PantryPeek helps the people in a home keep track of what they have, what they use and what to buy. This policy explains what personal information we collect, why, who can see it, and the control you have over it. It is written to meet South Africa's Protection of Personal Information Act (POPIA).
- We collect only what the app needs: your name, email, and the household information you type in.
- We don't sell your information, show ads, or track you across other apps or websites.
- People in your household can see your name, your email and the household's pantry and lists.
- You can delete your account yourself at any time in the app (Profile → Delete account).
1. Who is responsible for your information
| Responsible party | [to be completed] |
|---|---|
| Address | [to be completed] |
| Information Officer | [to be completed] |
| Privacy contact | [to be completed] |
In this policy, “we” and “us” mean the responsible party above. “The app” means PantryPeek.
2. What we collect
| Your account | Your name and email address, and a password that we store only as a one-way scrambled value (a hash). We cannot read your password. |
|---|---|
| Your households | The information you and the people you share with enter: household names and icons; who belongs to a household and whether they are an owner or member; pantries and storage places; the products you track (name, brand, unit, quantity, low-stock level); a history of items added, used or wasted (amount, date, and an optional note); and shopping lists with their items, quantities, notes, chosen store and whether they are bought. |
| The shared product catalogue | When you add a product, its name, brand and unit are saved in a catalogue that every PantryPeek user can search and reuse, so nobody has to retype “Full Cream Milk” again. The catalogue does not record who added a product or which household uses it. Because anyone can see it, please don't put personal information (for example a person's name or a medical detail) in a product name. |
| Technical information | Your IP address when the app connects to our servers. We use it to deliver the service and to protect accounts from abuse (for example, limiting repeated login attempts). The app also keeps a sign-in token on your device, in its secure storage (the iOS Keychain or Android Keystore), so you stay signed in. For each signed-in device we record a general label (for example “iPhone”) and when it was last used, so you can see your devices in Profile and sign any of them out. |
| Invitations | When a household owner invites someone, we keep the email address they typed, the role offered and the owner's name for up to 14 days, or until the invitation is accepted, declined or cancelled. It is shown only to the person who signs in with that address. We do not email it. |
| Emails we send | We email you a one-time code to confirm your address when you register or change it, a one-time code when you ask to reset your password, a notice to your old address if your email is changed, and a warning if there are repeated failed attempts to sign in to your account. We don't send marketing email. |
3. What we do not collect
- Your location, contacts, photos, camera, microphone, or advertising identifier.
- Payment or bank details. PantryPeek does not take payments.
- Analytics about how you use the app, or any advertising or cross-app tracking.
- Your logins for any shop or retailer. The app does not connect to any retailer: when you tap Share or Copy on a shopping list, the text goes only to the app you choose on your own phone.
4. Why we use it, and our lawful basis
- To provide the app — to create your account, keep your households, pantries and lists, and let the people in a household work together. This is necessary to perform our agreement with you.
- To keep accounts safe — to sign you in, reset forgotten passwords, and limit abuse. This is in our legitimate interest and yours.
- To contact you about your account — for example, password-reset codes. We do not send marketing email.
You choose what to enter. Some information, such as your name, is needed for the app to work; the rest is up to you.
5. Who can see your information
- People in your household. Everyone in a household can see its pantries, items, history and lists, and each member's name, email address and role. Only a household's owners can rename it, change its icon, or manage its members.
- Service providers (“operators”). We use a hosting provider ([to be completed]) to run our servers and database, and an email provider ([to be completed]) to deliver password-reset emails. They process information only on our instructions and under agreements that require them to protect it.
- Authorities — only where the law requires it.
We do not sell or rent your information, and we do not share it for advertising.
6. Where your information is stored
Your information is stored on servers located in [to be completed]. If that is outside South Africa, we make sure the provider is bound by obligations to protect your information that are substantially similar to POPIA's, as POPIA requires for transfers across borders.
Password-reset emails are sent through [to be completed], whose servers may be outside South Africa. It receives only the recipient's email address and the one-time code, for the purpose of delivering that email. Backups, if stored with another provider, are also encrypted and covered by the same obligations.
7. How long we keep it, and how to delete it
- Your account and households are kept until you delete your account.
- To delete your account, open the app and go to Profile → Delete account. This immediately removes your login, signs you out everywhere, and removes your name and email from your households. Households you are the only member of are deleted entirely, with their pantries, items and lists. Households shared with other people stay with them. If you are the only owner of a household that others use, you will be asked to make someone else an owner first.
- Backups. For safety we keep encrypted backups. Deleted information disappears from backups within 30 days.
- Temporary data: password-reset codes expire after 15 minutes and are cleared daily; sign-in tokens stop working after 90 days.
- The shared product catalogue keeps product names (but no link to you), because other people use them.
8. How we protect it
- All traffic between the app and our servers is encrypted (HTTPS).
- Passwords are stored as one-way hashes, never in readable form.
- Access is limited: you can only reach households you belong to, and repeated sign-in attempts are rate-limited.
- Only the people who need it to run the service can access our systems.
No system is completely secure. If something happens that puts your information at risk, we will tell the Information Regulator and the people affected, as POPIA requires.
9. Your rights
Under POPIA you may:
- See what information we hold about you, and ask for a copy.
- Correct information that is wrong — you can edit your name and email in Profile at any time.
- Delete your information — use Profile → Delete account, or ask us.
- Object to how we use it, or withdraw your consent.
To exercise any of these, email [to be completed]. We will respond as soon as reasonably possible and within 30 days. We may need to confirm it is really you first.
If you believe we have handled your information unlawfully, you can complain to South Africa's Information Regulator (inforegulator.org.za). We would appreciate the chance to put things right first.
10. Children
PantryPeek is for people aged 18 and over. It is not directed at children, and we do not knowingly collect their information. If you think a child has given us personal information, contact us and we will delete it.
11. Changes to this policy
We may update this policy. When we make a significant change we will tell you in the app, and we will always update the effective date above.
12. Contact us
Questions or requests: [to be completed].