When a dispensary scans a patient card, we process the information printed in the card's barcode: name, card number, license type, and issue/expiration dates. We also store dispensary account details (business name, license number, staff emails) and a log of check-ins.
One thing: help licensed Kentucky dispensaries verify patients at the door and keep a compliance record of those checks. We do not sell data, share it with third parties for marketing, or use it for advertising. Ever.
Each dispensary chooses a retention period (30–365 days, default 90). After that, patient names and card numbers are automatically stripped from check-in records; anonymous counts remain for the dispensary's statistics.
Connections are encrypted in transit (HTTPS). Integration keys are encrypted at rest with AES-256-GCM. Staff accounts see only the scan station; integration keys are visible to managers only. Passwords are stored as salted hashes, never as plain text.
Live verification links use the Commonwealth of Kentucky's public card-verification endpoint. Where a dispensary connects its own Metrc facility key, lookups occur under that dispensary's authorization for its own operations only.
Dispensaries may export or delete their scan history and revoke integration keys at any time. Patients may direct questions about their registry data to the Kentucky Office of Medical Cannabis; questions about a specific dispensary's records go to that dispensary.
Patients may create their own Cardinal Check account to keep a photo of their Kentucky medical card handy. If you do, we store your name, your email address, a secured version of your password, and the single card image you upload, and nothing else. We do not ask for or store your diagnosis, your purchase history, or which dispensaries you visit.
Your card image is visible only to you while you are signed in. It is not shared with dispensaries, is not searchable, is not indexed by search engines, and is never sold or used for advertising. Dispensary staff see it only when you choose to show them your screen at the counter, exactly as you would hand over a physical card.
The photo is a convenience copy, not proof of anything. Dispensary staff still scan the barcode and verify your status with the Commonwealth, so an out-of-date or altered image cannot be used to gain access to anything.
You can replace or delete your card photo at any time from your account, and deletion is immediate and permanent. Unlike dispensary check-in records, which follow each dispensary's retention setting, your card image is kept until you delete it or close your account. To close your account entirely, contact us at the address below.
When you tap through to a patient drive or share the drive list from the app, we record that the tap happened, including the date, city, and hosting sponsor of the event, so we can tell sponsors how many people their events reached. We do not record who you are. A random device identifier, created in your browser and never linked to your account, card, or name, is used only to estimate how many distinct people tapped through rather than how many taps occurred.
You can clear that identifier at any time by clearing your browser's site data. Referral programs such as Speakeasy's Bring-A-Bud are run by the dispensary, not by Cardinal Check. We do not track referrals, award points, or receive information about who referred whom.
Cardinal Check · support@cardinalcheck.com