Privacy Policy

The short version

Larder helps you track the food in your kitchen. We only collect what we need to make that work: your email and the items you choose to add to your pantry. We don't sell your data, we don't run ads, and you can delete your account at any time.

What we collect

• Account data — your email address and an encrypted password, so you can sign in.
• Pantry data — the items you add to your pantry (name, quantity, category, expiry date, optional price).
• Receipt uploads — when you upload a receipt photo or PDF, we send it to Anthropic's Claude AI to extract the items, then store the extracted text-based item list. The original image is not retained after processing.
• Server logs — basic request logs (IP address, timestamps, error codes) for security and debugging. These are kept for at most 30 days.

How we store it

All data is stored in Supabase (PostgreSQL on AWS infrastructure, SOC 2 Type 2 compliant). Passwords are hashed with bcrypt — we never see them in plaintext. Sessions use JWT tokens with industry-standard ES256 signing.

Who we share it with

We share data with three vendors, only to operate the service:

• Supabase — database and auth provider.
• Anthropic — receipt images are sent to Claude AI for item extraction. Anthropic's data policy applies; they do not train models on API customer data.
• Render & Vercel — backend and frontend hosting.

We do not sell, rent, or share your data with advertisers, data brokers, or any other third parties.

Your rights

• Access — sign in and view your full pantry at any time.
• Correction — edit any pantry item directly from the app.
• Deletion — open the app sidebar and click Delete account. This removes your account, all pantry items, and all receipts immediately and irreversibly.
• Export — email hello@larder.app and we'll send your data as JSON within 30 days.

Cookies & tracking

We use a single first-party cookie to keep you signed in. We don't use Google Analytics, Facebook Pixel, or any third-party trackers. There are no advertising cookies.

Children

Larder is not directed at children under 13. We don't knowingly collect data from children under 13. If you believe a child has signed up, contact us and we'll delete the account.

Changes to this policy

If we make material changes, we'll update the “Last updated” date at the top and email registered users. Continuing to use the service after changes means you accept the updated policy.

Contact

Questions about this policy or your data? Email hello@larder.app.