Privacy policy

Your account: your email address, your name if you give one, and your password. These are handled by our sign-in provider, Clerk. We never see or store your password. Your meals: the meals you save, including titles, ingredients, method, nutrition, tags, favourites and any photos you add or take of recipe cards. Your shopping list: which meals you've picked, how many portions, and which items you've ticked off.

Your collections and shared lists: the collections you make or join, the recipes in them, who's in them, and the name other people see (your first name, or the start of your email address if you haven't given one).

Your food diary, if you turn it on: what you've logged and when, the foods you've saved, and your targets and settings. The body details used to suggest a calorie target (height, weight, age, sex and how active you are) stay on your device and aren't sent to us.

Your purchases: if you buy card reads or Panful Plus, Apple tells us what was bought and when, so we can unlock it. Apple handles the payment. We never see your card details.

Usage records: the days your account uses the app, and for each card read and food estimate, when it happened and how much of Claude's processing it used. We look at these ourselves to see what Panful costs to run and to set fair limits.

We don't use advertising, third-party analytics or tracking, and we don't sell or share your data for marketing. The website doesn't set cookies, apart from a sign-in cookie on our own staff pages.

To keep your meals, shopping list and food diary in your account and in sync across your devices. To show your collections and shared lists to the people you share them with. To send account emails, such as password reset links; Clerk sends these for us.

To read recipe cards: when you scan a card that isn't already known, its photos are sent to Anthropic's Claude AI to extract the recipe. The check for blurry or dark photos runs on your device, as do the Quick, Quick prep and One-pot labels read from the card.

To estimate food: when you describe what you ate in Add food, that text and the names of your saved foods are sent to Claude to estimate the nutrition. We record that an estimate was made and how big it was, so we can see what the feature costs, but we don't keep the text apart from the diary entries you save.

Anthropic processes photos and text to return the result under its commercial terms and doesn't use them to train its models. See Anthropic's privacy policy.

Collections and shopping lists can each be shared with up to six people. Everyone in a collection sees its name, who's in it, and the recipes in it, including their photos. Everyone on a shared list sees the meals and items on it, and who ticked each item off. Your other meals stay private unless you add them.

You invite people with a QR code or AirDrop. Anyone with the invite can see the collection's name, who's in it and how many recipes it has before they join, so only share it with people you mean to. You can make a new code at any time, which stops old invites working, and you can remove people or stop sharing.

If someone saves one of your recipes to their own Meals, that copy is theirs and stays with them. Leaving a shared list keeps a copy of it for you. Your food diary is never shared.

Some features never send anything to us. Cooking mode reads steps aloud using your device's own voices. Photos you share to Panful from other apps go straight into the card scanner on your device. When you scan a barcode, your device looks it up in Open Food Facts, a free food database; only the barcode is sent, not your account.

Apple Health is optional. If you allow it, Panful writes the nutrition of what you log to Health and can read your active calories and weight to adjust your targets. Health data stays on your device. We never send it to our servers or use it for anything else.

Many recipe cards print a code, such as “R‑1417”. When a card with a code is read for the first time, the recipe text (title, ingredients, method and nutrition) is stored under that code, so the next person who scans the same card gets the recipe straight away. The library holds recipe text only. It doesn't include your photos, your account or anything that says who scanned the card. Photos of your cards and meals stay in your account.

We use these providers to run Panful: Clerk (accounts and sign-in), Vercel (website, servers and photo storage), Neon (database), Anthropic (reading recipe cards and estimating food) and Apple (App Store purchases). They process data on our behalf, and some may do so outside the UK. Where they do, they use safeguards such as standard contractual clauses.

We keep your account data until you delete your account. Deleting a meal removes it and its photos, and takes it out of any collections it was in. Deleting a diary entry or saved food removes it.

In the app, open Settings Delete account. This permanently deletes your account (including your sign-in with Clerk), meals, photos, shopping list, food diary and the collections you made, and removes you from anything shared with you. You can also email support@panful.app and we'll do it for you. Recipe text in the shared library isn't linked to you, so it stays, as do copies other people saved to their own Meals. The record of what your card reads and food estimates cost stays too, but is no longer linked to you.

Under UK data protection law you can ask for a copy of your data or ask us to correct, delete or restrict it. Email support@panful.app. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office.

Panful isn't aimed at children under 13, and we don't knowingly collect their data. The food diary doesn't suggest calorie targets for anyone under 18.

If this policy changes, we'll update this page and the date at the top.