Privacy Policy

Last Updated: March 12, 2026

Terpa ("we," "our," or "us") is operated by Atlas Elevated. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Terpa mobile application ("the App"). By using Terpa, you agree to the practices described in this policy.

1. Information We Collect

We collect only the information necessary to provide and improve the Terpa experience. This includes:

• Email address — used for account creation, authentication, and account recovery.
• Journal entries — including strain names, consumption methods, mood selections, personal ratings, cost entries, and session notes. All journal data is user-entered and voluntary.
• Terpene preferences — your saved terpene profiles and preferences used to personalize recommendations.
• Age verification status — we store whether you have confirmed your age, but we do not collect or store your date of birth.
• Subscription status — whether you are on the free tier or a Pro subscriber, and subscription expiration dates.
• Device locale — your device's language and region settings, used for localization and currency formatting.

We do not collect location data, contacts, photos, or any information from other apps on your device.

2. How We Use Your Information

Your information is used exclusively for the following purposes:

• Account management — creating and maintaining your Terpa account, authenticating your identity, and enabling account recovery.
• App personalization — tailoring strain recommendations, terpene insights, and journal features to your preferences and history.
• Subscription management — processing and managing your Pro subscription status, verifying entitlements, and syncing with payment providers.
• App improvement — we use aggregated, anonymized analytics to understand how features are used and to improve the app. We do not analyze individual user data for this purpose.

3. Data Storage

Your data is stored securely using Firebase, which is part of Google Cloud Platform. All data transmitted between your device and our servers is encrypted in transit using TLS (Transport Layer Security). Data at rest is stored in secure cloud infrastructure managed by Google, which maintains industry-standard security certifications including SOC 1, SOC 2, and ISO 27001.

4. Third-Party Services

Terpa uses the following third-party services to operate:

• Firebase Authentication — for secure account sign-in and identity management.
• Firebase Firestore — for secure cloud storage of your journal entries and preferences.
• RevenueCat — for subscription management and purchase verification. RevenueCat receives a pseudonymous user identifier and subscription status. See RevenueCat's privacy policy at revenuecat.com/privacy for details.
• Apple StoreKit — for processing in-app purchases and subscriptions on iOS devices. Apple processes payments directly; we never receive or store your payment card information.

We do not sell, rent, or share your personal data with advertisers, data brokers, or any third parties for marketing purposes.

5. Your Rights

You have the right to:

• Access your data — view and review all personal information we hold about you within the app.
• Request deletion — request the deletion of your account and all associated data by emailing support@terpa.app. We will process your request within 30 days.
• Export your data — Pro subscribers can export their journal data from within the app.
• Withdraw consent — you may stop using the app at any time. You may also request that we cease processing your data by contacting us.

6. Data Retention

Your account data, including journal entries and preferences, is retained for as long as your account remains active. If you request account deletion, all personal data associated with your account will be permanently deleted from our systems within 30 days of the request. Anonymized, aggregated data that cannot be linked back to you may be retained for analytics purposes.

7. Cannabis-Specific Privacy

Your consumption data is private and confidential. We never share individual consumption records, strain preferences, or session data with third parties, employers, insurers, or law enforcement unless required by valid legal process. We understand the sensitivity of cannabis-related personal data and have designed Terpa with your privacy as a fundamental priority. No third party can access your individual journal entries or consumption patterns through our platform.

8. Children's Privacy

Terpa is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. Users must pass age verification before accessing the app. If we become aware that we have collected data from a user under 18, we will promptly delete that information and terminate the associated account.

9. Canadian Privacy (PIPEDA)

If you are a Canadian resident, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA). This includes the right to access the personal information we hold about you and to request corrections to any inaccurate information. To make an access or correction request under PIPEDA, please contact us at support@terpa.app. We will respond to your request within 30 days as required by law.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this policy. Your continued use of Terpa after any changes to this policy constitutes your acceptance of the updated terms.

11. Contact

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Email: support@terpa.app
Terpa by Atlas Elevated