Terpenology Legal
Privacy Policy
Terpenology is operated by Short Point Five LLC, a Pennsylvania limited liability company. We are the data controller for information collected through this app.
Contact: privacy@shortpointfive.com
We collect information in two ways: what you give us directly, and what the app generates as you use it.
Information you provide:
Information generated automatically:
If you subscribe to Terpenology+:
Your payment card number is entered on our payment processor's checkout, not collected or stored by us. Outside of a Terpenology+ subscription or a support request, we do not require your name, phone number, or other contact details to use the app.
Sensitive information. The information you choose to enter about your health conditions, medications, cannabis use history, and terpene sensitivities can reveal details about your physical and mental health. Because of this, we treat it as sensitive personal data. We collect this type of information only when you choose to provide it, and only so that Terpenology can generate personalized strain scores and analyses for you. We do not use this sensitive information for advertising, we do not sell it, and we do not share it with third parties except as necessary to operate the app as described in this Policy.
We use your data solely to operate and improve Terpenology:
We do not use your data for advertising, profiling outside the app, or any purpose other than those listed above.
Automated analysis and AI tools. Some of Terpenology's features use automated analysis and AI models to generate strain scores, terpene and effect insights, and in-app companion responses based on the information you provide. These tools help you understand your own data, but they do not make decisions for you, and they do not replace professional medical advice. You remain in control of your health decisions, and you should never rely on automated outputs from the app as a substitute for talking with a qualified health care professional or your dispensary pharmacist.
Your profile and usage data is stored in Supabase, a secure cloud database provider. Data is encrypted at rest and in transit. Supabase is HIPAA-eligible and SOC 2 Type II compliant.
Strain analysis requests are processed via the Anthropic API (Claude). These requests include strain details and relevant profile context. Anthropic does not use this data to train its models under standard API terms.
AI companion conversations. When you chat with Aria, Jeff, or Kira inside the app, each message is sent to the Anthropic API along with your selected persona, any profile fields you have shared, the active strain’s analysis if you are discussing one, and the recent turns of that conversation so the companion can follow what you are saying. Conversation transcripts are not stored on our servers. Chat history lives only on your device for the duration of the session, so you can pick up where you left off, and it clears when you reset or close the chat. The same Anthropic standard-terms protection applies: this data is not used to train models.
Subscription data. If you subscribe to Terpenology+, we store a small entitlement record in Supabase keyed to your email: your subscription status, plan, and current period end, so the app can confirm and restore your access. Your payment is processed by a third-party payment processor that handles your card details under its own security and privacy terms; we do not receive or store your full card number.
We retain your data for as long as your account is active and for a reasonable period afterward if needed to maintain the continuity of your experience in case you return. If you delete your account, we will remove your personal profile and usage data from our active systems within 30 days, subject to limited retention of subscription and transaction records where we are required to keep them for tax, accounting, fraud-prevention, or legal compliance purposes. When we no longer need personal data, we will either delete it or de-identify it so that it can no longer reasonably be linked to you.
We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:
When you submit strain notes or ratings to the community database, that content may be visible to other Terpenology users in aggregated or anonymized form. We do not display your personal health profile or individual identity alongside community contributions.
You have the right to:
To exercise any of these rights, email us at privacy@shortpointfive.com. We will respond within 30 days.
We understand that the health information you provide, including medical conditions and cannabis use history, is sensitive. We treat it with the highest level of care and do not share it with any third party except as necessary to run the app (see Section 5).
You are never required to enter sensitive health information. The more you provide, the more personalized your strain scores will be, but the app works at whatever level of detail you are comfortable with.
Some browsers offer a "Do Not Track" (DNT) setting or send other signals that express your choices about online tracking. At this time, there is no industry standard that defines how to respond to these signals, and our services do not alter their behavior in response to DNT. As noted above, we do not sell your data or use it for targeted advertising. If the standards for responding to browser signals change or if our data uses change, we will update this Policy to explain how we honor such signals.
Terpenology is not intended for users under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us at privacy@shortpointfive.com and we will delete it promptly.
We may update this Privacy Policy from time to time. We will post the revised policy here with an updated effective date. If changes are material, we will notify you within the app. Continued use of Terpenology after changes are posted constitutes your acceptance of the updated policy.
Privacy questions, data requests, or concerns:
Short Point Five LLC
privacy@shortpointfive.com