Privacy Policy
Effective date: September 13, 2026
PantryChef ("the app", "we") is a local-first recipe and pantry app for iPhone and iPad. Guest data stays on the device. If you choose to sign in, enable sync or join a household, the app sends only the data needed for that feature. PantryChef has no advertising or cross-app tracking.
Data we collect and why
| Data | Why |
|---|---|
| Recipes, categories, photos, pantry, grocery, and planner records | Stored locally first so the app works offline. If eligible sync is enabled, these records may sync to your private account workspace and household records you explicitly share may be visible to that household. |
| Recipe source URLs, source names, and browser bookmarks | Stored so you can attribute imported recipes and return to sites you saved. Recent browser search terms stay on the device. |
| Account identifiers and household attribution names | Used for optional sign-in, sync, household membership, invitations, and access control. |
| Purchase history and account binding | RevenueCat receives App Store purchase/subscription status, product and transaction identifiers, environment, expiry/refund state, and PantryChef's stable application user ID. PantryChef uses derived RevenueCat CustomerInfo to restore entitlements across devices and authorize paid online features. Apple processes payment details; RevenueCat and PantryChef do not receive card or bank details from the app. |
| Optional usage milestones | Off by default. If you opt in while signed in, the app may send fixed milestone names, coarse labels, app version, time, and a random installation identifier so we can see which flows people reach. Stored event documents contain no recipe, pantry, grocery, household, account, receipt, allergy, or web-address content. Because delivery is authenticated with the signed-in session, Apple privacy disclosures conservatively classify Product Interaction as linked to you. |
What stays on your device
PantryChef is useful offline and stores everything locally first. Guest mode does not send recipe, pantry, grocery, planner, household, or browser content to a PantryChef account service. Device-only preferences and recent browser search terms stay on the device. Deleting the app removes local app data from that device.
Photos
When you add a recipe photo, PantryChef uses Apple's system photo picker and receives only the images you choose. The app resizes the chosen image for display and strips location and other image metadata before saving its copy inside app storage.
In-app browser
The built-in browser lets you visit recipe sites and save a recipe into your own library. Page requests go directly from your device to the site you visit. PantryChef does not keep a page-visit history or transmit your browsing to an analytics service. The app reads recipe markup, page metadata, title, or text you selected only when you tap to save or manually capture a recipe, and you review the draft before it is stored.
No tracking or ads
PantryChef contains no advertising SDK, no third-party tracking SDK, and no third-party analytics SDK. We do not track you across other companies' apps or websites, build advertising profiles, or sell personal information.
Online features and providers
Optional online features may use Firebase for account, sync, storage and household support. Apple and the App Store process purchases and refunds; RevenueCat processes purchase status and CustomerInfo using PantryChef's stable application user ID. We never receive card details.
Your choices
- Use PantryChef in Guest mode without an account.
- Delete recipes, photos, categories, pantry records, grocery records, and planner records in the app.
- Clear browser cookies, caches, website data, recent searches, and local browser preferences from Browser Settings.
- Choose whether to share usage events in Settings → Privacy & Data. This is off by default and can be withdrawn at any time.
- Delete your signed-in account from Settings → Account & Sync to remove the signed-in identity and personal cloud workspace.
- Delete the app to remove local app data from the device.
- Contact us at phonglinhk52m@gmail.com with privacy questions or data requests.
How long data is kept
Local data stays until you delete it. Synced data and server-side purchase-verification records remain until you delete the record or account, subject to short-lived backups and RevenueCat, security, or legal retention. RevenueCat webhook IDs may be retained to prevent duplicate processing. Removing account data from one device does not delete its cloud copy. Account deletion removes the authentication identity and personal cloud workspace; household ownership must first be transferred or the household deleted.
Children
PantryChef is a general-audience cooking app and is not directed to children under 13. Because the app contains an unrestricted in-app browser, parents should use iOS Screen Time and Content & Privacy Restrictions when appropriate.
Changes
If this policy changes, the updated version will be posted at this address with a new effective date.