Privacy Policy

Effective Date: February 22, 2026 | Last Updated: February 22, 2026

PMERIT TECHNOLOGIES LLC ("we," "us," or "our") operates PantryOS™. This Privacy Policy describes how we collect, use, and protect your information when you use our application.

1. Information We Collect

A. Free Tier (No Account)

If you use PantryOS without creating an account, we collect no personal information. All your data (pantry items, shopping lists, preferences) is stored exclusively in your browser's local storage on your device. We cannot access, view, or recover this data.

B. Premium Tier (Account Required)

When you create an account, we collect:

Data	Purpose	Storage
Email address	Account identification, login, communications	Cloudflare D1
Display name	Personalization	Cloudflare D1
Hashed password	Authentication (PBKDF2, never stored in plain text)	Cloudflare D1
Subscription status	Feature access control	Cloudflare D1

C. Premium Cloud-Synced Data

If you opt into cloud sync (premium feature), the following data is stored on our servers:

Pantry inventory items (names, quantities, expiry dates, categories)
Shopping lists
Preferences and settings
Consumption and waste tracking history

D. Payment Information

Payment processing is handled entirely by Stripe, Inc. We do not store, process, or have access to your credit card numbers, bank account details, or other payment credentials. Stripe's privacy policy is available at stripe.com/privacy.

E. Automatically Collected Data

We do not use analytics, tracking pixels, or advertising cookies. We do not collect IP addresses, device fingerprints, or browsing behavior. The application uses no third-party analytics services.

2. How We Use Your Information

Service delivery: Provide and maintain your account, sync data across devices
Authentication: Verify your identity and manage login sessions
Communications: Send account verification emails, password reset emails, and important service notices
AI features: Process your pantry data through AI models to generate recipe suggestions (data is not stored by AI providers beyond the request)
Billing: Manage subscriptions through Stripe

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Data Storage and Security

Your data is stored on Cloudflare's global infrastructure using:

Cloudflare D1 — SQLite-based database for account and synced data
Cloudflare Workers — Serverless edge computing for API processing

Security measures include:

Passwords are hashed with PBKDF2 (100,000 iterations) and never stored in plain text
Authentication uses JSON Web Tokens (JWT) with short expiration
All connections are encrypted via HTTPS/TLS
Rate limiting protects against brute-force attacks
CORS headers restrict API access to authorized origins

4. Third-Party Services

Service	Purpose	Data Shared
Cloudflare	Hosting, database, CDN	Account data, synced pantry data
Stripe	Payment processing	Email (for receipts); payment details go directly to Stripe
Resend	Transactional email	Email address (for verification/password reset emails only)
Open Food Facts	Barcode product lookups	Barcode numbers (public API, no account data)

We do not share your pantry data, shopping lists, or consumption history with any third party.

5. Affiliate Links Disclosure

PantryOS includes links to third-party retailers (Walmart, Amazon, Target, Instacart, Jumia). Some links contain affiliate tracking parameters. When you click these links and make a purchase, PMERIT Technologies may earn a commission. Affiliate links:

Do not change the price you pay
Do not transmit your PantryOS data to retailers
Do not influence which products or stores are displayed

6. Children's Privacy (COPPA)

PantryOS is designed for general audiences. We do not knowingly collect personal information from children under 13. Account creation requires users to be at least 13 years old. If you believe a child under 13 has created an account, contact us immediately and we will delete the account.

The free tier (no account) can be used by anyone of any age, as it collects no personal information.

7. Your Rights

You have the right to:

Access: View all personal data associated with your account
Export: Download your pantry data in JSON format
Correction: Update your account information at any time
Deletion: Delete your account and all associated data. Cloud-synced data will be permanently deleted within 30 days of account deletion
Portability: Your locally stored data is always accessible in your browser and can be exported

To exercise these rights, contact us at [email protected] or use the account management features in the app.

8. Data Retention

Active accounts: Data is retained as long as your account is active
Deleted accounts: All personal data and cloud-synced data is deleted within 30 days
Local data: Remains on your device until you clear your browser storage
Billing records: Retained as required by tax and accounting regulations

9. Cookies and Local Storage

PantryOS uses browser localStorage to store your pantry data and preferences locally. We do not use tracking cookies, advertising cookies, or any third-party cookies. No data stored in localStorage is transmitted to our servers unless you are a premium user with cloud sync enabled.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the email associated with your account or through an in-app notice. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions or concerns:
PMERIT TECHNOLOGIES LLC
32 Thomas Ave, Caribou, ME 04736
[email protected]