Privacy Policy

Effective October 19, 2026

What's In My Pantry ("the app", "we") is run by CHIZZY LLC, a Utah company. This page explains, in plain language, what the app stores, who else is involved, and how to delete your data. Questions: Collin.Chisholm@chizzyllc.com.

The short version

We keep what you put in the app so it can work: your pantry, lists, plans and saved recipes.
We don't sell your data, we don't show ads, and we don't use analytics or tracking tools.
To find recipes, the names of your pantry ingredients are sent to recipe services (Spoonacular and TheMealDB), without your name or email.
You can download your data or delete your account at any time from the Account page.

What we store

Your account: your email address and your password, stored only as a one-way hash (bcrypt). We never see or store your actual password.
Google or Apple sign-in, if you use it: the account ID the provider gives us, the email address it shares, and your name if the provider sends one. Apple sends your name only the first time, and may give us a private "Hide My Email" relay address instead of your real one. We never receive your Google or Apple password.
Your pantry: item names, quantities, expiry dates and whether an item is frozen. For scanned products we also keep the barcode, brand, product name, a link to the product photo and nutrition facts from Open Food Facts.
Your lists and recipes: your shopping list, favorite and imported recipes, weekly meal plan, what you've cooked, and recipes you chose to hide.
Restock counts: how often you've bought or used up each item, so the app can suggest things you buy often.
Your household: which household you belong to, which member added each item, and any invite codes you create.
Preferences: your light or dark theme setting.
Sign-in sessions: a record that keeps you logged in, for up to 30 days.
Password reset links: only a scrambled (hashed) copy of the link, which expires.

Some display settings, like your pantry sort order, recipe filters and theme, are also saved in your browser's local storage on your device. They aren't sent to us, except the theme, which is also saved to your account.

Household sharing

If you join or invite someone to a household, everyone in it shares the pantry, shopping list, favorites, meal plan, cooked history and hidden recipes, and can see the other members' email addresses. Only invite people you trust. You can leave a household at any time from the Account page.

Other services the app uses

Spoonacular and TheMealDB (recipes): to find recipes, our server sends them the names of ingredients in your pantry and anything you type into recipe search. It doesn't send your email, name or any account details. Recipe photos load straight from their servers, so they can see your device's IP address. Links to full recipes open the original recipe website.
Open Food Facts (barcodes): when you scan or type a barcode, our server sends only that barcode number to Open Food Facts to look up the product. Product photos load from their servers.
Barcode scanning: the camera and any photo you choose are processed on your device. We don't upload or store your video or photos, only the barcode number that was read.
Voice add: this uses your browser's built-in speech recognition. Depending on your device, the audio may be processed by Google (in Chrome) or Apple (in Safari and on iPhone and iPad) under their own privacy policies. The app never receives audio, only the text of what you said, which our server turns into pantry items.
Recipe import: when you import a recipe from a link, our server visits that web page to read the recipe.
Google and Apple sign-in: if you choose them, signing in happens on Google's or Apple's site under their own policies.
Google Fonts: pages load the app's typeface from Google's servers, so Google can see your device's IP address when the font loads.
Resend (email): when you use "Forgot password?", our server sends Resend your email address and the message (a one-time reset link, or a note on how to sign in) so it can deliver it. We don't use it for newsletters or marketing. Resend handles the message under its own privacy policy.
Railway (hosting): the app and its database run on Railway's servers in the United States. Like most hosts, Railway may keep standard technical logs, such as IP addresses and the pages requested, for operations and security.

Cookies

The app uses a single cookie, the session cookie (connect.sid), to keep you signed in. It lasts up to 30 days, or until you log out. We don't use advertising, analytics or tracking cookies.

What we don't do

We don't sell or rent your personal information.
We don't show ads or share your data with advertisers.
We don't send marketing email. We'd only contact you about your account, or to give notice if the service is shutting down.

Download or delete your data

Download: Account → Your data → Download JSON or CSV. This includes your pantry, favorites, shopping list, meal plan, cooked history and hidden recipes.
Delete: Account → Delete account. This removes your account, your linked Google or Apple sign-ins, your sessions and your restock counts right away. If you're the only member of your household, all of its pantry, list, recipe and plan data is deleted too. If other members remain, the shared household data stays with them and is no longer marked as added by you.
You can also unlink Google or Apple from the Account page, and remove the app's access from your Google or Apple account settings.
When we upgrade the database, we sometimes keep a backup copy of a table for safety. Deleted data can remain in those copies until they're cleaned up.

You can also email us to ask for a copy, a correction or deletion of your data, and we'll take care of it.

Security

The site uses HTTPS, passwords are stored only as hashes, and the session cookie can't be read by scripts on the page. No system is perfectly secure, so please use a password you don't use anywhere else.

Children

The app isn't directed at children under 13, and we don't knowingly collect their information. If you believe a child has created an account, contact us and we'll delete it.

Changes

If we change this policy, we'll update the date at the top. For significant changes, we'll tell you in the app.

Contact

CHIZZY LLC, Utah, USA · Collin.Chisholm@chizzyllc.com