PantryWeave keeps sensitive food-safety preferences encrypted on your device by default. Core recipe requests may transmit those preferences temporarily over HTTPS to calculate a result; analytics and advertising have separate choices that you can change later.
Who is responsible for your data
Arterus Bilisim Teknoloji Anonim Sirketi, trading as Arterus Technologies, is the data controller for PantryWeave. Its registered address is ULUTEK Teknoloji Gelistirme Bolgesi, 933-B027, Gorukle Mahallesi, Universite 1 Caddesi, Nilufer, Bursa 16200, Türkiye. Privacy requests can be sent to info@pantryweave.com.
Data we process
- Device integrity: the app uses Firebase App Check with Apple App Attest to confirm that requests to our service come from a genuine copy of the app.
- Account and authentication data: an anonymous Firebase account identifier. If you choose to protect the guest account with Apple, Firebase may process the Apple authentication identifier and email address returned for authentication; the app does not request or store your name in its user document.
- Food preferences and safety profile: allergen, dietary, disliked ingredient, household, pantry, and equipment selections are encrypted locally. When a recipe search, evaluation, setup suggestion, or meal-plan request needs them, the exact request is sent temporarily over HTTPS with your account identifier and used in real time; request bodies are not retained as an ordinary profile, analytics event, or application log.
- Usage analytics: if you opt in, we collect screen and feature activity, recipe identifiers, time spent, search result ranges, paywall and purchase outcomes, basic app properties (language, app version and Free or Premium status), and counts of dietary choices (none, one, or two or more). Our analytics provider may also use the identifier for vendors (IDFV) and record App Store purchase and renewal events, including product and price. After consent, the app attaches a random analytics identifier that is created on your device for analytics only; it is not your account identifier and is deleted when you withdraw consent. We do not send allergy information or whether you declared an allergy, ingredient lists, pantry contents, free-text searches, email addresses, or exact safety-profile values to analytics.
- Consented onboarding context: if you opt in to product analytics, we also store known, non-allergy onboarding goals, motivations, and the selected first-use path with your pseudonymous Firebase account identifier in Firestore, to understand which product needs bring people to PantryWeave. These answers are not sent to Adapty. They are removed when you withdraw analytics consent or delete your account. The coarse app language and app version are operational account metadata and are recorded independently of analytics consent.
- Diagnostics: if you opt in to product analytics, limited crash and performance data from Firebase Crashlytics is collected, configured to avoid recipe requests, pantry contents, tokens, and personal text. When ads are shown and Google’s consent flow permits ad requests, Google Mobile Ads may process limited performance signals; its separate crash reporter is disabled in PantryWeave.
- Purchases: subscription product and entitlement information from Apple and our subscription-management provider, Adapty. Adapty is identified with the pseudonymous Firebase account identifier so access can be restored consistently. Adapty also receives Apple’s identifier for vendors (IDFV), a device identifier that Apple shares only with apps from the same developer.
- Safety reports: if you report a recipe concern, the app sends the account identifier, recipe and request identifiers, and the selected report type so we can triage the report. The current mobile report flow does not send free-form text. These account-linked report records are removed when the account is deleted, subject to narrowly retained security, transaction, backup, or legal records.
- Optional product feedback: if you choose to send product feedback, PantryWeave stores the topics you select, an optional note of up to 500 characters, your Free or Premium state, coarse ranges for install age, active use, and launch count, the app version and build, the app language, and whether the prompt appeared automatically or was opened from Profile. The report is linked to your pseudonymous account so we can prevent abuse and remove it with account deletion. It never includes exact kitchen contents, allergens, household members, advertising identifiers, or the exact installation time.
- Advertising: the free version shows ads. Free users may see a full-screen ad (interstitial) after recipe results are shown, and may choose to watch a rewarded ad in exchange for a clearly described in-app benefit. For these ads, Google Mobile Ads and its consent tools may process device ID, approximate location derived from network information, consent state, advertising data, app interaction, performance, and crash information as permitted by your privacy choices and platform settings. The app sends a pseudonymous account identifier to AdMob’s server-side reward verification path. PantryWeave does not send your allergens, pantry contents, recipe request, email address, or food-safety profile to Google Mobile Ads.
How we use data
We use data to provide recipe filtering and matching, scale servings, create meal plans and grocery lists, maintain subscriptions, secure and improve the service, triage safety reports, review optional product feedback, respond to support requests, and comply with legal obligations. Food-safety data is not used to select, personalize, or measure advertising or subscription offers.
Sensitive food-safety information
Your exact allergen and dietary profile is stored in an encrypted local profile by default. It may be sent temporarily to our service when needed to calculate a result, but the request body is discarded after servicing and is not retained as an analytics event or ordinary application log. The profile is not sent to AdMob, Firebase Analytics, Crashlytics, or Adapty for advertising, diagnostics, or paywall personalization.
A safety report is different from a recipe request: when you actively submit one, the selected report type and recipe/request identifiers are retained with the pseudonymous account identifier for review, safety follow-up, and abuse prevention.
Analytics choices
Analytics and Crashlytics collection are off until you opt in. You can turn them off later in the app’s Privacy settings. We use Google Analytics for Firebase for consented product events and may export those events to Google BigQuery for limited-retention, aggregate product analysis. When consent is active, the app sets the random analytics identifier described above as the Firebase Analytics user ID. Product analytics consent is separate from advertising consent.
Website analytics
This website uses Google Analytics 4 only after you accept analytics in the website banner. It then records page views and interactions such as button clicks and language changes, using Google Consent Mode with all advertising storage denied. Your choice is stored in your browser’s local storage; you can change it by clearing this site’s data in your browser.
Website waitlist
If you actively opt in to launch updates on this website, we process your email address, chosen page language, signup page, consent version, and signup time (including the time reported by your browser) to send the requested launch update. To prevent abuse, we keep a hashed form of your IP address for rate limiting. This consent is separate from analytics consent. We do not use waitlist emails for advertising audiences or sell them. You can withdraw your consent or ask for deletion by emailing info@pantryweave.com.
Ads and advertising choices
The free version of PantryWeave shows ads. Free users may see a full-screen ad (interstitial) after search results are shown. PantryWeave may also offer an optional rewarded ad after you have already received core recipe value; watching a rewarded ad is your choice, and the reward is disclosed before playback. Ads are never shown in place of allergen warnings, account controls, purchase restoration, or other food-safety functions. Premium users do not see ads.
We use Google Mobile Ads and Google’s User Messaging Platform. The User Messaging Platform checks your advertising-consent status when the app starts and asks for your choices where required; if ads are allowed, the Google Mobile Ads SDK may start and prepare an ad in advance. PantryWeave requests non-personalized ads; depending on your region and choices, Google may serve non-personalized or limited ads. You can reopen available advertising privacy choices from the app’s Privacy settings. PantryWeave does not request Apple’s App Tracking Transparency permission in this version, disables IDFA collection in Adapty, disables publisher first-party IDs for rewarded ads, and does not combine your food profile with advertising data. Adapty may also receive Apple’s attribution token, which lets Adapty ask Apple whether the install came from an Apple Ads campaign.
Storage and service providers
Depending on the feature you use, data may be processed by Google Firebase and Google Cloud for authentication, application infrastructure, analytics, diagnostics, Firestore storage, and server-side recipe processing; by Google Mobile Ads and Google’s User Messaging Platform for advertising and advertising privacy choices; by Google Analytics for consented website analytics; by Apple for App Store purchases and Sign in with Apple; and by Adapty for subscription entitlement and paywall performance. Providers process data under their own contractual and legal safeguards.
Retention
Local preferences remain until you remove them or delete the app. Optional product-feedback records remain for the life of the account unless you delete the account or request deletion. When an account is deleted, PantryWeave removes the Firebase authentication account, the account and server-state documents, the linked Adapty profile, and the account-linked product feedback, recipe feedback, safety reports, rewarded-ad sessions, rewarded-ad transaction records, and daily ad quota records. Any product analytics exported to BigQuery is kept for a limited period; operational logs use shorter retention where practical. Limited security, transaction, backup, and legal-retention records may remain where required. Apple maintains purchase records under Apple’s own policies.
Your choices and rights
You can use the app as a guest, decline analytics, decline or manage rewarded-ad consent when prompted, revoke analytics consent, edit or delete local preferences, request access or deletion, and delete a linked account. Depending on where you live, you may also have rights to correction, portability, restriction, or objection. Contact info@pantryweave.com. We may need to verify a request before acting on it.
Account deletion and subscriptions
You can initiate full account deletion from the app, including for an anonymous account or an account linked with Sign in with Apple. If you signed in with Apple, PantryWeave also tries to revoke its Sign in with Apple authorization; if that is not possible, the app explains how to remove it in Settings. See our account deletion guide. Deleting a PantryWeave account does not automatically cancel an Apple subscription; subscriptions are managed separately through Apple.
Children
PantryWeave is not directed to children under 13, and we do not knowingly collect their personal data. A parent or guardian who believes a child has provided data should contact us.
International processing
Our providers may process data outside your country. Where required, we use applicable transfer safeguards and respect mandatory local privacy rights.
Food-safety notice
PantryWeave supports meal decisions but does not provide medical advice or guarantee that food is free from allergens or cross-contact. Always verify labels, ingredients, preparation conditions, and professional medical guidance appropriate to you.
Changes
We may update this policy when the product or legal requirements change. Material changes will be communicated in the app or on this page, and the effective date will be updated.