Privacy Policy

Effective September 9, 2026 · Version 2026-09-09.1

Pantry Provisions Inc., a Wyoming corporation ("we", "us"), operates Sea Provisions. This policy covers our crew app, shore portal and related support services at sea-provisions.com and its subdomains. It applies to account users, crew members whose details are entered by a vessel or fleet, helpers and website visitors.

When a vessel or fleet provides information about its personnel, it also determines how that information is used for its own operations. Ask that organization about its own privacy practices. You may contact us directly about information held in Sea Provisions, whether or not you have an account.

1. Information we collect and its sources

For public sign-up, we use your email to send a verification link through Resend. A new account is created only after you complete that link and provide your name, vessel name, home port ZIP code and password. We store a password hash, the accepted terms and privacy versions, the acceptance time, and your confirmation of adult status and authority to create the workspace. Verification does not subscribe you to marketing emails. Temporary verification-request records are automatically removed from the active database starting one day after their one-hour link expires. Email copies, acceptance evidence, audit history and backups follow the retention practices below.

• Accounts and contacts: names, email addresses, telephone numbers, contact addresses, account roles, vessel/fleet associations, password hashes, authentication records and support messages. You or an authorized administrator may provide these details, including through account imports.
• Vessel, voyage and crew information: vessel names, crew names and roles, crew counts, dates, ports and selected locations, budgets, galley equipment, storage, cooking responsibilities, training indicators and notes. A selected or derived port/store location can include coordinates; the app does not request device GPS access.
• Dietary information: allergies, dietary restrictions and cultural food preferences entered by you or an authorized vessel/fleet representative. These may reveal health or religious information. Our Consumer Health Data Privacy notice explains this separately. Do not enter medical records or unnecessary sensitive details in notes.
• Provisioning activity: generated plans, item selections and swaps, retailer/store choices, cart-addition records, receiving, inventory, consumption, waste, helper names and relationships, and records of changes made by authorized users. Activity and audit records can include earlier values.
• Retailer connection: when you choose to connect a Kroger-family customer account, Kroger returns authorization credentials, permissions and expiry information. We store connection credentials encrypted to carry out your requests. We do not receive your Kroger password or payment-card details.
• Software billing: if you separately choose a paid subscription when available, Stripe collects your card and billing details through its hosted checkout. We retain payment-provider customer, subscription, checkout and invoice identifiers; selected boat selection, fleet membership and amounts; payment and cancellation status; credit purchases and use; and records of your billing agreement. Our app does not receive or store your full card number or security code. Account creation and free-credit use do not require a payment method.
• Technical information: IP addresses and request/error records processed by our hosting and security systems; browser or device information, time zone, notification preferences and delivery tokens when notifications are enabled; and storage needed for sign-in, security and offline work.

2. Why we use information

We use this information to provide and secure accounts, manage vessel and crew profiles, generate and update provisioning plans, locate stores, send selected products to a connected retailer cart, support receiving and inventory, deliver requested reminders, respond to support/privacy requests, investigate errors and misuse, maintain operational records, process authorized software payments and renewals, maintain credit balances, handle billing questions and disputes, and comply with applicable legal obligations.

Plan generation uses the inputs and catalog information available to the service. It assists purchasing decisions; it does not make employment, insurance, credit or medical decisions about you. We do not use personal information for advertising or train a general-purpose AI model on your personal information.

3. Who receives information

• Your vessel or fleet: users with authorized roles can access information within their permitted scope. A vessel account may be shared by its authorized crew, so information entered there should not be treated as private from those users. Helpers can access the plan/receiving information made available by the access link you or your administrator shares. Exported PDFs or lists can be saved or forwarded outside the app.
• Service providers: DigitalOcean hosts the production service and server backups in the United States. Google Firebase processes device identifiers and message delivery information for optional notifications. Our support mailbox is hosted by Microsoft. Support tickets include your name, reply email, topic, subject, message, optional vessel name and a ticket number. Tickets are saved on our servers and available only to platform support administrators. When automatic ticket notifications are enabled, Resend processes the ticket contents and reply address to send the notification to our support mailbox. We use these details to handle your request. Authorized support and infrastructure personnel may access data where needed to operate and protect the service.
• Payment processing: when card subscriptions are enabled and you choose to use them, Stripe receives billing contact information, payment details and transaction information to process payments, manage subscriptions, issue invoices and help prevent fraud. We share your billing account reference and selected software subscription; we do not send crew dietary or health profiles to Stripe. Stripe also processes information for its own security, fraud-prevention and legal purposes, as described in its Privacy Policy. Its hosted checkout and billing portal have their own privacy and storage practices. This software payment is separate from retailer checkout.
• Retailers you choose: Kroger receives authorization requests and the selected products, quantities and fulfillment information sent to its cart. Product choices may allow a retailer to infer dietary preferences. We do not send a separate crew allergy profile to Kroger. Retailer checkout, payment, cancellations and refunds follow the retailer's own terms and privacy policy.
• Legal and organizational requirements: information may be disclosed when legally required, to address fraud or threats, or to establish or defend legal claims. If the business is transferred or reorganized, relevant information may transfer subject to applicable law and notice requirements.

We do not sell personal information, rent customer lists, or share personal information for cross-context behavioral advertising. We do not operate advertising pixels or cross-site behavioral analytics. Service providers receive information for the functions described above, rather than an advertising program.

4. Cookies, device storage and optional features

We use authentication storage, a short-lived security cookie during Kroger connection, local preferences and offline storage. Optional push notifications require your device/browser permission. See Cookies & local storage for details and controls. The current production web apps do not load Weglot translation or third-party analytics scripts. Legal pages do not load external fonts or scripts. Choosing an available paid subscription opens Stripe-hosted checkout or its billing portal, where Stripe may use storage and device information for payment functionality and fraud prevention.

Do Not Track and Global Privacy Control: the service does not track you across unrelated websites for advertising. Its current behavior is the same with or without a Do Not Track signal. Because we do not sell or share personal information for targeted advertising, there is no such activity to opt out of; a Global Privacy Control signal does not enable any additional sharing.

5. Retention and deletion

Support tickets and related emails remain until reviewed for deletion under the support, dispute and legal needs described below. Marking a ticket resolved does not erase it. Ticket creation and status changes have audit records containing the ticket number and status, without copying the message into that audit record. Abuse protection uses keyed hashes of the submitting address and email, rather than keeping the raw network address in the ticket record.

We keep account and operational information while it is needed to provide the vessel/fleet service. The period depends on the account relationship, the relevant voyage and record, outstanding support or dispute matters, security needs and specific legal obligations. Inactive accounts and historical audit records are not currently erased automatically; an account-deletion request requires a review of associated records. Billing agreements, credit history, transaction references and dispute records may remain after a subscription is canceled where needed to honor credits, reconcile payments, handle disputes or meet legal obligations. Canceling renewal does not itself delete those records. Stripe retains payment information under its own applicable retention practices; a request to us does not represent that every payment record has been erased from Stripe.

When handling a verified deletion request, we delete or de-identify information no longer needed and explain any specific lawful exception. Shared business records can require coordination with the vessel/fleet; that does not remove your statutory rights. Disabling an account or deleting a vessel entry alone is not represented as complete erasure of audit history or backups.

Restricted backups, including encrypted recovery copies, can contain older records until they are deleted or expire. They are retained for recovery and legal/security needs rather than ordinary account use. A deletion request also requires review of backup copies and any restoration so deleted data is not returned to active use. Applicable deletion deadlines, including any special rules for health information, take precedence.

6. Your choices and privacy requests

You can review and update available profile fields, ask your administrator to correct vessel/crew information, disconnect Kroger from the cart flow, turn off reminders and revoke notification permission in device settings. You may also request access, a copy, correction, deletion, account closure or withdrawal of consent through Privacy requests & account deletion.

Depending on your location and which laws apply, you may have additional rights to restrict or object to processing, opt out of certain uses, appeal a refusal, authorize an agent, or complain to a privacy regulator. We verify identity proportionately, do not require a new account to submit a request, and will not unlawfully discriminate against you for exercising your rights. We respond within applicable legal deadlines and explain any permitted extension or refusal.

7. Security and processing location

We use HTTPS, password hashing, role-based access, restricted infrastructure access and protected backups. No system can guarantee absolute security. Please protect your credentials and helper links, sign out of shared devices, and report suspected unauthorized access to the contact below. The production service is hosted in the United States; service providers may process information where they operate. Your location may provide additional protections that remain applicable.

8. Children

Sea Provisions is intended for adults managing maritime provisioning. It is not directed to children under 13 and is not designed for children's accounts. Please do not enter information about a child. Contact us if you believe a child's information has been provided so we can investigate and remove it as required.

9. Changes and contact

We publish changes here with a new effective date. For material changes, we will provide a prominent notice in the service or another appropriate notice before the change takes effect, and seek additional consent where required. An updated policy does not itself authorize a new use that requires consent.

Contact Pantry Provisions Inc., Sea Provisions, at asherduben@pantryprovision.com. Use the subject “Sea Provisions privacy request” for privacy matters. See Support for general help.