Privacy Policy
We may collect account information (email address, name, profile image), in-app data (shopping lists, stock, recipes, and family group data), payment-related records, device information, logs, advertising-related information when ads are shown in the free tier (such as advertising IDs including IDFA / GAID, ad impression and interaction data, and consent status), and anonymized error reports when the user opts in from app settings, and usage-analytics events such as in-app actions and screen transitions (including a pseudonymous identifier, with no user-entered text or content; can be disabled in app settings).
We use information to provide and improve the service, authenticate users, sync household data, respond to inquiries, prevent abuse, send service notices, deliver and display ads in the free tier and measure ad effectiveness, and produce aggregated, non-identifying statistics and analyze usage.
PantryMix may use Supabase for cloud backend, database, and authentication; Apple Sign In and Google Sign In for authentication; App Store, Google Play, and RevenueCat for subscription billing and entitlements; Firebase Cloud Messaging for push notifications; and Google Mobile Ads for advertising in the free tier. This website serves its fonts from the same site. Each provider processes data under its own privacy policy.
Data may be processed on servers located outside your country, including Japan and the United States. We rely on safeguards offered by these providers and applicable transfer mechanisms. See the International Transfer Details and External Data Transmission pages for provider, country/region, why locations may vary, and transmission details.
We retain account and service data while your account exists and for as long as needed to provide PantryMix. After account deletion, we delete or anonymize eligible data within a reasonable period, except records needed for legal, accounting, dispute, security, or abuse-prevention purposes. Purchase, billing, inquiry, and abuse-prevention records may be retained as needed for legal compliance, disputes, accounting, and fraud prevention.
Data is transmitted to our servers over TLS (HTTPS). At-rest encryption, redundancy, and access controls are managed by our infrastructure providers, including Supabase. No system is completely secure; please use a strong, unique password and platform-level protections where available.
You may request notice of purpose, access, correction, addition, deletion, suspension of use, suspension of third-party provision, withdrawal of consent, or objection to certain processing. Use the contact form and select the personal information request category. Include your name, contact details, target account or data, and requested action. We may ask you to verify through the registered email address, provide identity documents, or provide authority documents for an agent. Disclosure is provided in principle by email or another electronic method. If a fee is set for purpose notice or disclosure, we will explain the amount, payment method, and reason when accepting the request.
PantryMix is not currently distributed in the European Economic Area (EEA), the United Kingdom, or Switzerland. If applicable law grants rights to users in those regions or regions with similar rights, you may have rights to access, rectification, erasure, restriction, portability, objection, consent withdrawal, and complaints to a supervisory authority. If we later begin distribution in the EU / EEA or the United Kingdom and applicable law requires an EU or UK representative, we will appoint one and show the representative contact details in this policy or in the app.
This website uses only essential storage and does not use third-party analytics cookies. The mobile app may use device identifiers, local storage, and advertising identifiers for authentication, feature delivery, and ads in the free tier. If Google AdMob ads are shown, IDFA / GAID, device information, ad impression and interaction data, and consent status may be sent to Google and partners for personalized or non-personalized ads depending on consent and device settings. iOS may request ATT permission, Google UMP / CMP may manage consent in applicable regions, and consent or advertising ID settings can be changed in device or app settings.
PantryMix is not directed at children under 13, or the higher age set by local law. If you believe a child has provided personal information, contact us and we will delete it after verification.
We may update this policy. The last updated date indicates the latest revision, and material changes will be announced in the app or on this website. For privacy questions, personal information requests, or GDPR and similar rights, use the contact page. Operator: MIGIWA-YA, Yokohama, Japan. The representative name will be disclosed promptly upon request.