Privacy policy

This policy covers pantryrx.ai, including the PantryRx web app at pantryrx.ai/app and the PantryRx dietitian program. It is provided by All Things AI, Inc. (“we”, “us”). The PantryRx apps for iPhone, iPad, Apple Watch and Android have their own app privacy policy.

Summary

The web app

The web app stores what you enter — kitchen items, eating style, allergies, dislikes, servings, plans, favorites, checked-off groceries and settings — in your browser's local storage on your device. It is not sent to our servers and is not linked to an identity. Clearing your browser data, or using “Reset all data” in the web app's settings, deletes it.

To run, the web app downloads the recipe catalog and published dietitian recipes from pantryrx.ai. Like any website, our servers receive standard request information (such as IP address, browser type and the page requested) to deliver the site, prevent abuse and keep it secure.

Instacart

If you choose to send your grocery list to Instacart, the web app sends the item names and amounts on your list to our server, which forwards them to Instacart to create a shopping-list page, and returns the link to you. We don't store the list. Instacart's handling of information on its site is governed by Instacart's privacy policy. PantryRx may earn a commission on qualifying orders.

AI assistants (MCP connector)

PantryRx can be used from AI assistants such as Muse, Claude or ChatGPT through our connector at pantryrx.ai/mcp. When you ask an assistant to plan meals, find recipes, check ingredients or build a grocery list, the assistant sends that request — for example your diet, allergies, foods to avoid, servings and the ingredients you have — to our server, which answers it and does not store it. The connector has no login and doesn't identify you. We keep daily counts of how often each tool is used and which assistant called it, never the request contents. Our servers receive standard request information (such as IP address) to deliver the service and prevent abuse; it's used for rate limiting and short-lived security logs. If you ask the assistant to send a grocery list to Instacart, the item names and amounts are forwarded to Instacart as described above. What the assistant itself stores is governed by that assistant's own privacy policy. Links we return include a tag naming the assistant, so our analytics can count visits that came from it.

Dietitian accounts

Signing in is only needed for the dietitian program. We use Google Sign-In; Google shares your name, email address, Google account identifier and profile photo with us. We don't receive your Google password.

When you apply, we collect the information you provide: display name, credentials, registration body, registration or license number, state or province, country, years in practice, specialties, bio, links, headshot and what you'd like to publish. We use it to verify your registration, to review and publish your work, and to contact you about your application and submissions.

What's public: once you're approved, your display name, credentials, bio, specialties, links, headshot and published recipes and articles are shown on pantryrx.ai and may be included in the PantryRx apps. What's never public: your email address, registration or license number, and reviewer notes.

We keep a record of review activity (for example, when something was submitted, approved or unpublished) for accountability.

Uploaded images are re-encoded when you upload them, which removes embedded metadata such as camera location.

Analytics

We use Google Analytics on pantryrx.ai to understand which pages and features are used, with IP anonymization enabled. The web app sends a small number of anonymous usage events (such as “plan built” with the number of meals, or “recipe opened”). It never sends your diet, allergies, pantry contents or grocery list to analytics.

Cookies

• Necessary: a session cookie (only if you sign in) and a security (CSRF) cookie that protects forms.
• Analytics: Google Analytics cookies (for example _ga) that distinguish visits. You can block them with your browser settings or Google's opt-out add-on without affecting the site.

The web app also uses your browser's local storage, described above.

Sharing

We share information only with service providers that run the site for us — Amazon Web Services (hosting, storage and email delivery) and Google (sign-in and analytics) — with Instacart when you request a cart, when required by law, or to protect the rights and safety of users and the public. If we're involved in a merger or acquisition, information may transfer as part of that transaction under this policy.

Retention and your choices

Dietitian account and application information is kept while your account is active. You can edit your profile in your studio at any time. To delete your account and application data, email support@allthingsn.com from the email address you signed in with; published work is removed from pantryrx.ai as part of deletion, though copies already included in released app versions may remain until those apps are next updated. Server logs are kept for a limited period for security.

Depending on where you live, you may have rights to access, correct, delete or port your personal information, or to object to certain processing. Email us and we'll respond within the time required by applicable law.

Other details

Health information. PantryRx is a general meal-planning and nutrition information service. It does not provide medical care, and we are not a healthcare provider.

Children. pantryrx.ai is not directed to children under 13, and the dietitian program is for licensed professionals only.

Where data is processed. Our servers are in the United States.

Changes. If we make material changes, we'll update the date above and, for dietitians, notify you by email.

Contact. All Things AI, Inc. — support@allthingsn.com