Privacy Policy

Who we are

StrainLog is the experience logging and community platform for wellness and cannabis retailers. We are the data controller responsible for your personal information. When you use any StrainLog-powered experience — whether through a retailer subdomain or strainlog.app directly — your data relationship is with StrainLog, not with the individual retailer.

StrainLog is a trading name of Big Friendly Group (Pty) Ltd, Registration Number 2024/278315/07, Republic of South Africa.

Questions about this policy can be directed to hello@strainlog.app.

What we collect

• Display name and email address
• Home branch selection at sign-up
• Mood tags, effect tags, and optional notes you choose to log
• Photos you optionally attach to logs
• Session data for authentication purposes only

How your data is used

Your data is used to provide the StrainLog journalling and community experience — logging products, tracking effects over time, and contributing to your shop community.

Your anonymised, aggregated experience data — mood tags, effect tags, and usage patterns — may also be used to generate industry insights, power product recommendations, and support research and advocacy relating to the cannabis and wellness sector in South Africa. Your personal details are never included in this. Only anonymised patterns across the broader community are used.

StrainLog uses automated processing to analyse logged experiences and generate personalised product recommendations. This processing is based on aggregated community data and your own logged history. To opt out of personalised recommendations, contact us at hello@strainlog.app.

Who can see your logs

Private logs are visible only to you. Public logs show your display name and experience to other registered members of the same shop community. No logs are shared outside the shop community without your consent.

Individual retailers can only see data from their own members, accessed through the StrainLog admin panel. Retailers cannot extract raw personal data directly — they see aggregated insights and moderation tools only. StrainLog does not share your personal data between retailers.

Data sharing

We do not sell your personal data. We do not share personally identifiable information with third parties.

Anonymised, aggregated data — patterns and trends across the community — may be shared with industry bodies, research partners, and regulatory stakeholders to support the development of a transparent and well-understood cannabis and wellness sector. No individual is ever identifiable in this data.

Your data is stored securely on Supabase infrastructure (EU-West region).

Account deletion

You can delete your account at any time from your Account dashboard. Scroll to the bottom and tap "Delete my account". Your account will be scheduled for permanent deletion after a 30-day grace period during which you can log back in to cancel.

You may also contact us at hello@strainlog.app to request manual deletion.

Upon deletion, your private journal entries and personal logs are permanently deleted within 30 days. Public community experiences you have shared will remain visible with your display name replaced by "[Shop] Member" — no personally identifiable information will remain attached.

Data retention

We retain anonymised community contributions indefinitely as they form part of the shared knowledge of the platform. All personal data is permanently removed within 30 days of an account deletion request.

Cookies

We use session cookies for authentication only. We do not use tracking, advertising, or analytics cookies.

Your rights under POPIA

Under the Protection of Personal Information Act (POPIA), you have the right to access the personal information we hold about you, request corrections, and request deletion. You also have the right to object to the processing of your personal information and to lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, contact us at hello@strainlog.app.

Changes to this policy

We may update this policy from time to time. When we do, the "Last updated" date at the top of this page will change. Continued use of StrainLog after any update constitutes acceptance of the revised policy.