Security & Privacy

Your health data.
Locked. Encrypted. Yours.

We understand the sensitivity of medical cannabis data in the UK. That's why CannaLog is built on an enterprise-grade security infrastructure that prioritises your privacy above all else.

Enterprise-Grade Protection

Built like a bank.
Designed for patients.

Medical data deserves the highest standard of protection. Every architectural decision in CannaLog starts with privacy.

UK Data Protection & EU GDPR Compliant
Registered with the ICO. All data practices comply with UK GDPR and the Data Protection Act 2018.
Data Encrypted in Transit (TLS 1.3) and at Rest (AES-256)
Your data is encrypted before it leaves your device and remains encrypted on our servers.
We Never Sell Your Data
We do not sell your data to clinics, pharmacies, or anyone else. Your health information is not a product.
We Do Not Share Your Data With Anyone*
Unless you explicitly choose to export reports for your prescribing clinic — and only the data you choose to include.

* Unless you explicitly choose to export reports to share with your prescribing clinic. We will never share your data without your explicit, informed consent.

UK GDPR TLS 1.3 AES-256 ICO Registered UK Data Residency
No data sold. Ever.
We do not sell your data to clinics, pharmacies, or any third party. Your information exists solely to serve you.
Data Practices

What we collect.
Why we collect it.

Account Information
Name, email address, and password (hashed). Used only to create and secure your account. Never shared.
Session & Prescription Data
Your logged sessions, dosages, and stock records. Stored encrypted, visible only to you, and never shared.
Usage Analytics
Anonymous, aggregated app usage data (page views, feature usage). No personal data. Used only to improve the platform.