Privacy Policy
What EasyPantry knows about your kitchen.
EasyPantry is a pantry tracker. It works best when it knows what you have, so this page sets out exactly what it records, what leaves your phone, and what we can and cannot see.
1. The short version
In plain English
There is no EasyPantry account. You never give us a name, an email address or a password. We have no way to look up "your" data, because nothing we store is filed under you.
Your kitchen lives on your iPhone. Ingredients, photos, meal preps and recipes are stored in the app. If you turn on iCloud sync, they are copied to your iCloud account, which we cannot read.
A small amount of information leaves your phone only when you use an AI feature, and only when you tap the button. Section 6 lists exactly what each feature sends. The one thing worth knowing up front: if you photograph your groceries, that photo is sent. If you scan a receipt, only the text is.
If you turn on Apple Health sync, the meals you eat are saved to Apple Health on your iPhone or iPad. EasyPantry never reads your health data.
We run no advertising, we use no tracking, and nothing you send is used to train AI models.
2. Who we are
EasyPantry is published by Dean Cornejo, an independent app developer. In this policy, "we" and "us" mean Dean Cornejo, and "the app" means the EasyPantry iOS application and the widgets and extensions that ship with it.
We are the data controller for the limited information described below. You can reach us at any time at support@easypantryapp.com.
3. What stays on your iPhone
Almost everything EasyPantry knows is held in a database on your own device. That includes:
- Ingredients — names, quantities, categories, storage places, stock levels and expiry dates
- Any photos you attach to an ingredient, and the icons and colors you pick
- Meal preps, including when you made them and when they should be eaten
- Recipes you save, write or import, and their steps and ingredient lists
- Your Meal Plan: the meals you plan and eat, with their nutrition
- Your settings, dietary preferences, reminder preferences and subscription status
This data is written to the app's private storage, which iOS protects from other apps. It is shared with the EasyPantry widget and the share extension through a private app group so they can show your ingredients on the Home Screen — it does not leave the device by doing so.
Photos attached to ingredients
When you attach a photo to an ingredient, iOS shows you its own picker and hands the app only the image you chose. EasyPantry does not read your photo library, and the photos you attach to items are never sent to our server or to OpenAI. The grocery-scanning feature is different, and section 6 explains it.
4. iCloud sync
iCloud sync is an optional feature included with a paid subscription. It is off unless you turn it on, and turning it off stops future copies.
When it is on, your kitchen is synchronized through your own iCloud account using Apple's CloudKit private database, so your devices agree with each other. The data sits in Apple's infrastructure under your Apple Account, governed by Apple's Privacy Policy.
We do not have access to that container. We cannot read, export or restore what is in it, and turning sync on sends nothing to our servers.
5. Apple Health
Syncing meals to Apple Health is an optional feature included with a paid subscription. It is off unless you turn it on, and iOS asks for your permission first.
When it is on, each meal you mark as eaten in EasyPantry is saved to the Health app on your iPhone or iPad as a food entry. The entry holds:
- The meal's name
- The time you ate it
- Its calories, protein, carbs and fat, where you entered them
If you uncheck or delete a meal in EasyPantry, its entry is removed from Apple Health.
EasyPantry only writes to Apple Health. It never reads anything from it: not your weight, activity, or any other health data.
This information goes from the app straight into Apple Health on your device. It is not sent to our server, to OpenAI, or to anyone else, and we never use it for advertising or marketing. Once it is in Apple Health it is governed by Apple's Privacy Policy, and by your own iCloud settings for Health.
You can turn the feature off at any time in EasyPantry's Settings, or change what EasyPantry may write in the Health app under Sharing > Apps > EasyPantry. Entries already saved stay in Apple Health until you delete them there.
6. The AI features, and exactly what they send
EasyPantry has optional features that use an AI model: reading a receipt, recognizing groceries in a photo, suggesting recipes, reading the ingredients out of an imported recipe, and estimating how long something keeps. They run on our server, which passes each request to a large language model operated by OpenAI.
Nothing in this section happens in the background. It happens when you tap the button, and only if you subscribe.
What each feature sends
| When you | What we send |
|---|---|
| Scan a receipt | Only the text. Your iPhone reads the receipt itself and sends the recognized lines. The photograph never leaves your device. |
| Photograph your groceries | The photograph, resized and compressed. |
| Ask for recipe ideas | The names of the ingredients you picked, your category and storage names, and any dietary preferences you saved. With the recipes you keep, your recipe settings: metric or US measurements, whether to include nutrition, and any macro targets you set (protein, carbs and fat shares and a calorie limit per serving). |
| Import a recipe and let the app read its ingredients | The recipe text or link you are importing. |
| Ask how long something keeps | The ingredient's name and where you keep it. |
Also on every request
- A security check proving the request came from a genuine copy of the app
- Your subscription identifier, so our server knows the feature is paid for
Never sent
- Your name, email address or Apple Account
- Your location, or a device identifier
- Photos you attached to ingredients
- Ingredients you did not select, your saved recipes, or your meal preps
Training and retention
We send every request with retention switched off, which instructs OpenAI not to keep the request or the response for training or history. Under the OpenAI API data usage policies, data submitted through the API is not used to train or improve OpenAI's models. OpenAI may hold a request briefly for its own abuse monitoring under its standard terms, which we do not control.
On our side, photographs and receipt text exist only for as long as it takes to answer, and are never written to storage. Section 7 sets out the small number of things our server does keep, and for how long.
If you set dietary preferences, they are sent too
Some of them say something personal: halal is a matter of religious observance, and gluten-free or dairy-free may reflect a medical condition. We send them because a recipe suggestion is useless if it ignores them. They are not stored on our side, and you can leave them unset and still use recipe ideas.
A grocery photograph is a photograph of your home
That is why the receipt feature is built to avoid sending a photo at all, and why we say so plainly here rather than in a footnote. If you would rather not send a photo, scan the receipt instead, or add items by hand.
7. What our server keeps, and for how long
The EasyPantry API runs on Cloudflare Workers. It exists to hold the OpenAI key, to check that requests come from a real copy of the app, and to stop the AI features from being abused. It has no user accounts and no user database.
Your device is recognized by an App Attest key — a cryptographic key Apple generates for your specific install of the app. It is not linked to your Apple Account, your name or your email, and it changes if you delete and reinstall the app. If you subscribe, we also hold the subscription identifier Apple issues for the purchase.
| A record that your device is genuine | Its public key and the date it enrolled, kept while the app is installed. |
|---|---|
| Subscription status | The subscription identifier, the product you bought and its dates, kept for as long as the subscription is active. |
| Recipe suggestions | The ingredient names you picked and the dishes suggested, held for 30 minutes so you can open a suggestion's steps without paying for it twice, then deleted automatically. |
| Security challenges | Held for 5 minutes, and destroyed as soon as they are used once. |
| Duplicate-request records | A fingerprint of the request, kept 24 hours, so a retry after a dropped connection does not charge you twice. It cannot be turned back into the request. |
| Usage counts | How many AI requests your device has made and what they cost us, on a rolling window, to enforce fair-use limits. This records that a request happened, not what was in it. |
| Anonymous performance figures | Which feature was used, whether it succeeded, how long it took and what it cost. They contain nothing you wrote and are not connected to you or your device. |
We do not keep a history of your ingredients, your photographs, the recipes you cooked, or the receipts you scanned.
8. Subscriptions and payment
Subscriptions are sold through Apple's In-App Purchase system. We never see your payment details. Your card, billing address and Apple Account are handled entirely by Apple and are never passed to us.
What we receive is a signed receipt from Apple confirming that a subscription exists, which product it is, and when the period ends. We use it for nothing except unlocking the paid features.
9. Saving a recipe link
If you save a link, your iPhone fetches that page directly to build a preview. The website you saved will see your device's IP address, exactly as it would if you opened the link in Safari. That request does not go through us.
If you then ask the app to read the recipe's ingredients for you, the recipe text or link is sent as described in section 6.
10. Who else is involved
| Who | What they receive | Why |
|---|---|---|
| Apple | Your purchase, and your kitchen if you turn on iCloud sync | Subscriptions and sync |
| Cloudflare | AI requests as they pass through, and the records in section 7 | Runs our server |
| OpenAI | The single request described in section 6 | Provides the model |
| Websites you save | Your IP address | Shows you a preview |
We have no other partners. No data broker, advertiser or analytics company receives anything.
11. What we never do
EasyPantry contains no third-party analytics or tracking SDKs. There is no Google Analytics, no Firebase, no Facebook SDK, no advertising identifier and no cross-app tracking. The app does not ask for permission to track you because it does not.
We do not show advertising, sell or rent your information, build a profile of you, or ask for your location, contacts or microphone. We never read anything from Apple Health; section 5 covers the one thing the app can write there, if you turn it on.
If you have turned on Share iPhone Analytics in iOS Settings, Apple may send us aggregated crash reports through App Store Connect. That is Apple's mechanism, it is controlled by you in iOS Settings, and what we see is anonymous — we cannot tie it to an individual.
12. Notifications
Expiry warnings, thaw reminders and meal-prep alerts are local notifications. Your iPhone schedules and displays them itself, based on dates already stored on the device. Nothing is sent to a server to produce them, and we are not told whether you opened one.
13. Children
EasyPantry is a general-audience app intended for adults running a household, and it is not directed at children under 13. We do not knowingly collect personal information from children. Since the app has no accounts, no profile and no messaging, there is in practice nothing for a child to hand over — but if you believe a child has provided us with personal information, contact us and we will look into it.
14. Your choices and deleting your data
Because your kitchen lives on your device, you are in direct control of it:
- Delete an item and it is gone from your device, and from iCloud on the next sync.
- Delete the app and iOS destroys its local database along with it.
- Turn off iCloud sync and no further copies are made. To remove what is already there, go to iOS Settings → your name → iCloud → Manage Account Storage → EasyPantry.
- Decline camera and photo access and you can still use everything except scanning.
- Decline notifications and you can still use everything except reminders.
Because we hold no pantry content, there is nothing of yours on our servers to export. If you want the device and subscription records in section 7 erased, write to us and we will do it. Bear in mind this does not cancel the subscription itself, which is managed through Apple, and you will need to restore your purchase before the AI features work again.
15. Where your information is handled
Our server runs on Cloudflare's global network, and the model runs on OpenAI's servers in the United States. So if you use an AI feature, that request may be handled outside your country. Your kitchen data does not travel unless you use those features.
16. Your rights
Depending on where you live — including the UK, the EEA under the GDPR, and California under the CCPA — you have rights to access, correct, export, delete and restrict the processing of your personal data, and to object to it.
Where we process anything at all, we do so to perform the service you asked for, and because we have a legitimate interest in keeping the service working and preventing abuse. We do not sell personal information, and we do not share it for cross-context behavioral advertising.
The honest answer to most access requests is that we hold nothing tied to you: there is no account, no email address and no profile. Your data is on your device and in your own iCloud, both of which you can read and erase without us. If you want to exercise a right anyway, write to support@easypantryapp.com and we will respond within 30 days.
17. Changes to this policy
If we change how EasyPantry handles data, we will update this page and change the date at the top. If a change is significant — new categories of data, or a new recipient — we will say so in the app before it takes effect. Using EasyPantry after a change means you accept it.
18. Contact
Questions, requests or corrections about this policy:
Dean Cornejo
support@easypantryapp.com
See also the Terms of Use and the End User License Agreement.