Privacy Policy
Your privacy is important to us. This policy explains how we collect, use, and protect your information.
Last updated: September 27, 2025 | Effective date: September 27, 2025
Table of Contents
At Terpenes App ("we," "our," or "us"), we are committed to protecting your privacy and ensuring you have a positive experience on our platform. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our website and mobile application.
Quick Summary
We collect minimal data necessary to provide our educational services, never sell your personal information, and give you full control over your data.
1. Information We Collect
Information You Provide
- Account Information: Name, email address, password
- Profile Information: Optional bio, learning preferences, timezone
- Content: Notes, flashcard responses, quiz answers
- Communications: Messages sent through contact forms or support channels
Information Automatically Collected
- Usage Data: Pages visited, features used, time spent on platform
- Device Information: Browser type, operating system, IP address
- Learning Analytics: Study patterns, performance metrics, progress tracking
- Cookies and Similar Technologies: See our Cookies section below
2. How We Use Your Information
Core Services
- Provide access to flashcards and quizzes
- Track learning progress and performance
- Personalize learning experience
- Save notes and favorites
- Enable spaced repetition algorithms
Communication
- Send account-related notifications
- Provide customer support
- Send educational content (with consent)
- Notify about platform updates
- Respond to inquiries and feedback
Improvement
- Analyze usage patterns
- Improve platform performance
- Develop new features
- Fix bugs and technical issues
- Conduct research (anonymized data)
Legal & Security
- Comply with legal obligations
- Protect against fraud and abuse
- Enforce terms of service
- Maintain platform security
- Resolve disputes
3. Information Sharing and Disclosure
We do not sell, rent, or trade your personal information to third parties.
We may share your information only in the following circumstances:
Service Providers
Third-party companies that help us operate our platform (hosting, email delivery). These providers are contractually bound to protect your data.
Legal Requirements
When required by law, court order, or to protect our rights, users, or the public from harm or illegal activities.
Business Transfers
In connection with a merger, acquisition, or sale of assets, where user data may be transferred as part of the business.
Aggregated Data
We may share anonymized, aggregated statistics about platform usage that cannot identify individual users.
4. Data Security
We implement appropriate technical and organizational measures to protect your personal information.
Technical Safeguards
- SSL/TLS encryption in transit
- Bcrypt password hashing
- Regular security audits
- Secure authentication with JWT tokens
- Access controls and monitoring
Organizational Measures
- Employee training on data protection
- Limited access on need-to-know basis
- Incident response procedures
- Regular backups and disaster recovery
- Third-party security assessments
5. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience and analyze platform usage.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential | Authentication, security, basic functionality | Session/1 year |
| CSRF | Cross-site request forgery protection | Session |
| Preferences | User settings, language, theme | 1 year |
You can control cookies through your browser settings. Note that disabling essential cookies may impact platform functionality.
6. Your Rights and Choices
You have the following rights regarding your personal information:
Access
Request a copy of your personal data
Portability
Export your data in a structured format
Rectification
Correct inaccurate or incomplete data
Restriction
Limit how we process your data
Erasure
Request deletion of your personal data
Objection
Object to certain processing activities
Exercise Your Rights: Contact us at privacy@terpenesapp.com or use the data management tool in your account settings. We respond within 30 days.
7. Data Retention
We retain your personal information only as long as necessary for the purposes outlined in this policy:
- Account Data: Until you delete your account (data is permanently removed upon deletion)
- Learning Data: Until account deletion or upon your request
- Support Communications: 3 years for quality assurance
- Analytics Data: Aggregated and anonymized after 2 years
8. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission for transfers outside the EEA.
9. Children's Privacy
Our platform is not intended for children under 16. We do not knowingly collect personal information from children under 16. If we become aware of such data collection, we will delete the information immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through a prominent notice on our platform. Your continued use of the platform after the effective date constitutes acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
- Email: privacy@terpenesapp.com
- Address: 123 Cannabis Education Blvd, San Francisco, CA 94102
- Data Protection Officer: dpo@terpenesapp.com