Privacy
What Terpy stores, why, and for how long
In short
You can use Terpy without an account. We store the conversations either way, because we need to see real answers to find bad ones and to check the service is not being misused. Conversations from visitors without an account are stored without any identifier for you or your device, and they are deleted after 90 days. We do not sell data, and we do not use it for advertising.
Chats without an account
When you chat without signing in, the messages are saved on our server with a random conversation number. No account, no device fingerprint, no IP address, and no browser details are saved alongside them. We cannot tell which conversations came from the same person or the same device.
These conversations are deleted automatically 90 days after they start. A copy also stays in your own browser so you can reopen your history; clearing your browser data removes that copy.
What we store
| Data | Why | How long |
|---|---|---|
| Chat messages from a signed-in account | So you can reopen your conversations | Until you delete the chat or your account |
| Chat messages sent without an account | Quality checks, debugging, and safety review | 90 days, then deleted automatically |
| Account data (email address, name, profile picture) | Sign-in through Google | Until you delete your account |
| Device identifier in the terp_fp cookie | Message limits and abuse prevention | 1 year, or until you clear your cookies |
| Usage counters (number of messages, token counts) | Enforcing daily and monthly limits | Until you delete your account |
| Uploaded dispensary menu photos | Reading strain names from the picture | Stored with the scan record |
| Saved preferences (effects, terpenes you like or avoid) | Personalising recommendations | In your browser, until you clear them |
Please do not send health details
What you type is stored as you wrote it. Please do not send us medical information, diagnoses, or anything else that identifies you or another person.
Terpy is an educational database. It does not give medical advice, and it is not a substitute for talking to a doctor or a pharmacist.
Legal bases
We process account data and your saved chats to provide the service you asked for (Article 6(1)(b) GDPR). We keep anonymous transcripts, usage counters, and the device identifier on the basis of our legitimate interest in a working, safe, and non-abusable service (Article 6(1)(f) GDPR). You can object to that use at any time using the contact address below.
Who else processes this data
We use these providers to run the service. They process data on our behalf and only for the purposes described here.
- •Supabase: Database, file storage, and sign-in (servers in London, United Kingdom)
- •Vercel: Hosting, request logs, and usage analytics
- •Google: The AI models that write the chat answers, reached through the Vercel AI Gateway
- •Exa: Web search when a strain is missing from the database
- •OpenPanel: Page-view analytics, on servers we operate ourselves
Your messages are sent to the AI model provider to generate an answer. The provider processes them to produce the reply. Some of these providers are based outside the European Economic Area.
Your rights
- •Access the data we hold about you
- •Have inaccurate data corrected
- •Have your data deleted
- •Restrict or object to how we use it
- •Receive your data in a portable format
- •Complain to a data protection supervisory authority
Signed-in users can delete individual chats or their whole history from the app. For anything else, write to us. Conversations sent without an account cannot be traced back to you, so we cannot find or delete a specific one on request.
Contact
For privacy questions or to exercise any of the rights above, write to info@felixbruening.de.
© 2026 Terpy. All rights reserved.