Legal
Privacy Policy
Last updated: 21 June 2026
In plain language
SŌMA is a sensory guide for cannabis flower. We collect only what we need to build your taste profile and remember your history. We do not run ads, we do not sell your data, and we do not track you across other sites. You can delete your account and everything tied to it at any time.
Who we are
SŌMA ("SŌMA", "we", "us") is a sensory matching tool that recommends cannabis flower based on your stated taste preferences. This policy explains what we collect, why, and the control you have. SŌMA Sensory Sommelier is operated by Rasveda Labs, LLC.
What we collect
Account details. If you register, we store your email address, a username you choose, and a securely hashed version of your password. We never store your password in readable form. We record whether your email has been verified.
Your sensory profile. The preferences you enter — favourite strains, aromas, flavours, effects, potency, the times you use, and any free-text notes you add. This is the core of what SŌMA matches against.
Activity. The menus or strain lists you analyse, the matches we return, and the feedback you log on picks (loved / liked / neutral / avoid). This is your history, and it sharpens future matches.
A device cookie. We set a single functional cookie (soma_uid) so that, even before you register, your profile and history stay attached to your device. It is not used for advertising and is not shared with third-party trackers.
Support messages. If you email us, we keep that correspondence to answer you.
We do not collect precise location, contacts, or biometric data, and we do not buy personal data about you from other sources.
How we use it
- To build your taste profile and generate matches.
- To keep your history and improve future recommendations.
- To create and secure your account, verify your email, and let you reset your password.
- To understand, in aggregate, whether features work and to fix problems.
- To respond to you when you contact us.
We do not use your data to serve advertising, and we do not sell or rent it.
Who we share it with
We don't sell your data. We share it only with the service providers that run SŌMA, and only so the app can function:
- Hosting — Vercel, which serves the application.
- Database — Supabase (PostgreSQL), where your profile and history are stored.
- Email — Resend, used only to send account emails (verification and password reset).
- Optional AI assistance — when enabled, a third-party language model may help interpret unfamiliar strain names or phrasing. This feature is off by default; when on, only the text needed for that step is sent, never your account credentials.
We may also disclose information if required by law, or to protect the rights, safety, and security of our users and the service.
Cookies
SŌMA uses one functional cookie, soma_uid, to keep your profile and history attached to your device. We do not use advertising cookies or third-party analytics trackers. Because the cookie is essential to how the app works, clearing it will detach an anonymous profile from your device.
How long we keep it
We keep your account and the data tied to it for as long as your account exists. When you delete your account, we delete your profile, history, and feedback. Aggregate, non-identifying counts (for example, how many analyses were run) may remain, as they are not linked to you.
Your choices and rights
You can view and edit your sensory profile at any time, and you can delete past analyses individually. You can delete your entire account and everything attached to it from your account page.
Depending on where you live, you may have additional rights — to access, correct, export, or erase your personal data, or to object to certain processing. To make a request, contact us at Somasensory@somasensory.com.
Security
Passwords are stored only as salted hashes, never in plain text. Email-verification and password-reset links are stored only as hashes, are single-use, and expire. No system is perfectly secure, but we take reasonable measures to protect your data.
Age requirement
SŌMA is intended only for adults of legal age (21+ in most places, or the legal age where you live) in regions where cannabis is lawful. It is not directed to anyone under that age, and we do not knowingly collect data from them.
International users
Your data may be processed in countries other than your own, including where our service providers operate. Where required, we rely on appropriate safeguards for such transfers.
Changes to this policy
We may update this policy as the product evolves. When we make material changes, we will update the date above and, where appropriate, notify you in the app.
Contact
Questions about your privacy or this policy? Email us at Somasensory@somasensory.com. Governing law: the State of New York, USA.
See also our Terms of Service.