Privacy Policy

Effective 20 September 2026 · FLMMC Wiki

FLMMC Wiki ("the service") is a research prototype: a compliance assistant for Florida's medical marijuana program that answers only from cited sources. It is run by an individual operator ("we"). This page says what information the service handles, why, and how to have it deleted.

Who can use the service

The assistant is open by invitation only. Sign-in is handled by Cloudflare Access, which checks that your email address is on the invitation list.

What is collected

• Sign-in information, handled by Cloudflare. When you sign in, Cloudflare receives your email address. If you choose "Sign in with Google", Google shares your basic profile (name, email address and profile picture) with Cloudflare Access for that single purpose. The assistant application itself does not receive or store your Google account data. We can see sign-in events (email address, time, IP address and country) in the Cloudflare dashboard.
• Your conversations. The questions you type and the answers you receive are stored on the operator's computer so the prototype can be evaluated and improved.
• Details you choose to give. If you pick a role (for example patient, caregiver, physician, treatment center or laboratory), confirm facts about your situation, or submit a note, the service stores them under a random identifier so later answers can take them into account.
• In your browser. The service keeps a random session identifier and a list of your recent sessions in your browser's local storage. The application sets no cookies and uses no analytics or advertising trackers. Cloudflare sets a cookie that keeps you signed in and may set strictly necessary security cookies.
• Server logs. Technical logs (time, requested path, status code) are kept on the operator's computer for troubleshooting.

How it is used

Only to operate, secure, evaluate and improve the prototype. We do not sell your information, do not use it for advertising, and do not share it with anyone except the service providers named below.

Where it is processed

Conversations are processed by a language model that runs on the operator's own computer. They are not sent to a third-party AI provider. If that ever changes, this page will be updated first. Stored data may be copied to the operator's private cloud storage (Google Drive) as a backup.

Service providers

• Cloudflare delivers the site, handles sign-in and keeps access logs.
• Google provides optional sign-in and the operator's private backup storage.

Google user data — Limited Use

FLMMC Wiki's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

The service asks Google only for the basic sign-in scopes (openid, email, profile), and only to authenticate you through Cloudflare Access. A separate Google Drive permission (limited to files the tool itself creates) is used solely by the operator's own backup tool to write backup files into the operator's own Google Drive. It is never requested from visitors or testers and gives no access to anyone else's files.

Please do not submit sensitive information

Do not enter health information, patient identifiers, or personal information about other people. The assistant does not need it to answer a compliance question.

Keeping and deleting your information

Information is kept while the prototype is being evaluated. You can ask at any time to have your conversations and profile details deleted: email [email protected] from the address you sign in with. We will delete them, including from backups, within 30 days and confirm when it is done. Because the application does not record who you are, we may ask you for the approximate times you used the service, or for the session identifiers shown in your browser, so that we can find your records.

Children

The service is intended for adults aged 18 and over.

Changes

If this policy changes, the new version will be posted here with a new effective date.

Contact

[email protected]