Privacy Policy

Effective date: October 4, 2026

Pantri is an AI-powered grocery app that builds a weekly grocery cart from a user's meal plan. Pantri is not yet available to the public. This website lets people in the United States join a waitlist so we can email them when Pantri launches and share occasional product updates.

This policy explains what we collect when you visit this website or join the waitlist, how we use it, and the choices you have. In this policy, "Pantri," "we," and "us" mean Pantri.

1. What we collect

What you give us

Your email address, when you join the waitlist. That is the only thing the signup form asks for.

What we record when you sign up

The date and time you signed up, when you confirmed your email, which version of our signup notice you agreed to, which page you signed up from, and, if you unsubscribe, the date you did.

What is collected automatically

Like any website, our hosting and server providers see basic request information when your browser connects, such as your IP address, browser type, and the time of the request. This appears in their server logs. To limit spam, our signup service uses your IP address only to count signup attempts, and it keeps a scrambled (hashed) form of it, not the address itself.

We also use Cloudflare Web Analytics to understand how many people visit this website and how quickly its pages load. It measures things like which pages are viewed, which sites send visitors to us, and page performance, and it shows us the results as totals. It does not use cookies or other storage on your device, and it does not track you across other websites or build profiles of individual visitors.

What we do not collect

We do not ask for or collect your name, phone number, mailing address, payment information, precise location, or any sensitive personal information (such as health, financial, biometric, or demographic information). There are no accounts or passwords. We do not get information about you from other sources.

2. How we use it

• To send you a one-time verification code that confirms your signup.
• To tell you when Pantri opens, and to send launch news and a monthly update.
• To answer your messages and handle requests about your information.
• To keep the waitlist secure and free of spam and abuse.
• To follow the law and protect our legal rights.

We do not sell your information, share it for advertising, or use it to make automated decisions about you.

3. Who we share it with

We use service providers to run the waitlist. They handle your information only to provide their services to us.

• Supabase stores the waitlist database and runs our signup service.
• Resend sends our emails, including verification codes. Our emails do not use open or click tracking.
• Cloudflare hosts this website, helps protect it from abuse, and provides our privacy-focused website analytics.

This website loads its fonts and images from our own hosting, not from other companies' servers.

We may also disclose information if the law requires it, to protect our rights or the safety of others, or as part of a merger, sale, or financing involving Pantri. We do not sell personal information, and we do not share it with affiliates or business partners for their own purposes. Our servers are in the United States.

4. Cookies and similar technologies

We do not use advertising or social media cookies, tracking pixels, or ad networks. Our website analytics (Cloudflare Web Analytics, described above) do not use cookies or other storage on your device. Our Cookie Policy has the full details.

• Cloudflare bot-protection cookie. When your browser contacts our signup service, Cloudflare may set a cookie named __cf_bm. It helps tell real visitors from bots, is strictly necessary for security, and expires after 30 minutes.
• Session storage. While you sign up, your browser keeps your email address and your place in the signup steps in its session storage, so refreshing the page does not lose your progress. It stays in your browser, is not sent to anyone else for this purpose, and is cleared when you close the tab.

You can block or delete cookies in your browser settings. Blocking the Cloudflare cookie may keep the signup form from working. Because we do not sell or share your information for advertising or track you across other sites, there is nothing for browser opt-out signals such as Global Privacy Control or Do Not Track to change, and we do not respond to them separately.

5. How long we keep it

• Signups you never confirm are deleted within about a week.
• Your email and signup records are kept while you are on the waitlist, and deleted two years after you confirm your signup if you are still waiting by then.
• If you unsubscribe, we keep your email and the unsubscribe date for up to one year so we never email you again by mistake, then delete them.
• If you ask us to delete your information, we will, as described in section 8.
• The scrambled IP counters used to limit spam are deleted within about a day.
• Server logs kept by our hosting and database providers follow those providers' own schedules.

6. Security

The waitlist database can be read and written only by our server, not directly from the internet. Verification codes are stored only in scrambled form and expire after 10 minutes. We limit how often one person can request codes. No system is perfectly secure, but we take reasonable steps to protect your information.

7. Children

This website and Pantri are for adults. We do not knowingly collect information from anyone under 18. If you believe someone under 18 has joined the waitlist, email pantri.team@gmail.com and we will delete the information.

8. Your privacy rights

Depending on where you live in the United States (for example California, Colorado, Connecticut, Virginia, Texas, and many other states), you may have the right to:

• know whether we process your personal information, and access it, including a copy;
• correct inaccurate information;
• delete your information;
• opt out of the sale or sharing of your information, targeted advertising, and profiling (we do none of these);
• not be treated differently for using your rights.

How to make a request

Email pantri.team@gmail.com, using the email address you signed up with. We may ask you to confirm it is yours, and we will use what you send only for that purpose. You can also use an authorized agent, who must show written permission from you. We will respond within 45 days. If we need more time, we may extend that by up to 45 days and will tell you why.

If we say no

If we decline your request, you can appeal by replying to us at the same address. We will answer your appeal in writing within 60 days. If we deny the appeal, you can contact your state attorney general.

California

In the past 12 months we collected these categories of personal information: identifiers (your email address and, in hashed form, your IP address) and internet or network activity (basic request information in provider server logs). We disclosed them only to the service providers listed in section 3, for the business purposes in section 2. We have not sold or shared personal information, and we do not collect sensitive personal information. We do not disclose personal information to third parties for their own direct marketing, so there is nothing to report under California's "Shine the Light" law.

Email choices

Every marketing email has an unsubscribe link. Using it stops all email from us right away. We may still send a one-time message that you asked for, such as a verification code.

9. Changes to this policy

If we change this policy in a meaningful way, we will update the effective date above and, where appropriate, tell you by email. When Pantri launches, we will update this policy to cover the app before it collects any new information.

10. Contact

Questions or requests about this policy or your information:
pantri.team@gmail.com