Privacy Policy

Introduction

Patty Pantry ("we," "us") operates the Patty Pantry web application at pattypantry.com and related services. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our service.

Contact: support@pattypantry.com. This policy is effective 2026-03-25. We may update it; we will post the new date and, for material changes, provide additional notice where required.

Information we collect

We collect information you provide and data generated by your use of the service.

• Account: email address and authentication credentials (password stored hashed by our auth provider).
• Household profile: household name, member display names, weekly budget, store preference, meal preferences, and optional allergies or dietary restrictions.
• Pantry and meals: products, quantities, recipes, and ratings you enter.
• Plans and shopping lists: weekly grocery plans, approvals, and checklist state.
• Receipts: photos you upload, parsed line items, and purchase history after you confirm.
• Agent chat: messages you send to Patty and assistant replies we store to continue your conversation.
• Technical: session cookies required to keep you signed in; server logs with identifiers such as user or household id and error metadata (not full chat or receipt content).

How we use information

We use personal information to provide and improve the service, secure accounts, generate grocery plans, send transactional emails about your plans and household invites (when email is configured), prevent abuse, and comply with law.

Optional artificial intelligence features (meal suggestions, Patty chat, receipt image parsing) send relevant data to our AI providers as described below. You can use deterministic meal selection when AI keys are not configured on the server.

We do not sell your personal information. We do not use your data for third-party advertising.

Allergies and sensitive information

Allergies and dietary restrictions are optional. They are used to tailor meal and grocery suggestions. Patty Pantry does not provide medical advice. Do not rely on the service for allergy safety without verifying ingredients yourself.

Where state law provides rights to limit use of sensitive personal information, you may contact us to discuss your choices. Allergies are not required to use basic pantry and planning features.

Artificial intelligence and automation

When AI features are enabled, we may send structured household context (including optional allergies, meal lists, and inventory summaries) to OpenAI or Anthropic for meal planning.

Patty chat sends your messages and tool results to the configured AI provider to generate replies. We may send user message text to OpenAI's moderation API before processing chat in production.

Receipt photos you choose to upload may be sent to OpenAI to extract line items. Images are processed to produce structured data stored in your account.

Configure provider settings so API data is not used to train their models where that option is available. Provider retention is governed by their policies.

Cookies and similar technologies

We use essential cookies and similar storage to maintain your login session (via Supabase Auth). We do not use non-essential analytics or advertising cookies in the application as of the effective date above.

If we add optional analytics later, we will update this policy and request consent where required.

How we share information

We share personal information with service providers that process data on our behalf under contract, and when required by law or to protect rights and safety.

• Supabase — database, authentication, and receipt file storage.
• Vercel — application hosting, serverless functions, and operational logs.
• OpenAI — moderation, receipt parsing, and optional AI features.
• Anthropic — optional AI features when configured.
• Resend — transactional email delivery.

Retention

We retain account and household data until you delete your account or household, or as needed to provide the service.

Agent chat transcripts remain until you clear chat history or delete your account. Operational rate-limit records are kept for a short rolling window (about 90 days).

Server logs are retained for about 90 days. After you delete data from the live service, backup systems maintained by our vendors may retain copies for a limited period before automatic expiration.

Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to limit certain uses of sensitive information.

In the app, use Settings → Privacy to download your data or delete your account. You can correct most household data in Household settings. For other requests, email support@pattypantry.com.

Security

We use row-level security in our database so household data is isolated per account membership, server-side business logic, and access controls on infrastructure secrets. No method of transmission or storage is 100% secure.

Children

The service is not directed to children under 13. You must be at least 13 years old to create an account. If you believe a child has provided us personal information, contact us to request deletion.

International users

We are US-first. If you access the service from outside the United States, your information may be processed in the United States and other countries where our providers operate. We will provide additional notices if we target the European Economic Area or United Kingdom.

Changes to this policy

We may update this Privacy Policy. The effective date at the top will change when we do. Continued use after an update means you accept the revised policy where permitted by law.