Effective date: 27 October 2026 Who we are: Pantry Ally, a Canadian service for households. Privacy contact: Email [email protected] for any privacy request or question (access, correction, deletion, withdrawing consent, or a complaint). It goes to the person accountable for Pantry Ally's privacy practices.
Pantry Ally helps Canadian households track their pantry, grocery budget and calories. This policy explains in plain language what we collect, why, where it goes, and your choices. We follow Canada's federal private-sector privacy law (PIPEDA) and its 10 fair information principles.
We collect only what we need for the purposes below.
We do not sell your personal information. We use it only for these purposes unless you agree otherwise or the law requires it.
By creating an account you agree to the uses in this policy. We ask before any new purpose. You can withdraw consent at any time by deleting data in the app or requesting account deletion (section 9); some features will then stop working. The account holder who adds family members should have their agreement to do so.
When information is processed outside Canada, it is subject to the laws of that country and may be accessed by its courts, law enforcement and national security authorities. We remain responsible for your information while service providers process it for us, and we use contracts and other means to require comparable protection.
Google's Gemini API terms do not permit use by people under 18, so Sage is unavailable to users under 18. The app asks for an age check before Sage can be used (this arrives in the next app update). They can still use the pantry, budget and calorie features through the household.
We keep your information while your account is active and only as long as needed for the purposes above. - Sage chats: not stored by us (see section 5). - Account and household data: kept until your account or household is deleted (see section 9). Deleting either permanently removes the related pantry, budget, and calorie records.
We use safeguards suited to the sensitivity of the data: - Household walls: database row-level security limits each household's data to that household's members. - Encryption: our database provider, Supabase, encrypts data in transit (TLS) and at rest (AES-256). - Limited access: only the company's founders can access the database, through a single company administrator account.
No system is perfectly secure.
Delete: you can delete individual items in the app. To delete your whole account: in-app deletion arrives in the next app update; until then use the delete-account page (https://pantryally.ca/delete-account) or email [email protected]. Deleting your account permanently removes your account and its related data from our database. If you are the last member of a household, the household and its data are removed too.
Ask or complain: contact our privacy contact above. We aim to reply within 30 days. If you are not satisfied, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).
Report an AI reply: if a Sage reply is wrong, harmful or inappropriate, tap "Report this reply" on that answer to send it to us for review (this arrives in the next app update).
If a breach of our safeguards involving your information creates a real risk of significant harm, we will report it to the Office of the Privacy Commissioner of Canada and notify you directly as soon as feasible, explaining what happened, what information was involved, what we did, and steps you can take. We keep a record of every breach.
Product information comes partly from Open Food Facts (openfoodfacts.org), available under the Open Database Licence (ODbL). © Open Food Facts contributors. This is product data, not your personal information.
Residents of Quebec may have additional rights under Quebec's Law 25.
We will post updates here with a new effective date. For important changes, especially any new kind of data (such as photos or audio) or new places it is processed, we will tell you in the app or by email before the change takes effect.