Privacy Policy

1.1 Website (thisiswhyimhigh.com)

The Website is a public cannabis strain encyclopedia. We collect minimal information:

Automatically Collected Information:

• Device type and browser information
• IP address and general location (city/state level)
• Pages visited and time spent
• Referral source
• Cookie identifiers (see Cookie Policy below)

Optional Information:

• Email address if you subscribe to our newsletter
• Feedback or questions you submit via contact forms

We do NOT require account creation or collect personal data to browse strain information.

1.2 High IQ App

The App is a personal cannabis research tool that requires an account. We collect:

Account Information (via Clerk):

You sign in with Sign in with Apple or with Google. The App has no password sign-in, so we never receive, store, or reset a password.

• The email address your sign-in provider returns, including an Apple private relay address if you choose to hide your real address
• Your name, if your provider shares it
• A provider account identifier that links your sign-in to your High IQ account
• Session records, managed by Clerk, our authentication provider

Subscription Information (via Apple and RevenueCat):

• Your Pro entitlement status and its renewal or expiration date
• The subscription product you bought, and purchase, renewal, restore, and cancellation events

Apple processes the payment. We never see or store your card details. Section 5 covers this in full.

Cannabis Research Data:

• Purchase receipts you upload (processed via AI)
• Dispensary information
• Cannabis strain purchases and consumption data
• Personal stash inventory
• Consumption patterns and preferences
• Favorites and ratings
• Notes and personal insights

Usage Information:

• App features used and interaction patterns
• Device information (type, OS version, app version)
• Session data and timestamps
• Error logs and crash reports (via Sentry)

Crash and diagnostic reports go to Sentry. We configure Sentry so it does not attach default personal data: it does not infer your IP address and it does not attach cookies or profile context. A report carries the error, a stack trace, the app and device version, and a pseudonymous identifier that lets us tell one person's repeated crash from many people's single crashes. Every event passes through a sanitizer on your device before it is sent.

Gmail Data (only if you connect Gmail):

• Dispensary receipt details extracted from matching messages. Section 7 covers what we read, what we keep, and how to disconnect

AI-Generated Content:

• Personalized reports and insights we generate for you
• Recommendations based on your preferences
• Receipt parsing results

3.1 Third-Party Service Providers

We work with trusted service providers who help us operate our services. These providers are contractually required to protect your data and use it only for specified purposes:

3.2 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you via email and/or prominent notice before your information becomes subject to a different privacy policy.

3.3 Legal Requirements

We may disclose your information if required by law or in response to:

• Valid legal process (subpoena, court order)
• Lawful requests by public authorities
• Protection of our rights, privacy, safety, or property
• Emergency situations involving danger of death or serious physical injury

We will notify you of legal requests unless prohibited by law.

3.4 Aggregated or De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you. For example: "30% of users prefer indica strains" or "Average stash size is 5 products."

High IQ Pro is a paid subscription. You buy it through Apple's In-App Purchase system, and we manage entitlements with RevenueCat.

5.1 What Apple Handles

• Apple processes the payment and holds your payment method. We never see or store your card number, billing address, or Apple ID password
• Apple manages renewals, cancellations, and refunds. You control the subscription in your Apple account settings
• Apple gives us aggregated sales and subscription reports through App Store Connect

5.2 What RevenueCat Receives

RevenueCat is our subscription infrastructure provider. It receives:

• An app user identifier that we generate and map to your High IQ account
• Your email address and the name on your account, so that we can find your subscription when you contact support
• A few facts about your account that help us support you: whether you signed in with Apple, Google or email, the date you created your account, the invite wave you joined through, and which version of the App you use
• The Apple receipt for your purchase, which Apple issues and validates
• Product identifiers, purchase and expiration dates, and renewal, restore, or cancellation events
• Device and platform information such as app version, operating system version, and country

RevenueCat returns the resulting entitlement state, which tells the App whether your Pro access is active. RevenueCat processes this information on our behalf and does not use it for advertising. RevenueCat does not receive your stash, orders, receipts, or notebooks, or anything else about what you consume.

5.3 What We Store

• Your entitlement status: active, expired, or in a billing grace period
• The product you bought and its renewal or expiration date
• Purchase and restore events, so support can resolve access problems

We keep a copy of your subscription status with your account record at Clerk, our authentication provider: whether you have Pro, your plan, when it ends or renews, and whether a payment failed. It lets us see your account and your subscription in one place when you contact support. It is stored where only we can read it, and the App does not use it to decide your access.

Price, billing period, and auto-renewal terms appear on the paywall in the App before you buy. Cancel at any time in your Apple account settings. Cancellation takes effect at the end of the period you already paid for.

High IQ can import dispensary receipts from your Gmail inbox so you do not have to photograph them. This feature is off by default. It never runs unless you connect your Google account and grant access yourself, and you can revoke that access at any time.

7.1 What We Request

• One scope: https://www.googleapis.com/auth/gmail.readonly
• That scope is read-only. We cannot send, delete, or modify mail, and we cannot change any Google account setting

7.2 What We Read

We use the shops or senders and date range you select to search for receipt and order candidates. Discovery reads candidate sender, subject and preview information; some candidates may not be receipts. Selected messages are processed to extract dispensary and order details for your review:

• Dispensary name and order date
• Product names, quantities, prices, and totals
• Order and confirmation numbers

We do not use Gmail data for advertising.

For the messages that do match, we hold the sender, the subject line, and Gmail's short preview snippet alongside the import job, so you can review what we matched before you accept it. A daily job purges that metadata within seven days of the import finishing. The orders you accept stay as ordinary order records, without the email metadata.

7.3 AI and Gmail Data

Candidate sender, subject and preview text can be sent through Vercel AI Gateway to the configured OpenAI classifier before you select full messages for extraction. If the optional TypeSafe filtering step is enabled, candidate metadata can also be sent to TypeSafe AI. Selected receipt content is processed by the configured receipt-parsing providers described in Section 6. These steps support the receipt import feature. It is not used to train any model.

The same Limited Use terms above apply: this is part of providing the import feature you turned on, the data is not used for advertising, and it is not used to train any model.

7.4 How to Disconnect

• In Gmail Import settings, select Disconnect to stop imports and revoke access. If revocation cannot be confirmed, the app asks you to retry. Disconnect cleanup removes temporary import data; saved orders remain until you delete them
• In your Google account, open third-party access settings and remove High IQ
• Receipts already imported stay in your account as ordinary order records. Delete them individually, or delete your account to remove everything

7.5 Availability and Consent

Everything in this section applies only if you connect Gmail. Gmail import is a High IQ Pro feature, it stays inactive until you grant the read-only scope on Google's own consent screen, and nothing is read before you do.

Google reviews every app that requests this scope, so the feature is not in every release. If you do not see it, it is not available to you yet, and nothing described in this section is happening to your mail.

8.1 Website

• Analytics data: Retained for 26 months
• Newsletter subscribers: Until you unsubscribe
• Contact form submissions: Retained for 2 years

8.2 High IQ App

We keep your High IQ data until you delete it. History is what makes the App useful, so we do not expire your records on a timer.

While Your Account Exists:

• Account information: Retained until you delete your account
• Cannabis research data: Retained until you delete the record or delete your account
• Receipt images: Retained with the order they belong to, until you delete that order or your account
• Product label photos and videos: We do not store these on our backend, including temporary media storage. Selected still images are sent for AI extraction. Optional copies stay on your device and are removed when you clear the cache or uninstall the App. Extracted label text and measurements are retained until you delete the record or your account. AI providers process selected images under their published policies and our configured retention controls
• Notebooks and other AI output: Retained until you delete them or delete your account
• Subscription records: Retained while the subscription is active and afterward as required for tax and accounting
• Crash and error reports: Retained for 90 days by Sentry

We do not run an automatic inactivity purge today. If we add one, we will describe it here and tell account holders before it takes effect.

Deleting Your Account:

• Delete your account in the App from your profile settings. You do not need to email us or wait for us to act
• Requesting deletion starts a background deletion workflow. Removal from live systems completes as that workflow processes the account's records
• Encrypted backups age out on their own schedule, within 30 days
• Aggregated or de-identified data that cannot reasonably identify you may be retained
• Records we must keep by law, such as transaction records, are retained for as long as the law requires

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

10.1 Categories of Personal Information Collected

10.2 Sale and Sharing of Personal Information

• Sale: We do NOT sell your personal information
• Sharing for Advertising: We do NOT share your personal information for targeted advertising
• Sensitive Personal Information: We do NOT use or disclose sensitive personal information beyond what is necessary to provide our services

10.2.1 Opt-Out Preference Signals

We honor opt-out preference signals such as the Global Privacy Control (GPC). When we detect a GPC signal from your browser, we treat it as a valid request to opt out of any sale or sharing of your personal information.

10.2.2 Data Broker Status

We are NOT a data broker as defined under California Civil Code Section 1798.99.80. We do not collect personal information about consumers with whom we do not have a direct relationship for the purpose of selling that information.

10.3 California Consumer Rights

You have the right to:

1. Know what personal information we collect, use, and share
2. Request deletion of your personal information
3. Correct inaccurate personal information
4. Opt out of the sale/sharing of personal information (not applicable - we don't sell/share)
5. Limit use of sensitive personal information
6. Non-discrimination for exercising your rights

10.4 Authorized Agents

You may designate an authorized agent to submit privacy requests on your behalf. Authorized agents must provide:

• Signed written authorization from you
• Proof of identity for both you and the agent

We may deny requests from agents that cannot verify proper authorization.

10.5 Contact for California Requests

Email: hello@highailabs.com
Subject: "California Privacy Rights Request"

We will respond within 45 days as required by California law.

Our services are intended exclusively for adults 21 years of age or older, in compliance with cannabis-related age restrictions. The App asks you to confirm that you are 21 or older before you use it, and the App Store rates High IQ for mature audiences.

We do NOT knowingly collect information from anyone under 21 years of age. If we discover that we have collected information from someone under 21, we will delete it immediately.

If you believe we have collected information from someone under 21, please contact us immediately at hello@highailabs.com.

We may update this Privacy Policy from time to time to reflect:

• Changes in our practices
• New legal requirements
• Service improvements or new features

How we notify you:

• Material Changes: We will notify you via email (if you have an App account) and/or prominent notice at least 30 days before changes take effect
• Minor Changes: We will update the "Last Updated" date and post the new policy

Your continued use of our services after changes take effect constitutes acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.