Privacy Policy

Information we collect

We collect the essentials to power the thin slice: the email you use to sign in, optional name and household metadata, receipt images or PDFs you import, and the line items we normalize (name, quantity, unit, category).

Parsing happens in-memory. Receipt images are stored in Supabase buckets you control and are purged when you delete them. Diagnostic logging is aggregated and anonymized; we never sell personal data.

How we use information

Data flows through the Expo app, Fastify BFF, and worker stub so we can meet the PRD goals—believable inventory, Use-It-Up suggestions in under 90 seconds, and synced shopping lists.

• Operate and secure magic-link authentication plus device-code fallbacks
• Parse receipts, infer categories, and surface confidence badges
• Generate Use-It-Up recipes with expiry-ranked suggestions
• Maintain analytics for performance targets (parse time, swap latency)
• Provide support and investigate incidents when you request help

Your choices & controls

Export or delete your data anytime from Settings → Privacy in the mobile app. We respond to verified deletion requests within 30 days and cascade removals across Supabase storage, databases, and the worker cache.

Regulatory requirements may mandate short-term retention for financial records. When that happens, we isolate the data, encrypt it at rest, and remove it once obligations expire.

Contact us

Questions about privacy or data handling? Email privacy@pantru.com. Please include the household ID if you need us to look up records quickly.