Privacy Policy — Pantry Inventory & Fridge List

Last updated: 28 September 2026

This policy covers the Android app Pantry Inventory & Fridge List (package `com.veltislabs.pantryinventory`, "the app"), published by Veltis Labs LLC ("we", "us").

The short version

The app has no account and no server of ours. Everything you enter stays on your phone. We do not receive your pantry, your shopping list, your photos, your voice, or any identifier for you or your device. What does leave the phone is technical diagnostic data that two of Google's own libraries (the barcode scanner and Google Play Billing) send to Google, described below.

What the app stores, and where

Everything the app records is written to your device's own app storage:

• The locations you create, and the items in them — name, quantity, unit, minimum level, restock amount, optional use-by date, optional note.
• Your shopping list.
• Barcodes you have named, so a later scan of the same code fills the name in for you.
• Your settings: whether Pro is unlocked, whether the daily summary is on and roughly when, and your list filter.
• A reference to any photo you attach to an item. The photo itself stays wherever it already was; the app only stores a pointer to it.

None of this is transmitted anywhere. There is no copy on our systems, because we do not operate any systems that could hold one.

What we collect about you

Nothing reaches us.

We do not collect your name, email address, phone number, location, contacts, advertising ID, or any device identifier. There is no sign-up, no login, and no profile. We did not add any analytics, crash-reporting or advertising SDK of our own.

What Google's barcode scanner sends to Google

Barcode and QR scanning uses Google ML Kit, which runs on your phone. The images the camera sees are processed on the device and are never sent anywhere. ML Kit does, however, send Google a small amount of technical data over an encrypted (HTTPS) connection, which Google uses for diagnostics and usage analytics:

• device information: manufacturer, model, Android version and build;
• app information: this app's package name and version;
• a per-installation identifier that is not meant to identify you or your phone;
• performance and configuration details: how long a scan took, image format and size, the ML Kit feature version, and events and error codes such as "scanner started".

It contains nothing you typed and no pictures. Google does not pass it to third parties. We never receive it and cannot see or delete it; Google handles it under the Google Privacy Policy, https://policies.google.com/privacy . Google's own description of this data is at https://developers.google.com/ml-kit/android-data-disclosure .

Network access

The app uses the internet for three things, all provided by Google and none of which sends us your data:

1. 1. Google Play Billing, if you buy the one-time Pantry Pro unlock. Your payment is handled entirely by Google Play. We never see your card number, billing address, or any other payment detail — the app receives only a token from Play confirming that a purchase exists for your Google account.
2. 2. Google Play In-App Review, if the app asks you to rate it. Any review you write goes to Google Play, not to us, and is governed by Google's own terms.
3. 3. Diagnostics from Google's libraries: the ML Kit data described above, and Google Play Billing's own record of whether its calls to Google Play worked (for example "connected" or "could not reach Google Play"), with your device model and the app version. It is sent to Google over an encrypted connection, contains nothing you typed, and is handled under the Google Privacy Policy. We never receive it.

Every other feature — adding items, counting stock down, generating and completing a shopping list, scanning barcodes, voice entry, exporting your data, and household transfer — works with no network connection at all.

Camera

Camera access is used only while a scanning screen is open on your phone: reading a product barcode to add stock, or reading QR codes during a household transfer. Images from the camera are analysed on your device in real time and are never saved, never uploaded, and never sent to us. The app is fully usable if you decline camera access — you can type items in instead.

Microphone and voice

Voice quick-add uses your phone's own on-device speech recognition, with offline recognition requested explicitly. No audio recording is saved to storage and no audio is sent to us. Only the recognised text is used, to fill in the add-item form, which you then confirm before anything is saved. If your phone has no on-device recogniser, the microphone button is disabled rather than falling back to a cloud service.

The app is fully usable if you decline microphone access.

Photos

If you attach a photo to an item, it is chosen through the Android Photo Picker. That is a system screen: the app only receives the single image you pick and has no access to the rest of your gallery. The app does not request broad photo or storage permissions. Photos are never uploaded.

Notifications

The optional daily "running low" summary is switched off unless you turn it on. It is generated on your device from your own data and posted locally. Nothing about it leaves your phone.

When data leaves your device — always because you asked

Three features move information off your phone, and all three are started by you:

• Export all my data (JSON) and Export as CSV create a file and hand it to Android's share sheet. You choose where it goes. We never receive it.
• Household transfer displays your pantry as QR codes for another phone to scan. This is a direct device-to-device transfer over the camera. No network is used and no server is involved. The receiving side only accepts codes in this app's own transfer format and limits how much data a transfer may contain, so a QR code from anywhere else is ignored rather than acted on.
• Attaching a photo as described above.

Your data, your control

• Export — Settings → Export all my data. You get a complete JSON file of everything the app holds. This is never behind a paywall.
• Delete — Settings → Delete all data. Every location, item, list entry and saved barcode is removed from your device immediately and permanently. There is nothing to request from us and nothing for us to delete on our side, because we never had a copy.
• Uninstalling the app also removes its data from your device.

If you have Android's own backup switched on, your device may include the app's data in your personal Google backup. That backup belongs to you and your Google account; we have no access to it. You can turn it off in your device's system settings.

Purchases

Pantry Pro is a one-time purchase made through Google Play. Refunds, payment methods and purchase history are handled by Google Play under its own terms and privacy policy. The app stores only a local flag recording that your Google account owns the unlock, and re-checks that with Play each time it starts.

Children

The app is not directed at children and collects no personal information from anyone, including children.

Advertising

This version of the app contains no advertising and no advertising SDK. If that ever changes, this policy will be updated before the version containing ads is published, and the Play listing's Data safety section will be updated in the same release.

Changes to this policy

If this policy changes, the "Last updated" date above changes with it, and the updated version is published here before the release it describes.

Contact

Questions about this policy or about the app:

Veltis Labs LLC 30 N Gould St Ste R, Sheridan, WY 82801, United States Email: contact@veltislabs.com