Privacy Policy

How Pami handles account data, household information, photo analysis, essential cookies, and optional diagnostics.

Last updated: November 9, 2026

This Privacy Policy explains what information Pami collects, how we use it, when we share it, and what choices you have.

1. Who we are

Pami is operated by Adam Zverka, operating Pami, the data controller for this policy.

Support: support@yourpami.com

Privacy: privacy@yourpami.com

Jurisdiction: Slovakia

2. Information we collect

We collect the information needed to provide and secure Pami, including:

  • account and contact information, such as your email address, name or profile name, and sign-in details
  • household, pantry, inventory, shopping-list, category, location, quantity, expiry, and related data you create or edit
  • photos or extracted text you choose to submit for item suggestions, and lists you paste in to move from another app
  • notification subscription details if you enable push notifications
  • Pami Pro purchase and subscription status if you subscribe, such as the plan, trial, renewal and expiry dates, and the store you bought it from (we do not receive your payment card details)
  • anonymous counts of which screens are opened and a few actions, such as starting a scan (see section 5)
  • optional diagnostics and error reports if you choose to share them
  • technical information needed for sign-in, security, troubleshooting, and app operation
  • support messages or other information you send to us

3. Photo capture, OCR, and AI-assisted suggestions

When you use photo capture, Pami processes the photo or extracted text to suggest pantry items. You review suggestions before items are saved to your pantry.

Depending on your device and capture method, Pami either reads the text on your device (Apple's on-device text recognition on iPhone) and sends that text to Pami, or uploads the photo to Pami. Either way, Pami sends the photo or its text to Google (the Gemini API), which analyzes it on Pami's behalf to suggest items. The permission screen in the app names this provider, and if Pami ever changes it, Pami asks for your permission again before your photos go to a different one.

When you paste a list from another app under Move from another app and add it to your pantry, Pami sends the text of that list to the same provider, with the same permission, to sort the items into your categories and places. Without that permission the list is not sent anywhere: each line simply becomes an item for you to review. Pami does not keep the pasted text; only the items you save are stored.

Pami asks for your permission before the first photo is analyzed. You can withdraw it anytime in Settings, Privacy & legal, Photo analysis by followed by the provider's name. Without it, photo capture is off and you can still add items by hand.

Your photos are not used to train AI models. Google does not train its models on data Pami sends through its paid API. To detect abuse, Google may keep that data for up to 55 days before deleting it. Pami deletes uploaded photos within 24 hours. Any future training-data or dataset-contribution feature would be optional, separate, and off by default.

Voice adding to the shopping list (Pami Pro, iPhone)

When you add items by voice, your iPhone turns your speech into text on the device using Apple's speech recognition. The audio never leaves your phone and Pami never receives it. Pami sends the dictated text, together with the names of the items on your shopping list, to Google (the Gemini API), which works out which items to add, remove, or change. You see the changes before they are saved.

Pami asks for your permission before your first dictation. You can withdraw it anytime in Settings, Privacy & legal, Voice adding by followed by the provider's name. Pami does not store the dictated text; it keeps only a record that a request was made, with its size and cost, for budgeting and abuse prevention. Google does not train its models on data Pami sends through its paid API and may keep it for up to 55 days to detect abuse.

Item names for Siri, Spotlight, and search

So that Siri, Spotlight, and search can find your items in other languages and by related words (for example "milk" for an item you called "Mlieko"), Pami sends the names of the items in your pantry to Google (the Gemini API) in the background. Only the names are sent, without your account, household, quantities, or photos. Google returns translations, other common names, and food categories, which Pami stores with the item in your household. This data is not used to train AI models; Google may keep it for up to 55 days to detect abuse.

When the same item name appears in at least five different households, Pami may add that name, with its translations and categories, to a shared food dictionary so it does not need to be sent again. The dictionary is not linked to any account or household. Names that appear in fewer households, such as personal names for a dish, stay only in your household.

When you use Siri, Spotlight, or Shortcuts, Apple processes your request under Apple's own privacy policy, and the list of your item names that Pami gives Siri and Spotlight stays on your device. If Pami cannot tell which item you meant and you have allowed photo analysis by Google, Pami may send what you said and the names of your items to Google to pick the right one.

4. How we use information

We use information to:

  • create and manage your account
  • authenticate you and keep your account secure
  • provide Pami features and sync your data
  • support shared household functionality
  • generate item suggestions for your review
  • deliver notifications you enable
  • diagnose problems and improve reliability
  • understand which parts of Pami are used, so we know what to improve
  • prevent abuse, fraud, and unauthorized access
  • respond to support requests
  • comply with legal obligations

Where applicable, Pami processes account and app data to provide the service, security and reliability data and anonymous usage statistics based on legitimate interests or legal obligations, and optional diagnostics or notifications based on consent where required.

5. Cookies, local storage, and similar technologies

Pami uses cookies, local storage, and similar technologies that are necessary for sign-in, security, remembering preferences, notification setup, and app operation.

At this time, Pami does not use marketing cookies.

Anonymous usage statistics

To see which parts of the app people use, for example how often a visit to the pantry leads to a scan, the app tells Pami's servers which screen was opened, which screen came before it, and a few actions such as adding an item. It sends no name, account, device identifier, item names or anything you type, and Pami does not store your IP address with it. Pami keeps only daily totals for all users together, never a record per person, and deletes them after 13 months. Our own test accounts are left out.

This is based on our legitimate interest in improving Pami. It is on by default and you can turn it off anytime in Settings, Privacy & legal, Anonymous usage statistics; the app then sends nothing. It is not used for advertising or to track you across other apps or websites.

6. When we share information

We do not sell personal information.

We share information with service providers only as needed to operate Pami, including:

  • hosting and infrastructure providers
  • authentication providers (Apple or Google) if you sign in with them
  • Google (Gemini API), for photo analysis, if you allow it
  • Google (Gemini API), for voice adding to the shopping list, if you allow it
  • Google (Gemini API), for translations and categories of item names (see section 3)
  • notification providers if you enable notifications
  • Apple (the App Store) and RevenueCat, our subscription-management provider, if you buy Pami Pro
  • transactional email providers

Error reports from Pami's servers and, if you choose optional diagnostics, error and performance reports from the app go to Pami's own error-tracking system, which runs on Pami's servers in the European Union. They are not shared with an error-tracking provider.

We may also disclose information when required by law, to protect the security or rights of Pami and others, or in connection with a business transfer, reorganization, or sale.

7. Retention

We keep account, household, pantry, and shopping-list data while your account is active or as needed to provide the service, comply with law, resolve disputes, and maintain security.

Uploaded photos are deleted within 24 hours of upload. Notification subscription details are kept while notifications are enabled or until account or device cleanup. Error reports are deleted after 30 days and server logs after 14 days. Other diagnostics are kept only as long as needed for reliability, security, and operations.

8. Your rights

Depending on your location, you may have rights to access, correct, delete, export, object to, restrict, withdraw consent for certain processing, or complain to a data protection authority.

You can save a JSON copy of your profile and active household data from Settings, Privacy & legal, Export my data. See the export and account deletion instructions. Export files contain personal information; keep them private and delete them separately when no longer needed.

For other privacy, deletion, or access requests, contact privacy@yourpami.com or visit https://yourpami.com/support.

9. Children’s privacy

Pami is not directed to children, and we do not knowingly collect personal data from children.

10. International transfers

Pami's servers and database backups are hosted in the European Union.

Some service providers process data outside the European Economic Area (EEA):

  • Google processes the photos or text you send for item suggestions, and this can involve servers in the United States.
  • Google processes item names for translations and categories, and this can involve servers in the United States.
  • Sign-in, notification, and email providers may process data in the United States when you use their features.

When personal data leaves the EEA, we rely on a European Commission adequacy decision, such as the EU-US Data Privacy Framework for certified providers, or on the European Commission's Standard Contractual Clauses. You can ask for more information about these safeguards at privacy@yourpami.com.

11. Security

We use reasonable technical and organizational measures to protect personal data. However, no method of transmission or storage is completely secure.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we do, we will update the "Last updated" date at the top of this page.

13. Contact

If you have questions about this Privacy Policy or want to make a privacy-related request, contact privacy@yourpami.com or visit https://yourpami.com/support.