Legal
Data protection notes – Pantrio
Supplementary notes to the general Data protection for the Pantrio app (Pantry, Shopping & Household) by Christian Tonke. One section per module: what is stored locally, which permissions are used and why, and whether data leaves the device.
Contents
Modules
Controller
Christian Tonke
Adelheider Str. 258
27755 Delmenhorst
Germany
Email: christian@tonke.de
Applies to all modules
- No user account. Pantrio does not require registration, an email address or signing in with me. I don't know who uses the app.
- Local only. All content lives in a local SQLite database inside your device's private app container; particularly sensitive fields are additionally encrypted with AES-256-GCM, with the key in the keychain (iOS Keychain or Android Keystore). Deleting the app removes this data.
- No server of mine. Pantrio has no server of its own. The only network connection is purchasing and verifying the subscription via StoreKit 2 (Apple) or Google Play Billing (
expo-iap) — Apple's/Google's own privacy terms apply there as well. - Sharing only by you. Exports, backups and reports (PDF/ZIP/CSV) are only ever shared through the system share sheet, when you trigger it yourself.
- Subscription. Pantrio is a subscription (€2.99/month, €24.99/year) with a free basic tier; purchase and management run entirely through Apple/Google — I never see any payment details.
1. Pantry & Fridge
Local only – data leaves the device only if you share or back it up yourself
What is stored locally: Food items, quantities, location, use-by/opened date, minimum quantity, origin, locally learned barcodes, notes, receipts.
Permissions: Camera (scan, photo), photo picker, notifications.
2. Shopping List
Local only – data leaves the device only if you share or back it up yourself
What is stored locally: Items, quantities, aisles, stores, aisle memory, receipts.
Permissions: Camera, photo picker.
3. Meals & Portions
Local only – data leaves the device only if you share or back it up yourself
What is stored locally: Recipes, ingredients, weekly plan with status, receipts.
Permissions: Camera, photo picker.
4. Household & Laundry
Local only – data leaves the device only if you share or back it up yourself
What is stored locally: Chores, rotation, completed log (who, when, minutes), first names, garments + care symbols, receipts.
Permissions: Notifications, camera, photo picker.
6. Lending
Local only – data leaves the device only if you share or back it up yourself
What is stored locally: Item, category, other person's name (free text), dates, condition when handed over/returned, extensions, reminder on/off, photo.
Permissions: Camera, photo picker, notifications.
7. Errands
Local only – data leaves the device only if you share or back it up yourself
What is stored locally: Errands, location as text, opening hours, return deadline and step, minutes on site, rounds, return-label photo, waiting-time notes (location, weekday, hour, minutes).
Permissions: Camera, photo picker, notifications.
8. Orders & Prices
Local only – data leaves the device only if you share or back it up yourself
What is stored locally: Retailer, contents, tracking number (text), carrier name, price, for whom, status history, pickup location/deadline, price notes, target prices, clothing sizes with brand/fit, photos.
Permissions: Notifications, camera, photo picker.
App stores
Pantrio is distributed through the Apple App Store and Google Play. The terms of service and privacy policy of Apple or Google apply to the payment process and billing.
Legal basis
Local processing on your device: Art. 6(1)(b) GDPR (performance of the contract/use of the app) or legitimate interest (Art. 6(1)(f) GDPR). Any voluntary sharing (export, share sheet) happens at your own initiative.
Your rights
Since all content lives exclusively on your device, you can view, change, export or delete it yourself at any time (app settings or uninstalling). For questions about this processing, reach me at christian@tonke.de.