Privacy Policy
This policy explains what information TRICO Terpenes Finder and TRICO Chef keep, what for and who sees it. The controller is Centro Interdisciplinario de Salud Mental, CSP ("CISME"), P.O. Box 2921, Mayagüez, Puerto Rico 00681. Write to us at support@cismepr.com.
Reviewed November 5, 2026 · Approved November 5, 2026 by Dr. Carlos A. Lado-Cornejo
For everyone
Where it is stored
In Supabase, our database provider, on servers in the United States. We do not sell or share information with advertisers, insurers, employers or other companies.
Providers that help us
Only these providers handle information, and only to provide their service: Supabase (database, accounts and files) and Render (the app's server), both in the United States; Apple and Google (download, subscriptions, notifications and, on your phone, looking up addresses for the map); RevenueCat, which records purchases and subscriptions made with Apple or Google under your account's identifier, without your name or health data; Expo (app updates and sending notifications); Resend, which sends account emails and notices to your email address; OpenStreetMap, whose servers deliver the map images and receive the phone's IP address and the area shown, but not your account; Stripe and PayPal (payments on cismepr.com, once switched on); and OpenAI, which reads dispensaries' scanned certificates of analysis and, in TRICO Chef, the photo of your product's label and what you ask for to create your cooking recipe. Your name, email or account are never sent to OpenAI.
Your location
If you allow it, the app uses your phone's location to confirm that you are where medical cannabis is legal and to show you nearby dispensaries. The location is checked at that moment, rounded, and is not stored.
No advertising or tracking
The app uses no ads, advertising pixels or third-party analytics tools, and does not follow what you do in other apps or sites.
Record of your acceptance
We keep proof of what you accepted: each document, its version, the date and time, the IP address and the type of device. That record cannot be changed and is kept for at least 6 years, even if you delete your account, because it is the legal proof of your consent.
Security and breach notices
Information travels encrypted and only the app's server reaches the database. If a security breach affects your information, we will tell you as soon as possible and notify Puerto Rico's Department of Consumer Affairs (DACO) within 10 days, as Puerto Rico Law 111-2005 requires, and the federal authorities when applicable.
Your rights
You can ask to see, correct or delete your information by writing to support@cismepr.com; we answer within 30 days. If you delete your account, your data is permanently removed after 30 days, except the record of your acceptance.
Minors
The app is not for people under the legal age for medical cannabis. If we find an account of a minor, we delete it.
If you are a user or patient
What we keep
Your email, the account type, the record of your acceptance and, if you make them, your ratings of the products you bought. We do not ask for your name, diagnosis, patient card or any medical information, except what you choose to note in TRICO Chef's «Your physical care». Your phone keeps your language and a random identifier used to record your acceptance if you use the guide without an account.
Your ratings
After buying and using a product you can rate, from 1 to 5, whether it gave you the effect you were looking for. We keep the effect you looked for, the product, its main terpenes, its THC % (which sets the intensity of the effect), your rating and the date. That builds your list "THC and terpenes that work for me".
Your physical care (TRICO Chef)
If you choose to use it, we keep your weight, physical activity, appetite and mood each week, to show you your chart and alert you to unfavorable changes. It is optional. Only you see your data; the dispensary only sees totals of at least 5 patients, without names. You can stop using it and delete this data whenever you want from the app.
How do you feel today? (TRICO Terpenes Finder)
If you choose to use it, we keep the face you tapped (from «Very bad» to «Very good»), the need you chose that day and the date, under an encrypted identifier instead of your account. It is optional. Only the administration sees anonymous totals of at least 5 people; dispensaries do not see it. It is deleted if you delete your account.
Your authorisation
With its own checkbox, you authorise your ratings to be used, anonymously or under a pseudonym that does not reveal who you are, to refine the app's educational recommendations of terpenes and products and for aggregated analysis. They are never sold.
Your information is yours
You come to the app directly, not through a dispensary, and you are the one who consents about your information: the effect you look for, your ratings, your history and your identity. The app's administration looks after it. The dispensary neither authorises nor consents to anything about your data, because it does not belong to it.
Who sees your information
The app's administration looks after your information. The dispensary where you buy does not see your identity, your searches or your ratings, even when the product was bought there: it only receives aggregated, anonymous figures about its own products, and only once at least 5 people have rated a product. Your information in TRICO is never mixed with CISME's clinical records. When you use a product in TRICO Chef or rate it in TRICO Terpenes Finder, we keep the product, the dispensary and the date, without your name or your email. Dispensaries only see totals of at least 5 patients and never know who used what.
Notifications
Notifications are optional: you can use the app without turning them on. If you turn them on, you authorise receiving notices from participating dispensaries about new products, news, offers and prices. On Android only educational and app notices arrive, with no offers or prices. They are only sent to registered patients who accepted them, never as advertising to the public. You accept them fully aware that you can turn them off at any time, in the app or in your phone's settings. Notifications never include your health data or your ratings.
If you are a dispensary
What we keep
The account's email, each location's details, the licence you upload (in a private file that only you and the administration can see), your products and COAs, your plan and the status of your payments.
The rule
The patient provides and consents to their data; the app's administration looks after it; the dispensary only sees its own aggregated, anonymous share and only consents to its business terms.
Changes
Updates
We may update this policy. If it changes, we will ask you to accept it again before you continue.