Our security approach
Pantrio follows the principle of data minimization and aims not to request data that is unnecessary for a feature to operate. Secure connections, access restrictions, and access records are used where needed.
Data types and purposes
| Data | Purpose | Sharing | Retention approach |
|---|---|---|---|
| Refrigerator or food photo | Ingredient recognition and recipe suggestions | As needed with analysis providers | For the time needed to process it; saved by user choice if the feature allows |
| Barcode number | Product recognition | With the product-data provider | May be retained if ingredient history is enabled |
| Ingredient and recipe preferences | Personalization and saved recipes | With hosting or infrastructure providers | Until deleted by the user or the account is closed |
| Account information | Sign-in, synchronization, and support | With authentication or infrastructure providers | While the account remains active and for mandatory legal periods |
| Technical diagnostics | Troubleshooting and security | With error-reporting providers | For a limited technical period |
Protective measures
- HTTPS/TLS connections for data in transit;
- Restricted authorized access;
- Avoiding the collection of unnecessary data;
- Evaluation of security incidents;
- A defined contact channel for deletion and access requests.
No internet-based system can guarantee absolute security. Reasonable technical and administrative measures are used to reduce potential risks.
Device permissions
Camera
Used for taking photos and scanning barcodes. If permission is denied, these features may not work; other features may remain available.
Photo library
May be requested if you choose an existing image. Pantrio does not automatically scan your entire library.
Notifications
If recipe or app reminders are offered, they are enabled only with your permission.
Location, contacts, microphone, and health data are not required for Pantrio’s stated core features. If this changes, Pantrio will provide a separate explanation and request permission.