Privacy Policy
Last updated: April 2026
weed.menu is built on trust. You're sharing personal preferences, health context, and consumption habits with us. We don't take that lightly. This policy explains exactly what we collect, why we collect it, and what we'll never do with it.
If something here is unclear, email us: press@weed.menu
What We Collect
Your Account
When you sign up or join the waitlist, we collect:
- Email address — for login (we use magic links, no passwords), product updates, and access management
- Display name — how you appear in the app
- Profile photo — optional, used for your member profile
- Location (zip code or coordinates) — used to surface nearby dispensaries and relevant products
We do not store traditional passwords. Authentication is handled via magic links sent to your email, or via passkeys (WebAuthn) if you set one up.
Your Cannabis Profile
This is the core of weed.menu — the data that makes personalization work:
- Quiz responses — your intent, use context (sleep, creativity, pain relief, etc.), and preferences collected during onboarding and refinement sessions
- Sage Memory — structured notes our AI builds about you over time: your preferences, constraints (e.g., "no couch lock"), avoidances, outcomes from past products, and purchase patterns
- Recommendations — strains and products we've suggested to you, and your history of past recommendations
- Strain lists — collections you create and curate
- Strain reviews — written reviews you submit
Your Conversations
When you chat with Sage (our AI assistant), those messages are stored. We use conversation history to:
- Give Sage context for future sessions
- Improve your personalized recommendations over time
- Allow budtenders to see relevant context if you choose to share your member card at a dispensary
Usage & Analytics
We collect anonymized behavioral data — which features you use, how sessions flow, summary insights about your usage patterns. This helps us understand how to improve the product. It is not sold or shared with third parties.
Member Card (NFC)
If you have a weed.menu member card:
- The physical NFC chip only contains a URL — nothing else. Tapping the card simply opens a webpage.
- Your actual member data (name, preferences, dispensary context) is stored server-side, not on the card itself.
- The card links to your profile via a secure token. You can deactivate a card at any time.
Age Verification
We collect date of birth to verify you meet the legal age requirement to access cannabis information in your jurisdiction. This is stored securely and is not shared.
How We Use Your Data
Everything we collect serves one purpose: helping you find the right cannabis products and have better experiences.
Specifically:
- Personalization — matching you with strains, products, and dispensaries based on your profile
- Sage AI — powering real-time conversations and memory-based recommendations
- Budtender context — if you present your member card at a partnered dispensary, staff can see your preferences and recommended products (only what you've consented to share)
- Account management — keeping your account secure, processing invites, handling access
- Product improvement — understanding aggregate usage patterns to improve weed.menu
What We Don't Do
We want to be direct about this:
- We do not sell your data. Not to dispensaries, not to brands, not to data brokers.
- We do not share your data for advertising. There are no ad networks, no retargeting pixels, no ad-tech third parties.
- We do not use your conversations or profile to train AI models. Your data stays yours. (See the AI section below for more detail.)
- We do not share your health or consumption data with employers, insurance companies, law enforcement, or government agencies — unless required by a valid legal order, in which case we'll notify you if legally permitted to do so.
AI & Sage Data
Sage is powered by Anthropic's Claude API.
Here's how that works in practice:
- When you chat with Sage, your messages are sent to Anthropic's API to generate responses
- Anthropic does not use API inputs to train their models — this is a contractual guarantee in their API terms
- We store your conversation history in our own database to give Sage memory across sessions
- You can request deletion of your conversation history at any time
For more on Anthropic's data practices: anthropic.com/privacy
Third-Party Processors
We work with the following trusted service providers to operate weed.menu:
- Anthropic — AI model provider for Sage conversations. Does not train on API inputs.
- Turso — Primary database infrastructure, US-based.
- Vercel — Hosting and serverless infrastructure, US-based.
- Resend — Transactional email (magic links, notifications).
Cookies & Tracking
We use a minimal set of cookies:
- Session cookies — to keep you logged in
- Preference cookies — to remember your settings
We do not use:
- Third-party advertising cookies
- Cross-site tracking pixels
- Social media tracking widgets
We may use basic analytics (e.g., Vercel Analytics) to understand page-level traffic — this data is aggregated and does not identify individual users.
Data Storage & Security
Your data is stored in:
- Turso — our primary database, distributed SQLite optimized for edge
- Vercel — our hosting and serverless infrastructure
Both services are US-based and maintain their own security and compliance certifications.
We use:
- Encrypted connections (HTTPS/TLS) for all data in transit
- Secure token-based authentication
- Role-based access controls — only authorized team members can access user data
Cannabis-Specific Compliance
Cannabis laws vary significantly by state and jurisdiction. weed.menu:
- Requires age verification before accessing cannabis content
- Does not facilitate the direct purchase or delivery of cannabis products
- Is an informational and recommendation platform, not a licensed cannabis retailer
- Operates in compliance with applicable laws regarding cannabis information services
We recommend reviewing the cannabis laws in your state or jurisdiction.
Your Rights
You have full control over your data:
- Access — request a copy of all data we hold on you
- Deletion — request deletion of your account and all associated data
- Export — request a machine-readable export of your cannabis profile and history
- Opt out of personalization — you can disable Sage Memory at any time; Sage will still work, just without remembering you between sessions
- Deactivate your member card — at any time from your account settings
To exercise any of these rights, email press@weed.menuwith the subject line "Data Request." We'll respond within 7 business days.
California Privacy Rights (CCPA)
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you specific rights regarding your personal information:
Right to Know
You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the sources from which we collected it, the purposes for which we use it, and the categories of third parties with whom we share it.
Right to Delete
You have the right to request deletion of personal information we have collected from you, subject to certain exceptions permitted by law.
Right to Opt Out of Sale
You have the right to opt out of the sale of your personal information. We do not sell personal information. We have not sold personal information in the past 12 months and do not intend to do so.
Right to Non-Discrimination
We will not discriminate against you for exercising any of your CCPA rights. Exercising your privacy rights will not result in denial of services, different prices, or lower quality of service.
How to Submit a CCPA Request
To exercise your California privacy rights, email press@weed.menuwith the subject line "CCPA Request." Please include your name and the email address associated with your account. We will respond within 45 days as required by law.
Changes to This Policy
If we make material changes, we'll notify you via email and update the "Last updated" date at the top. Continued use of weed.menu after changes constitutes acceptance of the updated policy.
Contact
Questions, requests, or concerns:
weed.menu is a private, invite-only platform. Access is limited to approved members.