← Pantry Shuffle

Pantry Shuffle Privacy Policy

Effective 29 September 2026

This policy covers the Pantry Shuffle iPhone app, the service behind it, and this website. “We” and “us” mean the people who run Pantry Shuffle. Questions go to support@pantryshuffle.com.

Using the app without an account

Browsing, searching, recipe pages, rolling and cook mode all work signed out. We don't ask who you are, and the app creates no advertising or tracking identifier.

If you set up a pantry or allergies and dislikes while signed out, they are saved on your phone. Each time you roll, the app sends them with the request so the result fits; when you browse or search, it sends your allergies (not your dislikes) so it can hide recipes that conflict. We use them to answer that request and don't save them to any account or profile. Like all requests, these are subject to the routine server logs described under Server logs and security. Signing in later doesn't copy them into your account.

Information you give us when you create an account

• Email and password. If you sign up with email, we store your email address and a one-way hash of your password (made with argon2id). We never store the password itself, and we can't see it. We don't currently send you email; your address is used to sign you in and, if you write to us, to confirm the account is yours.
• Sign in with Apple. If you use Sign in with Apple, we receive from Apple a stable identifier for your Apple account and, if Apple shares one, an email address — which may be a private relay address Apple creates for you. We don't receive your Apple password.
• Your public profile: a handle (your @name), a display name, and an optional bio. These are public — see What other people can see.

Your phone keeps you signed in with tokens stored in the iOS Keychain. On our side we store only a hashed form of the long-lived token, so a copy of our database can't be used to sign in as you.

Your pantry, allergies and dislikes

When you're signed in, your pantry (the ingredients you have), and your allergies and dislikes (ingredients or allergen groups, such as peanut or gluten), are stored with your account so they work on any device you sign in on.

Allergies can say something about your health, so we treat them with particular care. We use your pantry, allergies and dislikes only to choose which recipes to suggest or show you and to label recipes that conflict with them. They are never shown to other users, never used for advertising, never sold, and never shared with anyone except the service providers that host our servers and database (see Service providers). Deleting your account deletes them.

Content you create

• Recipes. Published recipes — their title, description, ingredients, steps, tags and photos — are public and credited to your handle and display name. Drafts are visible only to you and our moderators.
• Photos. Photos you add to a recipe are converted to JPEG on your phone, which drops location (GPS) data and other metadata, and are re-encoded again on our server with all metadata removed. We keep a full-size copy in private storage, used only to make the sizes the app displays; those display copies become public with the recipe. Photos are reviewed by a moderator before other people can see them.
• Ratings. We store the star rating you gave each recipe. Other people see only each recipe's average and number of ratings, never who rated what.
• Saved recipes are private to you.
• Ingredient requests. If you ask for a new ingredient to be added, we store the request and who made it so a moderator can review it.

What you do in the app

When you're signed in, we record which recipes a roll showed you, which recipes you opened, and which you finished in cook mode. This is used only to vary your future rolls (so you see recipes you haven't tried) and is never shown to anyone. We don't record this when you're signed out.

We don't use analytics services, advertising networks, crash-reporting services or any other third-party code in the app. If you've allowed it in iOS settings, Apple may share crash reports with us under Apple's own terms.

Reports, blocks and moderation

• Reports. When you report a recipe, photo or profile, we store the report, the reason you chose, any note you add, and that it came from you. The person you reported is not told who reported them.
• Blocks. When you block someone, we store that, so we can hide their content from you everywhere. They are not notified.
• Automated checks. The text of published recipes and of profiles (handle, display name, bio) is automatically checked against a list of spam and abusive terms. A match only flags the item for a person to review; nothing is removed automatically.
• Moderators can see reported and flagged content, the reports about it, and the account it belongs to, and can remove content or suspend accounts that break the rules.

What other people can see

Your handle, display name, bio, when you joined, how many recipes you've published, your published recipes and their photos. Your email, pantry, allergies, dislikes, saved recipes, individual ratings, history, reports and blocks are never shown to other users. Anything you publish can be seen by anyone using the app, and — like anything public — could be copied or screenshotted by them.

On your phone

The app keeps some things on your phone, and only there:

• Your sign-in tokens, in the iOS Keychain, and basic details of the signed-in account.
• Copies of recipes you've saved or recently viewed, so they work offline. They are cleared when you sign out or delete your account.
• Your signed-out pantry, allergies and dislikes, if you set them up.
• Cook-mode progress (the recipe, checked steps and timers), so you can pick up where you left off, and which screen you were on.
• Recently loaded recipe photos, as an ordinary image cache.
• Whether you've read the allergy disclaimer.

Cook-mode timer alerts are local notifications: they are scheduled on your phone, only if you allow them, and nothing is sent to us to deliver them. The app doesn't use push notifications. Deleting the app removes everything above except Keychain items, which iOS may keep; the app clears leftover sign-in tokens the next time it's installed.

Server logs and security

Like most online services, our servers log each request they receive: the time, your IP address, and what was requested. For signed-out browsing and searching, the requested address can include the search words and the allergy filters your phone sent. We use these logs only to keep the service running, investigate problems and protect it from abuse, and keep them only as long as that requires. To stop password guessing and spam, sign-in and sign-up attempts are limited per IP address; those counters are held in memory and not stored.

Connections between the app and our servers are encrypted. Passwords and long-lived sign-in tokens are stored only in hashed form, original photos are kept in private storage, and personal data is accessible only to the people who run the service. No system is perfectly secure, but we work to protect what you trust us with.

Service providers

We don't sell your information and don't share it with advertisers or data brokers. We use a small number of providers to run the service, who store and process data only on our behalf:

• a hosting provider, which runs our servers and database;
• a cloud storage and content delivery provider, which stores photos and database backups and delivers public recipe photos to the app, and also serves this website;
• Apple, if you use Sign in with Apple, and for downloading the app, under Apple's own privacy policy.

We may also disclose information if the law requires it, or where it's necessary to protect someone's safety or to investigate abuse of the service.

How long we keep things, and deleting your account

We keep your account information for as long as you have an account. You can delete your account at any time in the app: Profile › Settings › Delete Account. When you do:

• your email, password hash, Sign in with Apple identifier, handle, display name and bio are erased, and all your sessions are ended;
• your pantry, allergies and dislikes, saved recipes, history, the blocks you made, and every photo you uploaded are deleted;
• recipes you published stay up, credited to “[deleted]” and no longer linked to anything that identifies you — if you don't want a recipe to remain, delete it before deleting your account; unpublished drafts are kept too, visible to no one;
• your ratings remain only as part of each recipe's anonymous average; reports you filed and ingredients you requested stay in our moderation records, no longer tied to an identifiable account.

When you delete a single recipe, it disappears from the app for everyone and its photos are deleted; we keep the removed recipe's text in our database, hidden from everyone. Deleted photos can take some time to expire from caches (including the content delivery network and other people's phones).

Our database is backed up once a day, and each backup is kept for up to 14 days, so deleted information is gone from backups within about two weeks.

Your choices and rights

You can see and change your profile in the app, change or clear your pantry, allergies and dislikes at any time, and delete your account. Depending on where you live, you may also have the right to ask for a copy of your personal information, to have it corrected or deleted, or to object to how it's used. Email support@pantryshuffle.com and we'll respond; we may need to confirm the request comes from the account's owner.

Allergy information is not a guarantee

Allergen badges and allergy filtering are a convenience. Allergen information is derived from ingredient lists, many of them submitted by the community, and recipes can be mislabeled, incomplete, or change; packaged ingredients also vary by brand and region. If you have a food allergy or intolerance, always read the actual ingredient list of everything you cook with, and never rely on the app's filtering or badges as a guarantee that a dish is safe.

Children

Pantry Shuffle is not directed at children under 13, and we don't knowingly collect personal information from them. If you believe a child under 13 has created an account, contact us and we'll delete it.

Advertising and future changes

The app shows no ads today. We may add banner advertising in a future version (never in cook mode). If we do, we'll update this policy before that version is released, explaining what an advertising provider would receive, and ask for any permission the law or Apple requires. The same goes for any other change in what we collect or how we use it: the policy is updated first, the date at the top changes, and significant changes are described here rather than made quietly.

This website

pantryshuffle.com has no analytics, no tracking and no cookies of its own, and its pages load nothing from other sites. The provider that serves it processes your IP address to deliver the pages and protect them from attacks.

Contact

Questions about this policy or your data can be sent to support@pantryshuffle.com.