Keeping things clear

Privacy policy

How PantryIQ handles information in the mobile app, website and email updates list.

Updated October 27, 2026.

Who is responsible?

PantryIQ is operated by Sunday! Sunday! Sunday! LLC. This privacy policy covers the PantryIQ mobile app, website and email updates list. Contact hello@sundaysundaysunday.studio for privacy questions or requests.

Information used by the mobile app

Account and household information: your email address, account identifier, authentication information, household identifier, membership and invitations needed to provide your account and shared household features.

Pantry and shopping information: items, quantities, units, storage locations, categories, expiry information, shopping lists, notes and changes you make. Purchase and receipt information can include products, retailers, prices and dates. Usage and item-history records support features such as quantity tracking, suggestions and value summaries.

Images and imports: photos, receipt images and shopping-list images you choose to submit, associated filenames and import identifiers, extracted text and suggested item information. Images may contain personal information printed on a receipt or visible in the background. Submit only the material needed for the feature.

Technical and usage information: service requests, IP addresses and technical logs needed to deliver and protect the service, together with first-party feature events, their properties and associated account and household identifiers used to understand operation and improve reliability. Support messages include the information you send us.

How uploads and barcode lookups work

When you choose an image-import feature, the image is uploaded for processing before you confirm the suggested items. Reviewing or cancelling an import is not a promise that the uploaded image or processing records have been deleted. Automated recognition can make mistakes; review the suggestions before confirming them.

Barcode lookups may send the scanned product code to an external product-information provider, including UPCitemdb. A direct request also exposes ordinary connection information, such as your IP address, to the receiving service. Retrieved product images may be loaded from external image hosts.

Camera or photo-library access is used for the features you choose. You can manage permissions in your device settings. Denying a permission may prevent the corresponding feature from working.

Why we use app information

We use this information to create and secure accounts; provide household sharing; store and update pantry and shopping records; process imports and product lookups; generate requested suggestions and summaries; respond to support and privacy requests; and investigate errors, misuse and security incidents.

Where applicable data-protection law requires a legal basis, we rely on providing the service you request, our legitimate interests in operating and protecting it, consent where required, and legal obligations. Joining the app does not by itself subscribe you to the website updates list.

Household sharing

Members of a shared household can access and update the pantry, shopping information and other content made available within that household. Be careful about adding personal information to shared notes or images. Removing information from the service cannot retract a copy that another person has already saved outside it.

Services that handle information

Supabase provides app account, database and file-storage services. PantryIQ operates import-processing workflows using n8n; these workflows handle submitted images or image-access links, extracted information, filenames and household/import identifiers. OpenAI provides automated text and image recognition for these import workflows. Material submitted for recognition is processed by OpenAI through the workflow to return suggestions.

Product lookup and image-hosting services handle the requests described above. Hosting, infrastructure, email-delivery and support providers process information as needed to operate their respective parts of the service. Authorised personnel may access information when necessary to provide support, maintain the service or respond to a request.

We may also disclose information when required by law or necessary to address a security incident or protect legal rights. Crowdfunding platforms process information separately under their own privacy notices when you visit or use their pages.

Website and email updates

If you sign up for updates, we collect the email address you provide, your affirmative consent and the associated form-submission information needed to manage that request. We use it to send occasional updates about PantryIQ development, beta opportunities, crowdfunding and launch, based on your consent.

The website uses Netlify for hosting and form handling. Form submissions are processed in the site’s Netlify account. Hosting systems may process IP addresses, browser details and access logs to deliver and protect the website.

The website does not include advertising pixels or third-party analytics scripts. Fonts and images are served with the website. Website infrastructure may use essential technologies for operation and security. The app separately stores account/session information and preferences on your device to provide its features.

Security and international processing

App service connections use HTTPS to protect information in transit. Account authentication and access controls are used to restrict access to app records and stored files. These measures do not make any service completely secure.

PantryIQ’s service providers may process information outside your country. Where required, international transfers must use an applicable legal mechanism and safeguards. Contact us for information about processing locations and the safeguards relevant to your data.

Retention

Account and app records are kept while needed to provide your account and household features, unless you delete them or request deletion. Uploaded import images, extracted content and processing records can remain after an import; cancelling review or the expiry of an image-access link does not itself remove the stored file.

Updates-list contact details are kept only while needed for that purpose or until you withdraw consent, whichever comes first. Technical logs, support records and service-provider backups may have separate retention arrangements. Information retained for security, dispute resolution or a legal obligation must be limited to what is necessary for that purpose. Contact us for the retention arrangements applicable to a particular record.

Delete your PantryIQ account or data

To request deletion of your PantryIQ account and associated personal data without using the app, email hello@sundaysundaysunday.studio with the subject “PantryIQ account deletion”. Use your account email address and state whether you want account deletion or deletion of particular data. Do not send your password. We may ask for information reasonably needed to verify the request.

The app also displays a Delete account option in Settings. If you cannot access your account or that option does not complete your request, use the email route above.

A deletion request covers associated personal data held by PantryIQ and its service providers, subject to applicable lawful retention requirements. Shared household records need to be assessed so that your personal information is removed or anonymised without deleting other members’ information. If a lawful exception requires retention, we will explain the data, reason and applicable period when responding. Deleting the app from your device does not itself delete your account or server records.

Your privacy choices and rights

You can request access to, correction of or deletion of personal information, withdraw updates-list consent, and exercise other applicable rights, including objection, restriction or portability where available. Contact hello@sundaysundaysunday.studio. Withdrawing consent does not affect processing that was lawful before withdrawal.

You may also have the right to complain to your data-protection authority, including the UK Information Commissioner’s Office where applicable. We will respond within the period required by applicable law.

Changes to this policy

We will update this page when our practices change and revise the date above. Where required, we will provide additional notice or obtain consent before a material change takes effect.