Privacy Policy

Strain Diary · Effective October 20, 2026

Strain Diary is a personal cannabis journaling app for adults. This policy explains what information the app handles, where it goes, and what control you have over it. The short version: your diary is yours. We don't run ads, we don't use third-party analytics or tracking, and we never sell data to anyone.

1. Information the app collects

• Account information. If you create an account, we store your email address, username, and display name. Your password is never stored in readable form — only a salted cryptographic hash. If you set a security question for password recovery, the answer is also stored only as a salted hash.
• Content you create. Strain entries (names, brands, ratings, terpenes, effects, notes), photos you attach, and profiles of your gear ("pieces") including their photos.
• Social content. If you use the social features: public strain reviews, comments, likes, friend connections, and group chat messages.
• Feature usage counts. How many times your account opened each part of the app (for example "Will I Like It?" or Stats), which settings it changed (not what they were changed to), and when each was last used, so we can see which features are used and improve them. It never includes your strains, reviews, searches or anything you type, is stored with your account in the app's own database (no analytics companies), and you can turn it off any time in Settings → Privacy → Share Usage Stats.

The app does not collect your location, contacts, browsing history, advertising identifiers, or any data unrelated to the features above.

2. Where your data is stored

• On your device. Your strain diary, gear profiles, and photos live on your device by default.
• Your private iCloud (optional). If you turn on iCloud Sync, your strain entries and photos are stored in your private iCloud database, hosted by Apple. Each account's diary is stored separately. Nobody else — including us — can read your private database.
• Shared database (social features). Account profiles and the social content listed above are stored in the app's shared iCloud database (Apple CloudKit) so they can be shown to other users as described below.

All server-side storage is provided by Apple's iCloud/CloudKit infrastructure and is subject to Apple's own security practices.

3. What other users can see

• Your username and display name are visible to other users.
• Public strain reviews you share (strain name, brand, form, type, ratings, terpenes, crosses) are visible to your friends and can appear in community features.
• Comments, likes, and reactions you leave are visible to the people who can see the content you interacted with.
• Group chat messages are visible to members of that group.

Your private diary entries, personal notes, photos, and gear are not visible to anyone unless you explicitly share a strain.

4. What we don't do

• No advertising and no ad networks.
• No third-party analytics or telemetry, and no tracking across other apps or websites.
• No selling, renting, or sharing of your data with third parties.
• No data collection beyond what the features described here require.

5. Device permissions

• Camera / photo library — to photograph your strains, gear, product labels, and profile picture. Label photos are processed on your device.
• Bluetooth — to connect to and control compatible vaporizer devices (such as Puffco and Dr Dabber). Device connections are local; no usage data is uploaded.
• Notifications — to alert you about likes, comments, friend requests, and group messages. Optional.
• Background App Refresh — to sync your diary with iCloud when the app is not open. Optional and controlled in iOS Settings.

Every permission is optional — the app asks before using any of them, and core journaling works without them.

6. Data retention and deletion

• You can delete individual strains, photos, comments, and messages at any time from within the app.
• You can delete your account from within the app (Friends tab → account menu → Delete Account). This removes your account profile from the shared database.
• Data synced to your private iCloud belongs to your Apple ID; you can also manage it through iCloud settings.
• If anything is left behind or you need help removing content, contact us at the address below and we'll take care of it.

7. Security

Passwords and security answers are stored only as salted SHA-256 hashes. Data in transit and at rest is protected by Apple's iCloud security (TLS in transit, encryption at rest). No system is perfectly secure, but we store the minimum data necessary and none of it in readable password form.

8. Age requirement

Strain Diary is intended solely for adults of legal age in jurisdictions where cannabis is legal — 21+ in most of the United States. The app is not directed at children, and we do not knowingly collect information from anyone under 18. If you believe a minor has created an account, contact us and it will be removed.

9. Changes to this policy

If our data practices change, this page will be updated and the effective date revised. Material changes will be noted in the app's update notes.

10. Contact

Questions, deletion requests, or concerns:
gdgoehring@gmail.com