Privacy policy

Last updated 7 October 2026

Pantrea is a shared shopping list and home inventory. This policy explains what data Pantrea stores, why, who can see it and how you delete it. In short: we store what you put into the app so it can sync between your devices and your household. We show no ads, use no analytics or tracking tools and never sell your data.

Who is responsible

Pantrea is run by Westin Digital, Sweden, who is the data controller for the data described here. Contact: support@pantrea.app.

What we store

• Your account. You sign in with Apple. We store the anonymous identifier Apple creates for Pantrea. We do not store your email address or your real name.
• Your display name, if you set one. It is shown to the people you share a place with, next to items they see you added or checked, and on recipes you share.
• Your devices. For each signed-in device: a random device ID, the device name and when the session was created and last used.
• What you add to the app: places (such as "Home"), shopping lists and items, what you have at home with amounts and expiry dates, notes, receipts you choose to save (store, date, total and the items on them), meal plans, what you cooked, recipes and your ratings of them.
• Invitations you create to share a place. They expire after seven days.
• Recipe links you create. A copy of the recipe and your display name are stored and can be read by anyone who has the link.
• AI assistant connections, if you connect Claude, ChatGPT or another assistant: which assistant, what it may do (read only, or read and change) and the access tokens it uses.

What stays on your phone

• Receipt photos and scans. Text is read from the image on your iPhone with Apple's built-in text recognition. The image is never uploaded. Only the rows you choose to keep are saved.
• Camera and photos are used only when you scan or pick a receipt.
• Expiry reminders are scheduled by your iPhone. We send no push notifications.

Why we use it

We use your data only to provide Pantrea: to keep your lists in sync across your devices and with the people you share with, and to let assistants you connect read and change them. The legal basis is the performance of our agreement with you (GDPR Art. 6(1)(b)). Short-lived server logs are kept for our legitimate interest in running the service securely (Art. 6(1)(f)).

Who else sees or handles your data

• People you share a place with see and can change everything in that place, and see your display name.
• Cloudflare hosts Pantrea's server and database. It processes data on our behalf under a data processing agreement and may process it outside the EU/EEA, protected by the EU Standard Contractual Clauses.
• Apple handles Sign in with Apple.
• AI assistants you connect (for example ChatGPT by OpenAI or Claude by Anthropic) read your lists, and change them if you allowed it, when you ask them to. What they do with that data is governed by their own privacy policies. You can disconnect an assistant at any time in the app under AI assistants.

We share nothing with anyone else, except when the law requires it.

Logs

Like any web service, our host records technical request logs (such as IP address, time and the address requested) to keep the service running and secure. They are deleted automatically after a few days.

How long we keep it and how to delete it

We keep your data as long as you have an account. Delete your account in the app under Settings → Delete account (Inställningar → Radera kontot). This immediately deletes your account, your devices, your AI assistant connections, your recipe links, your invitations, and every place you do not share with anyone else, with everything in it. Places you share with others stay with the other members, because they are their lists too. Items you added there may still show the display name you had.

When you delete a single item, it is marked as deleted so your other devices can remove it as well.

Your rights

You have the right to access, correct, delete and receive a copy of your data, and to object to or restrict how it is used. Email support@pantrea.app and we will reply within one month. You can also complain to the Swedish Authority for Privacy Protection (IMY), imy.se, or to the authority where you live.

Security

All traffic is encrypted with HTTPS. Sign-in and invitation tokens are stored only as one-way hashes.

Children

Pantrea is not directed at children under 13, and we do not knowingly collect data from them.

Changes

If we change this policy we update the date above, and tell you in the app if the change is significant.