the practices described in this Privacy Policy.
1. Information We Collect
Account Information
When you create an account, we process:
- Your email address
- Your chosen username
- Your password through Firebase Authentication
- A unique account identifier
- Authentication and security information, such as your IP address and device or browser information processed by Firebase
Passwords are handled by Firebase Authentication and are not stored in PurePantry’s application database.
Pantry, Recipe, and Cooking Information
PurePantry stores information you create or enter, including:
- Grocery lists and grocery items
- Item quantities, units, completion status, categories, and ordering
- Recipes, ingredients, instructions, notes, categories, source URLs, and serving information
- Cooking records, preferences, and app settings
- Shared-list membership and recipe-sharing information
- Invitations sent to or received from other users
This information is generally private to your account unless you choose to share it with another user or publish it to the Community.
Community Information
If you use PurePantry Community, we may process:
- Your public username and Community profile
- Recipes you choose to publish
- Recipe titles, ingredients, instructions, categories, creator notes, and cover photos
- “Made It” posts, notes, ratings, and photos
- Likes, saves, shares, follows, badges, points, and Community activity
- Accounts you follow or block
- Reports you submit about Community content
- Moderation decisions and related records
Content you publish to Community is visible to other PurePantry users. Do not publish information or images that you want to remain private.
Private recipe notes and private “Made It” notes are not included in public Community posts unless you explicitly choose to publish that information.
Photos and Image Processing
PurePantry may request access to photos you select from your photo library. The app does not require unrestricted access to your entire photo library.
Photos may be used for:
- Importing recipe text from screenshots or images
- Adding a cover photo to a Community recipe
- Adding a photo to a “Made It” cooking record
When you use recipe importing, the photos or screenshots you select are sent to PurePantry’s backend and processed by Google’s Gemini models through Vertex AI to identify recipe ingredients and instructions. This processing takes place in the cloud, rather than only on your device. Recipe text, captions, and recipe content retrieved from links may also be sent for AI-assisted extraction when needed.
Images submitted only for recipe importing are not saved as image files in PurePantry’s Cloud Storage by that feature. Extracted recipe results are cached separately as described in Data Storage and Retention. You can review and edit imported results before saving.
Community recipe covers and “Made It” photos are uploaded to Firebase Cloud Storage. A private “Made It” photo remains private unless you choose to share the post publicly.
Photos voluntarily submitted for public Community use are analyzed using Google Cloud Vision SafeSearch to help detect adult, violent, or otherwise inappropriate imagery.
Google states that online Vision API image data is processed in memory, is not used to train Cloud Vision models, and is not made public or shared for unrelated purposes.
Google Cloud Vision Data Usage Information: https://cloud.google.com/vision/docs/data-usage
PurePantry may store a moderation result associated with an uploaded image so the same image does not need to be analyzed repeatedly.
Sharing Information
PurePantry lets users share grocery lists and recipe copies by username or exact email address.
When you share content:
- Recipients may see your username
- Members of a shared grocery list may see list contents and member usernames
- Recipe recipients receive a separate copy of the shared recipe
- A recipient may continue to retain a recipe copy after you delete your original recipe or account
You are responsible for ensuring that you have permission to share information you submit about other people.
Notifications
If you grant notification permission, PurePantry collects an Expo push token associated with your device. We use it to deliver notifications about invitations, shared content, and Community activity.
Notification delivery may involve Expo Push Service and Apple Push Notification Service. Notification payloads and device tokens are transmitted to these services to deliver notifications.
You can disable notifications through your device settings. PurePantry attempts to remove the current push token from your profile when you sign out.
Technical and Security Information
Our service providers may automatically process limited technical information, including:
- IP address
- Device and browser information
- Authentication events
- App integrity attestations and App Check tokens
- Request timestamps and network metadata
- Security, abuse-prevention, and diagnostic information
PurePantry uses Firebase App Check with Apple App Attest or DeviceCheck to verify that requests come from a legitimate installation of the app.
When you visit the PurePantry website, its hosting provider may process standard request information such as your IP address, browser type, requested pages, and timestamps for delivery, reliability, and security.
Support Communications
If you contact us, we collect the information included in your message, such as your email address, support request, screenshots, and any other information you choose to provide.
2. How We Use Information
We use information to:
- Create, authenticate, and maintain accounts
- Sync data across devices
- Store and display grocery lists, recipes, and cooking records
- Enable shared grocery lists and recipe sharing
- Operate Community profiles, publications, and activity
- Deliver notifications
- Process selected photos and recipe imports
- Screen public text and images for prohibited content
- Review reports and enforce Community Guidelines
- Prevent fraud, abuse, unauthorized access, and security threats
- Respond to support requests
- Maintain, troubleshoot, and improve the reliability of PurePantry
- Comply with legal obligations and enforce our policies
Where applicable, we process information to perform our agreement with you, with your consent, to protect our legitimate interests in operating and securing PurePantry, and to comply with legal obligations.
3. Public Content and Moderation
Community content is user-generated content. Information you publish may be viewed, saved, shared, or copied by other PurePantry users.
PurePantry uses automated text screening, Google Cloud Vision SafeSearch, user reporting, blocking tools, and manual moderator review to help maintain Community safety.
Reports may include the reporting account, reported content, reason, timestamps, and moderation status. Reports are available only to authorized moderators, except for status information shown to the reporting user.
We may reject, restrict, hide, or remove content that violates our Community Guidelines, legal requirements, or the rights and safety of others.
Automated screening is not guaranteed to identify every inappropriate item and may occasionally classify content incorrectly.
4. When We Share Information
We disclose information only as needed to operate PurePantry, when you direct us to share it, or when required for legal or safety reasons.
Our service providers include:
Google Firebase
Used for authentication, database storage, file storage, Cloud Functions, and app-integrity verification.
Firebase Privacy and Security Information: https://firebase.google.com/support/privacy
Google Cloud Vertex AI (Gemini)
Used for AI-assisted recipe extraction from selected images, recipe text, captions, and recipe content from supported URLs.
Google states that it will not use customer data to train or fine-tune its managed AI models without prior permission or instruction. Processing may involve caching or retention for service delivery, security, and abuse monitoring under Google’s applicable terms.
Google Cloud Generative AI Data Governance: https://cloud.google.com/vertex-ai/generative-ai/docs/data-governance
Google Cloud Vision
Used for SafeSearch screening of images voluntarily submitted for public Community use.
Google Cloud Vision Data Usage Information: https://cloud.google.com/vision/docs/data-usage
Expo
Used for push-token generation and push-notification delivery.
Expo Privacy Policy: https://expo.dev/privacy
Apple
Apple App Attest, DeviceCheck, and Apple Push Notification Service may process information required for app-integrity verification and notification delivery.
Apple Privacy Policy: https://www.apple.com/legal/privacy/
Website and Infrastructure Providers
Website hosting and infrastructure providers may process limited technical information required to deliver, secure, and maintain our services.
Third-Party Recipe Websites
When you ask PurePantry to import a recipe from a URL, a request is sent to the website associated with that URL. That website may receive standard connection information such as your IP address and browser or request information.
Our service providers process information on our behalf or as necessary to provide their services. We require service providers to handle information only for permitted purposes and with protections consistent with this Privacy Policy and applicable law.
We may also disclose information:
- To comply with a valid legal request or applicable law
- To protect users, PurePantry, or the public from harm, fraud, or abuse
- In connection with a merger, acquisition, financing, or transfer of the service, subject to appropriate notice and protections
5. No Sale, Advertising, or Cross-App Tracking
PurePantry does not sell personal information.
PurePantry does not share personal information for cross-context behavioral advertising, use advertising networks, or track users across unrelated apps and websites for advertising purposes.
PurePantry does not currently use third-party analytics or advertising SDKs.
6. Data Storage and Retention
To avoid repeatedly processing the same import, PurePantry caches extracted recipe results and a content-derived identifier associated with your account. Cached results are eligible for reuse for seven days. The cache’s seven-day expiry ends reuse; stored records may remain until backend cleanup removes them. These cached results are separate from recipes you choose to save.
The import service also records operational metadata, such as source type, processing status, token usage, and estimated processing costs. Import diagnostics do not intentionally include the selected images, captions, recipe URLs, or authentication tokens. Google may separately retain or cache data as described in its data-governance documentation.
Private account content is retained while your account remains active or until you delete the content or your account.
Community content is retained until you remove it, unpublish it, delete your account, or it is removed through moderation.
Moderation and report records may be retained as necessary to operate safety features, resolve reports, prevent abuse, and comply with legal obligations.
When you delete your account, PurePantry initiates deletion of:
- Your Firebase Authentication account
- Private grocery, recipe, cooking, and settings data
- Your username and private email lookup
- Your Community publications and profile
- Community photos stored under your account
- Likes, follows, reports, blocks, notifications, challenge progress, and other account-linked Community records
- Shared-list memberships and pending invitations
Copies of recipes that you previously shared or that another user saved to their own account may remain in that user’s account.
Information may also remain temporarily in encrypted backups, security logs, or service-provider systems until their ordinary deletion cycles are complete.
Firebase states that authentication information deleted at a customer’s request may take up to 180 days to be removed from live and backup systems. Firebase may retain authentication IP logs for several weeks and temporarily process IP addresses for Cloud Functions.
Firebase Privacy and Security Information: https://firebase.google.com/support/privacy
Google Cloud Vision processes immediate SafeSearch requests in memory and may temporarily log request metadata, such as request time and size, for service operation and abuse prevention.
Expo states that push-notification contents are retained only as needed for delivery and that push receipts are removed after a limited period.
Expo Push Notification Information: https://docs.expo.dev/push-notifications/faq/
7. Account and Content Deletion
You can permanently delete your account from within PurePantry by going to:
Settings → Delete Account
Account deletion requires password confirmation and initiates deletion of the account and associated cloud data described above.
The separate Clear All Data option clears app data stored locally on that device. It does not delete your account or guarantee deletion of data stored in the cloud.
Use Delete Account when you want permanent account and cloud-data deletion.
You may also request assistance by contacting:
https://www.purepantry.app/support
We may need to verify your identity before completing a privacy or deletion request.
8. Your Choices and Rights
Depending on where you live, you may have the right to:
- Access personal information associated with your account
- Correct inaccurate information
- Delete your information
- Obtain a portable copy of certain information
- Object to or restrict certain processing
- Withdraw consent where processing is based on consent
- Appeal or complain to an applicable privacy authority
You can exercise many choices directly in the app by:
- Editing your username
- Editing or deleting your content
- Unpublishing Community recipes
- Deleting “Made It” posts
- Blocking other users
- Changing device permissions
- Signing out
- Permanently deleting your account
You may withdraw photo or notification permission through your device settings. Previously uploaded content remains stored until you delete the content or your account.
To submit a privacy request, email support@purepantry.app.
We will not discriminate against you for exercising applicable privacy rights.
9. Security
PurePantry uses technical and organizational safeguards designed to protect information, including:
- Authenticated access controls
- Firebase Security Rules
- Firebase App Check
- Encrypted network connections
- Restricted moderator access
- Separation between private and public data
No internet service or storage system can guarantee absolute security.
You are responsible for using a strong, unique password and protecting access to your device and account.
10. International Data Transfers
Your information may be processed and stored in the United States and other countries where PurePantry and its service providers operate. Gemini requests use a global service endpoint, so AI processing may occur in different regions.
These locations may have data-protection laws that differ from those in your country. Where required, we rely on appropriate contractual or legal safeguards for international transfers.
11. Children’s Privacy
PurePantry is not directed to children under 13 or the minimum age required by applicable local law.
We do not knowingly collect personal information from children who are not legally permitted to use the service.
If you believe a child has provided personal information without appropriate authorization, contact support@purepantry.app so we can investigate and delete the information where required.
12. Changes to This Privacy Policy
We may update this Privacy Policy as PurePantry changes or as required by law.
When we make material changes, we will update the effective date and provide additional notice when appropriate.
Continued use of PurePantry after an updated policy takes effect means the updated policy applies to future use of the service.
13. Contact Us
For privacy questions, account-deletion assistance, or requests concerning your information, contact:
PurePantry
Operated by Addison Wittkamp
Email: support@purepantry.app
Support website: purepantry.app/support