Privacy Policy

SŌMA ("SŌMA", "we", "us") is a sensory matching tool that recommends cannabis flower based on your stated taste preferences. This policy explains what we collect, why, and the control you have. SŌMA Sensory Sommelier is operated by Rasveda Labs, LLC.

Account details. If you register, we store your email address, a username you choose, and a securely hashed version of your password. We never store your password in readable form. We record whether your email has been verified.

Your sensory profile. The preferences you enter — favourite strains, aromas, flavours, effects, potency, the times you use, and any free-text notes you add. This is the core of what SŌMA matches against.

Activity. The menus or strain lists you analyse, the matches we return, and the feedback you log on picks (Loved, Good, Meh or Not for me). This is your history, and it sharpens future matches. Notes left on past matches before October 2026 are kept and shown with those matches; new ones are no longer collected.

A device cookie. We set a single functional cookie (soma_uid) so that, even before you register, your profile and history stay attached to your device. It is not used for advertising and is not shared with third-party trackers.

Support messages. If you email us, we keep that correspondence to answer you.

We do not collect precise location, contacts, or biometric data, and we do not buy personal data about you from other sources.

When you scan a package label in Match and a run uses that scan, we store what was printed on it: the strain, the cultivator, the batch, the package tag, the harvest and packaged dates, THC and CBD, and the certificate link as text. A label you scan and then leave without running a match is not kept.

We never store a photograph or the raw text that was read, only those printed fields. They are kept because a grower's record only shows across several of your packages: whether they cure properly, and whether a strain comes out the same twice.

Your scanned packages are private to you. They are not shared with anyone and not pooled with other members' scans. You can see every one, and forget any or all of them, under Account → Privacy & data. They are deleted with your account.

Scanning a jar's QR code to read its record looks it up only in public records SŌMA already holds (Metrc Retail ID records, shop menus and lab certificates read from public pages) and sends no request to any outside service. That read is not stored against you unless you tap I bought it (see "Jars you bought" below); we keep only daily totals of scans, not linked to anyone.

When you mark a jar as bought, on a strain page or on a scanned jar's card, we store the strain; the grower you picked or the brand the jar's card named; whether you marked it on a strain page or a scanned jar; the day you marked it; your verdict and when you gave it; and three optional marks (smell, bud density, burn) and when you set them.

For a scanned jar we also store a short code, unique to you, that lets SŌMA recognise the same jar if you scan it again (it is not the package tag); whether its card read it by name and brand or from its own lab panel; the packed day from its own record or label; and its leading terpenes.

We never store the text read from the QR code, the package tag, the Retail ID code, the link or the shop.

Your verdicts can adjust your own matches within a small bound; not every verdict does (Meh never does). Your jars are private to you: not shared with anyone, not pooled with other members, and not sent to the optional AI step. You can see every one, and forget any or all of them, under Account → Privacy & data. They are deleted with your account.

Without an account, your jars are tied to this browser's cookie. Clearing it means you can no longer list or forget them from the app; they stay in our database under a random identifier no device holds, until automatic clean-up of abandoned anonymous data ships. Forget them first, or create an account.

Shared devices. Anyone using the same browser can see your jars, and the Home reminder "How was …?" about the newest one.

• To build your taste profile and generate matches.
• To keep your history and improve future recommendations.
• To create and secure your account, verify your email, and let you reset your password.
• To understand, in aggregate, whether features work and to fix problems.
• To respond to you when you contact us.

We do not use your data to serve advertising, and we do not sell or rent it.

We don't sell your data. We share it only with the service providers that run SŌMA, and only so the app can function:

We may also disclose information if required by law, or to protect the rights, safety, and security of our users and the service.

SŌMA uses one functional cookie, soma_uid, to keep your profile and history attached to your device. We do not use advertising cookies or third-party analytics trackers. Because the cookie is essential to how the app works, clearing it will detach an anonymous profile from your device.

We keep your account and the data tied to it for as long as your account exists. When you delete your account, we delete your profile, history, and feedback. Aggregate, non-identifying counts (for example, how many analyses were run) may remain, as they are not linked to you. Jars marked without an account and left behind by a cleared cookie are kept as described under "Jars you bought" above.

You can view and edit your sensory profile at any time, and you can delete past analyses individually. You can delete your entire account and everything attached to it from your account page.

Depending on where you live, you may have additional rights — to access, correct, export, or erase your personal data, or to object to certain processing. To make a request, contact us at Somasensory@somasensory.com.

Passwords are stored only as salted hashes, never in plain text. Email-verification and password-reset links are stored only as hashes, are single-use, and expire. No system is perfectly secure, but we take reasonable measures to protect your data.

SŌMA is intended only for adults of legal age (21+ in most places, or the legal age where you live) in regions where cannabis is lawful. It is not directed to anyone under that age, and we do not knowingly collect data from them.

Your data may be processed in countries other than your own, including where our service providers operate. Where required, we rely on appropriate safeguards for such transfers.

We may update this policy as the product evolves. When we make material changes, we will update the date above and, where appropriate, notify you in the app.

Questions about your privacy or this policy? Email us at Somasensory@somasensory.com. Governing law: the State of New York, USA.