Pantrifuge™ Privacy Policy

A) Information you provide to us

This may include:

• Account Information: name, email address, password (stored in encrypted/hashed form where applicable), login and authentication details.
• Pantry and Inventory Data: grocery inventory items, pantry items, expiry dates, quantities, categories, notes, photos (if you upload them), and related organization data.
• Planning Data: shopping lists, meal logs, recipe saves, preferences, and reminders you create.
• Communications: messages to support, feedback, survey responses, and any information you choose to provide in communications.

B) Information we collect automatically

When you use the Services, we may collect:

• Usage Data: pages/screens viewed, features used, clicks, session duration, referral/source information, and errors/crash logs.
• Device and Technical Data: device type, operating system, browser type, IP address, approximate location derived from IP (not precise GPS), language, and unique device identifiers (where available).
• Cookies and Similar Technologies: as described in Section 7.

C) Information from third parties

We may receive information from:

• Authentication providers (if you sign in via a third-party method),
• Payment processors (if you purchase subscriptions; we typically receive confirmation of payment status and limited transaction metadata, not full card details),
• Service Providers that help us with analytics, security, and customer support.

A) With Service Providers

We may share Personal Information with vetted Service Providers who help us operate the Services (for example, hosting, database infrastructure, customer support tools, email delivery, analytics, security monitoring, and error reporting). Service Providers may only process Personal Information to perform services for us and must protect it in a manner consistent with this Policy.

B) With your consent or at your direction

We may share information when you ask us to or when a feature requires it (for example, if you choose to share certain content with other users or Third Parties).

C) Legal, safety, and enforcement

We may disclose information if we believe in good faith that it is necessary to:

• comply with applicable law, regulation, legal process, or lawful government request;
• protect the rights, property, or safety of Pantrifuge, our users, or others;
• investigate and prevent fraud, security issues, or violations of our Terms.

D) Business transactions

If Pantrifuge is involved in a merger, acquisition, financing, reorganization, or sale of assets, Personal Information may be disclosed as part of that transaction, subject to appropriate confidentiality protections and as permitted by law.

Storage and hosting

We use third-party infrastructure providers (including Supabase) to host and process data for the Services. Your Personal Information may be stored or processed in Canada, the United States, or other jurisdictions depending on where our Service Providers operate. These jurisdictions may have different privacy laws than your province or territory.

Security

We use administrative, technical, and physical safeguards designed to protect Personal Information against unauthorized access, loss, misuse, alteration, and disclosure. However, no system can be guaranteed 100% secure. You are responsible for using strong passwords and keeping your login credentials confidential.

Google Analytics

We use Google Analytics to help us understand how users interact with the Services (for example, which pages/screens are visited, how features are used, and general usage patterns). Google Analytics may use cookies and similar technologies to collect information such as device and browser information, IP address (which may be used to infer approximate location), and usage events.

You can learn more about Google's practices and controls through Google's privacy resources. You can also opt out of certain Google Analytics tracking by using Google's opt-out tools and by adjusting your browser cookie settings. Disabling cookies may affect functionality of the Services.

Resend (Email Delivery)

We use Resend to send emails such as:

• account verification and password reset emails,
• service and security notices,
• expiry alerts and reminders you enable,
• customer support communications, and
• promotional emails (only where you have not opted out, and where permitted by law).

When we send emails through Resend, we may process information such as your email address, message content, delivery status, and basic engagement signals (for example, whether an email was delivered). We use this information to deliver messages reliably, prevent abuse, and improve communications.

A) Data Accessed

When you authenticate with Google Sign-In, Pantrifuge requests access to the following Google user data, limited to the OAuth 2.0 scopes openid, email, and profile:

• Basic profile information: your name and profile picture (if available on your Google account).
• Email address: the primary email address associated with your Google account.
• Google account identifier: a unique identifier used to link your Google account to your Pantrifuge account.
• Authentication tokens: OAuth tokens used to securely authenticate your session (these are not stored long-term and are handled server-side).

Pantrifuge does not request access to any other Google services, files, contacts, calendars, or any data beyond the scopes listed above.

B) Data Usage

The Google user data we access is used solely for the following purposes:

• Account creation and authentication: to create your Pantrifuge account, verify your identity, and securely sign you in on subsequent visits.
• Personalization: to display your name and profile picture within the app for a personalized experience.
• Service communications: to send account-related messages (such as security alerts, password resets, and service updates) to your verified email address.

Google user data is never used for advertising, ad targeting, user profiling for marketing purposes, or any purpose unrelated to providing and improving the Pantrifuge service.

C) Data Sharing

Pantrifuge does not share Google user data with any third parties.

Your Google user data remains within Pantrifuge's infrastructure and is only processed by our essential service providers (hosting and database infrastructure) under strict data processing agreements, solely for the purpose of operating the Pantrifuge service. We do not sell, rent, lease, or otherwise distribute Google user data to external parties for any reason, including marketing, analytics, or research.

D) Data Storage & Protection

We implement robust security measures to protect your Google user data:

• Encryption in transit: all data transmitted between your browser and our servers is encrypted using TLS (Transport Layer Security).
• Encryption at rest: Google user data stored in our database is encrypted at rest using industry-standard encryption.
• Row-level security: database access controls ensure that each user can only access their own data.
• Server-side token handling: OAuth authentication tokens are processed and managed server-side and are not exposed to the client application.
• Password hashing: where applicable, credentials are stored using secure one-way hashing algorithms.
• Access controls: access to user data is restricted to authorized personnel on a need-to-know basis.

E) Data Retention & Deletion

Google user data is retained only for as long as your Pantrifuge account remains active. You may request deletion of your account and all associated Google user data at any time through the following methods:

• In-app: navigate to Settings > Delete Account to permanently delete your account and all associated data.
• Email: send a deletion request to support@pantrifuge.com.

Upon receiving a deletion request, we will process the removal of all Google user data within 30 days, subject to any lawful retention requirements described in Section 8 of this Privacy Policy.