PantryAtlas is a global platform. Whether you are managing a kitchen in Perth, Manila, Paris, or New York, we are committed to protecting your data. This policy is designed to comply with the EU/UK GDPR, California's CCPA/CPRA, Australia's Privacy Act, Philippines' Data Privacy Act, Brazil's LGPD, and other international data protection frameworks.
1. Universal Information Collection
We collect information only when we have a legal basis to do so.
- Information You Provide: Account credentials, business registration, supplier lists, and inventory data.
- Automatically Collected Data: Device type, OS version, IP address, and app usage statistics (via Google Play Services).
- Sensitive Data: We do not collect "Special Category" data (biometrics, health, or political beliefs) unless it is functionally necessary for the app and you have provided explicit consent.
2. Global Lawful Basis for Processing
We process your data under the following legal umbrellas:
- Performance of Contract: To provide the inventory services you signed up for.
- Consent: When you opt-in to marketing or specific data-sharing features.
- Legitimate Interests: To prevent fraud, ensure app security, and improve performance.
- Legal Obligation: When required by global tax, labor, or security laws.
3. Global Data Subject Rights
Regardless of where you live, PantryAtlas grants you the following "Universal Rights":
- The Right to Know/Access: What data we have and how it's used.
- The Right to Correct: Fix inaccurate business or personal information.
- The Right to Delete: Request the "Right to be Forgotten."
- The Right to Portability: Move your inventory data to another provider.
- The Right to Non-Discrimination: We will never deny service or change prices because you exercised your privacy rights.
4. Regional Specific Addendums
A. United States (CCPA/CPRA - California & Others)
- No Sale of Data: We do not sell your personal information or business data to third parties.
- "Sharing" for Advertising: We only share limited technical identifiers with service providers (e.g., analytics) to improve the app.
- Shine the Light: California residents may request a list of categories of personal information disclosed to third parties.
B. European Union & UK (GDPR)
- Data Controller: PantryAtlas is the controller of your data.
- International Transfers: We use Standard Contractual Clauses (SCCs) to protect data transferred outside the EEA/UK to Australia or the Philippines.
C. Australia & Philippines
- Accountability: We remain responsible for your data even when processed by offshore sub-processors (APP 8 & DPA Section 21).
- Breach Notification: We adhere to the 72-hour notification window for high-risk breaches.
D. Brazil (LGPD) & Canada (PIPEDA)
We maintain a dedicated Data Protection Officer (DPO) to handle requests from these regions and ensure all processing is proportional to the service provided.
5. Google Play Store "Data Safety" Compliance
To comply with Google's Developer Policy:
- Data in Transit: All data is encrypted using HTTPS/TLS.
- Data Deletion: We provide a functional link within the app settings for users to request account and data deletion.
- Third-Party SDKs: We vet all SDKs (like Firebase or Sentry) to ensure they meet our privacy standards.
6. Children's Privacy
PantryAtlas is a business-to-business (B2B) hospitality tool. We do not knowingly collect data from individuals under the age of 18 (or the relevant age of majority in your country). If we discover such data has been collected, it will be deleted immediately.
7. How to Contact Us
For any privacy-related inquiries, data access requests, or to contact our DPO:
Email:[email protected]