Privacy
Last updated November 2, 2026
Pantry Spin plans family meals from what’s in your kitchen. This page explains what it keeps, where it goes, and how to delete it. There are no ads, nothing is sold, and nothing tracks you across other apps or websites.
What’s saved to your account
- Your email address and password (the password is stored hashed), to sign you in.
- What you enter: your family’s names, ages and goals, pantry, stores, budget, meal plans, shopping trips, products you scan, water and weight logs.
This is stored with Supabase, our database host, and only your account can read it.
What’s sent to other services
- Anthropic (Claude) builds meal plans and recipes, reads photos of receipts, products and nutrition labels, and finds nearby stores. It receives the details needed for that request. Anthropic doesn’t use this data to train its models.
- Open Food Facts receives a product’s barcode when you scan one, to look up its name and nutrition.
- OpenStreetMap receives your approximate location when you tap “Use my location”, to find your town and ZIP. Your location is used for that search and isn’t saved; only the town and ZIP you keep are.
- Vercel hosts the app and keeps standard server logs.
Apple Health (iPhone app)
If you connect Apple Health, the iPhone app:
- Reads your step count to show on Home. Steps stay on your phone and are never sent to our servers.
- Reads your weigh-ins only when you tap “Import from Apple Health”; those weigh-ins are then saved to your account like ones you type in.
- Writes the water you log to Apple Health.
Health data is never used for advertising, never shared with anyone else, and never sent to Anthropic. You can turn access off any time in the Settings app → Health → Data Access & Devices → Pantry Spin.
Camera, photos and location
The camera and photo library are used only when you scan a barcode, a product, a label or a receipt. Location is used only when you ask for nearby stores.
Deleting your data
You can delete your account and everything saved with it below, while signed in. It’s removed right away and can’t be recovered.