Privacy

Pantrila is an AI cooking and meal-planning assistant at app.pantrila.com. Pantrila decides how your data is used (it is the “data controller”). Questions or requests: hello@pantrila.com.

In short: Pantrila keeps what you tell it so it can plan your meals, sends what you type to an AI model to answer you, shows no ads, uses no tracking cookies and sells nothing.

What Pantrila stores

• Your account. If you continue with Google: your email address, name and profile picture from Google. If you sign in with an email link: your email address. As a guest: an anonymous account id only.
• Your food profile. Diet, allergies, foods you avoid, nutrition targets and the number of people you cook for. Allergies and diets can reveal health or religious information; they are used only to choose and check your recipes.
• What you add. Your pantry, meal plans, assistant chats (the latest 100), your cookbook recipes and their photos, your profile picture, and the meals you mark as cooked (the latest 500).
• Usage counts. When you use an AI feature, its kind, time and cost, to enforce daily allowances.

Pantrila does not keep the photos, pages, posts or videos you import. They are read once to make the recipe and then dropped. Recipe photos and profile pictures are stored at web addresses that are public but hard to guess.

Why

To provide the service you asked for: finding and checking recipes, planning meals, keeping your cookbook and pantry, and answering your questions (this is the legal basis of “performing a contract”). Your allergies and diet are used because you entered them so Pantrila can respect them. Usage counts and short-lived traces keep the service working and affordable (“legitimate interest”).

Who processes it

• Supabase stores your account and data, in the EU (Stockholm).
• Render runs Pantrila’s server, in the EU (Frankfurt).
• Vercel serves the website and app pages.
• OpenAI receives what the AI features need to answer you: your messages, profile and pantry, recipe text, and anything you import. Requests are sent with storage turned off, and OpenAI’s API terms say this data is not used to train its models.
• LangSmith (LangChain, EU region) keeps traces of meal plans and chats for a limited time so problems and quality can be checked.
• Apify fetches a public social media post when you ask Pantrila to import it. It receives the post link only.
• Google signs you in if you choose Google.
• Resend delivers sign-in emails if you choose email sign-in.

Some of these companies are based in the United States, so your data may be processed there under their standard data protection terms.

In your browser

Pantrila keeps your sign-in session and a few preferences (such as °C or °F, and whether you finished the tour) in your browser’s local storage. There are no advertising or analytics cookies. As a guest, clearing your browser data signs you out for good; add Google from your profile to keep your data.

How long

Your data stays until you delete it or ask for your account to be deleted. You can delete recipes, chats, pantry items and photos yourself in the app at any time.

Your rights

You can ask for a copy of your data, to correct it, to delete it or your whole account, or to object to how it is used. Write to hello@pantrila.com from the email linked to your account and you will get an answer within a month. A guest account has no email, so add Google from your profile first. You can also complain to your data protection authority.

Children

Pantrila is not meant for children under 16.

Changes

If this policy changes in a way that matters, the date above changes and the app will say so.