Privacy Policy

weed.menu is built on trust. You're sharing personal preferences, health context, and consumption habits with us. We don't take that lightly. This policy explains exactly what we collect, why we collect it, and what we'll never do with it.

If something here is unclear, email us: press@weed.menu

What We Collect

Your Account

When you sign up or join the waitlist, we collect:

• Email address — for login (we use magic links, no passwords), product updates, and access management
• Display name — how you appear in the app
• Profile photo — optional, used for your member profile
• Location (zip code or coordinates) — used to surface nearby dispensaries and relevant products

We do not store traditional passwords. Authentication is handled via magic links sent to your email, or via passkeys (WebAuthn) if you set one up.

Your Cannabis Profile

This is the core of weed.menu — the data that makes personalization work:

• Quiz responses — your intent, use context (sleep, creativity, pain relief, etc.), and preferences collected during onboarding and refinement sessions
• Sage Memory — structured notes our AI builds about you over time: your preferences, constraints (e.g., "no couch lock"), avoidances, outcomes from past products, and purchase patterns. It can also hold health context — a condition you live with, or a medication you take — but only the items you explicitly confirm. That category has its own rules, set out under Health context and medications below.
• Recommendations — strains and products we've suggested to you, and your history of past recommendations
• Strain lists — collections you create and curate
• Strain reviews — written reviews you submit

Health context and medications

If you mention a health condition or a medication to Sage, that can become part of your profile — but only if you say so. It is how Sage knows to stay on the careful side about potency, format, and dose. It is also the most personal thing we would ever hold about you, so it works differently from everything else on this page:

• We never save it without asking. If a condition or a medication comes up, Sage asks — in the moment, in plain words — whether to remember it. Nothing is stored unless you say yes.
• We never infer it. Every other part of your profile can be built from patterns Sage notices. This part cannot. If a health note is on your profile, it is there because you said it and confirmed it, never because Sage drew a conclusion about you.
• Declining sticks. Say no and nothing goes on your profile, and Sage won't ask about that again.
• You can remove any single item without clearing the rest of your profile. Sage stops using it, and won't add it back on its own.
• It never reaches a dispensary. Health context is not included in what staff see when you share your member card — see Who can see your Sage Memory below.
• It is not medical advice. Sage uses this to be more conservative about dose, potency, and format. It does not check drug interactions and it does not assess your condition. Those questions belong to your doctor or pharmacist, and Sage will tell you so.

One thing we want to be exact about: declining keeps the note off your profile, but it does not erase the message you typed. Your conversation with Sage is stored either way — see AI & Sage Data below.

Who can see your Sage Memory

Two groups, two different answers.

• Budtenders and dispensary staff cannot. Sharing your member card shows staff your preferences and recommended products. Sage Memory is not part of that view, and health context never is. No dispensary-facing screen we operate reads it.
• Some weed.menu staff can. Our internal admin tools display Sage Memory for a named account, including any health context. That access needs a founder-level admin credential, and we use it to support customers, fix problems, and investigate abuse — it is how we answer a data request when you send one. It is never used for marketing and never shared outside weed.menu.

If that second point is more access than you are comfortable with, clearing Sage Memory or deleting your account both take effect immediately, and both are things you can do yourself. See Your Rights.

Your Conversations

When you chat with Sage (our AI assistant), those messages are stored. We use conversation history to:

• Give Sage context for future sessions
• Improve your personalized recommendations over time
• Allow budtenders to see relevant context if you choose to share your member card at a dispensary

Anonymous Demo & Preview Conversations

Some pages — including our public pitch pages and preview "Sage" chat experiences — let you try weed.menu without creating an account. If you use one of these, we still store the conversation transcript to run the demo and to improve and train Sage. Before storage, an automated filter removes contact and financial identifiers: email addresses, phone numbers, government ID numbers, and long account or card numbers. That filter does not detect personal names — if you type a name into a demo chat, assume we have stored it. If you are not signed in, the transcript is not linked to an account. Anthropic's no-training commitment, described in the AI section below, governs what Anthropic does with the text; it does not limit our own use of de-identified conversation content.

Usage & Analytics

We collect anonymized behavioral data — which features you use, how sessions flow, summary insights about your usage patterns. This helps us understand how to improve the product. It is not sold or shared with third parties.

Push Notifications

If you allow them, we send push notifications about restocks on products you've saved, new items that match your Sage profile, and occasional dispensary updates from shops you follow. These pushes are sent to your device via Apple Push Notification service and are limited to information about the app — we don't use them for advertising or analytics. You can disable push notifications at any time in your device settings, or per-shop inside the app.

Member Card (NFC)

If you have a weed.menu member card:

• The physical NFC chip only contains a URL — nothing else. Tapping the card simply opens a webpage.
• Your actual member data (name, preferences, dispensary context) is stored server-side, not on the card itself.
• The card links to your profile via a secure token. You can deactivate a card at any time.

Age Verification

We collect date of birth to verify you meet the legal age requirement to access cannabis information in your jurisdiction. This is stored securely and is not shared.

How We Use Your Data

Everything we collect serves one purpose: helping you find the right cannabis products and have better experiences.

Specifically:

• Personalization — matching you with strains, products, and dispensaries based on your profile
• Sage AI — powering real-time conversations and memory-based recommendations
• Budtender context — if you present your member card at a partnered dispensary, staff can see your preferences and recommended products (only what you've consented to share). Sage Memory is not part of that view, and health context never is.
• Account management — keeping your account secure, processing invites, handling access
• Product improvement — understanding aggregate usage patterns to improve weed.menu, and using de-identified conversation content to improve and train Sage

What We Don't Do

We want to be direct about this:

• We do not sell your data. Not to dispensaries, not to brands, not to data brokers.
• We do not share your data for advertising. There are no ad networks, no retargeting pixels, no ad-tech third parties.
• We do not put personally identifiable information into training data. We do use conversation content to improve and train Sage and other weed.menu models — a conversation is not used in a training set until it has passed de-identification review. The AI section below explains exactly what our filter catches and what it does not.
• We do not share your health or consumption data with employers, insurance companies, law enforcement, or government agencies — unless required by a valid legal order, in which case we'll notify you if legally permitted to do so.

AI & Sage Data

Sage is powered by Anthropic's Claude API.

Here's how that works in practice:

• When you chat with Sage, your messages are sent to Anthropic's API to generate responses
• Anthropic does not use API inputs to train their models — this is a contractual guarantee in their API terms. That guarantee is about Anthropic. It does not describe or limit what weed.menu does with conversation content, which is covered directly below.
• We store your conversation history in our own database to give Sage memory across sessions
• You can delete your conversation history yourself at any time — it's erased along with the rest of your account the moment you delete your profile. That covers the identified store. Training content works differently: while your account exists, it can still be traced back to you through the session it came from, so you can ask us what we hold. Deleting your profile removes that link — but the content itself is retained, and deletion does not retract it from training use.

For more on Anthropic's data practices: anthropic.com/privacy

Training Sage on Conversations

We use conversation content to improve and train Sage and other weed.menu models. Sage is a tool that helps budtenders and customers, and the conversations it has are how it gets better at that. Here is how we handle that content:

• Two separate stores. Identified conversation records — the ones tied to your account, the ones Sage reads for memory — live in an access-controlled store. That store is not the training store.
• What the automated filter removes. Content written to the training store runs through a filter that removes contact and financial identifiers: email addresses, phone numbers, government ID numbers, and long account or card numbers. Each is replaced with a placeholder.
• What it does not remove: personal names. The filter matches structural patterns, and names have no such pattern. We would rather tell you the limit than imply a guarantee we cannot make today.
• The commitment. Personally identifiable information is not included in training data. A conversation is not used in a training set until it has passed de-identification review.

The practical version: assume anything you type to Sage is stored. Do not send Sage information you would not want kept — names of other people included.

Third-Party Processors

We work with the following trusted service providers to operate weed.menu:

• Anthropic — AI model provider for Sage conversations. Does not train on API inputs.
• Turso — Primary database infrastructure, US-based.
• Vercel — Hosting and serverless infrastructure, US-based.
• Resend — Transactional email (magic links, notifications).

Cookies & Tracking

We use a minimal set of cookies:

• Session cookies — to keep you logged in
• Preference cookies — to remember your settings

We do not use:

• Third-party advertising cookies
• Cross-site tracking pixels
• Social media tracking widgets

We may use basic analytics (e.g., Vercel Analytics) to understand page-level traffic — this data is aggregated and does not identify individual users.

Data Storage & Security

Your data is stored in:

• Turso — our primary database, distributed SQLite optimized for edge
• Vercel — our hosting and serverless infrastructure

Both services are US-based and maintain their own security and compliance certifications.

We use:

• Encrypted connections (HTTPS/TLS) for all data in transit
• Secure token-based authentication
• Role-based access controls — only authorized team members can access user data

Cannabis-Specific Compliance

Cannabis laws vary significantly by state and jurisdiction. weed.menu:

• Requires age verification before accessing cannabis content
• Does not facilitate the direct purchase or delivery of cannabis products
• Is an informational and recommendation platform, not a licensed cannabis retailer
• Operates in compliance with applicable laws regarding cannabis information services

We recommend reviewing the cannabis laws in your state or jurisdiction.

Your Rights

You have full control over your data:

• Access — request a copy of all data we hold on you
• Deletion — delete your account and all associated data yourself, right from your profile. It takes effect immediately and is permanent — no email, no waiting, no review queue.
• Export — request a machine-readable export of your cannabis profile and history
• Remove a single memory — open your profile and choose Remove on any note Sage has saved, including health context. The rest of your profile is untouched, and Sage won't add that item back on its own.
• Clear Sage Memory — Clear everything on your profile erases every note Sage has saved about you, along with the session outcomes and product history tied to them. Sage keeps working; it starts building new notes from your next conversation. We don't currently offer a switch that stops it building them — clearing is the control that exists today, and deleting your account is the one that ends it entirely.
• Deactivate your member card — at any time from your account settings

Deletion is self-serve.Open your profile, choose "Delete my account & data," and confirm. We erase your account and everything tied to it immediately — there's no form to fill out and nothing to wait on.

For access or export requests, email press@weed.menuwith the subject line "Data Request." We'll respond within 7 business days.

California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you specific rights regarding your personal information:

Right to Know

You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the sources from which we collected it, the purposes for which we use it, and the categories of third parties with whom we share it.

Right to Delete

You have the right to request deletion of personal information we have collected from you, subject to certain exceptions permitted by law. You don't have to wait on us to honor it: you can delete your account and all associated data yourself, right from your profile. The deletion takes effect immediately — well inside the 45-day window the CCPA allows.

Right to Opt Out of Sale

You have the right to opt out of the sale of your personal information. We do not sell personal information. We have not sold personal information in the past 12 months and do not intend to do so.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. Exercising your privacy rights will not result in denial of services, different prices, or lower quality of service.

How to Submit a CCPA Request

For deletion, there's nothing to submit — delete your account and data yourself from your profile and it's done immediately.

For other California privacy requests (Right to Know, access, or export), email press@weed.menuwith the subject line "CCPA Request." Please include your name and the email address associated with your account. We will respond within 45 days as required by law.

Changes to This Policy

If we make material changes, we'll notify you via email and update the "Last updated" date at the top. Continued use of weed.menu after changes constitutes acceptance of the updated policy.

Contact

Questions, requests, or concerns:

📧 press@weed.menu

weed.menu is a private, invite-only platform. Access is limited to approved members.