Privacy Policy
Effective Date: December 28, 2025
Introduction
This Is Why I'm High ("we," "us," or "our") operates the website thisiswhyimhigh.com (the "Website") and the High IQ mobile application (the "App"). We are committed to protecting your privacy and being transparent about how we collect, use, and protect your information.
This Privacy Policy explains:
- What information we collect and why
- How we use and share your information
- Your privacy rights and choices
- How we protect your data
- How to contact us with questions
This Privacy Policy applies to both the Website and the App. Where practices differ between the two, we specify which service is affected.
π Age Requirement
Our services are intended for adults 21 years of age or older. We do not knowingly collect information from anyone under 21.
1. Information We Collect
1.1 Website (thisiswhyimhigh.com)
The Website is a public cannabis strain encyclopedia. We collect minimal information:
Automatically Collected Information:
- Device type and browser information
- IP address and general location (city/state level)
- Pages visited and time spent
- Referral source
- Cookie identifiers (see Cookie Policy below)
Optional Information:
- Email address if you subscribe to our newsletter
- Feedback or questions you submit via contact forms
We do NOT require account creation or collect personal data to browse strain information.
1.2 High IQ App
The App is a personal cannabis research tool that requires an account. We collect:
Account Information (via Clerk):
- Email address or phone number (for sign-in)
- Profile information you provide
- Authentication credentials (managed securely by Clerk)
Cannabis Research Data:
- Purchase receipts you upload (processed via AI)
- Dispensary information
- Cannabis strain purchases and consumption data
- Personal stash inventory
- Consumption patterns and preferences
- Favorites and ratings
- Notes and personal insights
Usage Information:
- App features used and interaction patterns
- Device information (type, OS version, app version)
- Session data and timestamps
- Error logs and crash reports (via Sentry)
AI-Generated Content:
- Personalized reports and insights we generate for you
- Recommendations based on your preferences
- Receipt parsing results
2. How We Use Your Information
2.1 Website
We use Website information to:
- Provide and improve strain encyclopedia content
- Understand which strains and information are most valuable
- Optimize website performance and user experience
- Send occasional newsletters (if you opt in)
- Respond to your inquiries
2.2 High IQ App
We use App information for:
Core Service Delivery:
- Authenticate your account and maintain secure access
- Store and organize your cannabis purchase and consumption data
- Parse receipts and extract strain information
- Generate personalized insights and reports
- Provide strain recommendations based on your preferences
- Track your stash inventory and consumption patterns
- Predict restock timing and cost optimization opportunities
Service Improvement:
- Analyze usage patterns to improve app features
- Debug errors and crashes to ensure reliability
- Develop new features based on user needs
Communication:
- Send important service updates and security alerts
- Notify you about new features (if you opt in)
- Respond to support requests
Automated Decision-Making:
We use automated decision-making technology (AI) to:
- Parse receipt images and extract product information (product names, prices, quantities)
- Generate personalized strain recommendations based on your stated preferences
- Create consumption insights and reports from data you provide
These automated processes:
- Help improve your experience
- Do NOT make decisions that produce legal or similarly significant effects on you
- Do NOT profile you for advertising or marketing purposes
- Do NOT share your data with third parties for their own purposes
The data we collect is limited to what you voluntarily provide (receipts you upload, preferences you set, consumption you log). We do not collect data from external sources or purchase consumer data.
π We Do NOT:
- Sell your personal information to third parties
- Share your cannabis consumption data with employers, insurers, or law enforcement (except as legally required)
- Use your data for advertising purposes
- Share your data with cannabis retailers or dispensaries
3. How We Share Your Information
3.1 Third-Party Service Providers
We work with trusted service providers who help us operate our services. These providers are contractually required to protect your data and use it only for specified purposes:
| Provider | Purpose | Data Shared |
|---|---|---|
| Clerk | Authentication | Email/phone, credentials |
| Convex | Database | App data (purchases, stash, reports) |
| Sentry | Error Tracking | Error logs, device info |
| AI Providers | Receipt parsing, insights | Receipt images, consumption data |
| Vercel | Hosting | Website traffic data |
3.2 Business Transfers
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you via email and/or prominent notice before your information becomes subject to a different privacy policy.
3.3 Legal Requirements
We may disclose your information if required by law or in response to:
- Valid legal process (subpoena, court order)
- Lawful requests by public authorities
- Protection of our rights, privacy, safety, or property
- Emergency situations involving danger of death or serious physical injury
We will notify you of legal requests unless prohibited by law.
3.4 Aggregated or De-Identified Data
We may share aggregated or de-identified information that cannot reasonably be used to identify you. For example: "30% of users prefer indica strains" or "Average stash size is 5 products."
4. Data Security
We take data security seriously and implement industry-standard security measures:
Technical Safeguards:
- Encryption in transit (TLS/SSL for all connections)
- Encryption at rest (database encryption)
- Secure authentication via Clerk (password hashing, multi-factor authentication support)
- Regular security audits and updates
- Access controls and logging
Organizational Safeguards:
- Limited employee access to personal data (solo founder operation)
- Service provider agreements requiring data protection
- Regular review of security practices
- Incident response procedures
App-Specific Security:
- Secure local storage (MMKV with encryption)
- Session management and automatic logout
- Secure API communications
While we implement strong security measures, no system is 100% secure. We cannot guarantee absolute security, but we promptly address any identified vulnerabilities and will notify you of any data breach as required by law.
5. Data Retention
5.1 Website
- Analytics data: Retained for 26 months
- Newsletter subscribers: Until you unsubscribe
- Contact form submissions: Retained for 2 years
5.2 High IQ App
Active Accounts:
- Account information: Retained while your account is active
- Cannabis research data: Retained indefinitely while your account is active (to maintain historical insights and trends)
- Receipt images: Processed for data extraction, then deleted within 30 days. Extracted text data (product names, prices, quantities) is retained with your cannabis research data
- Usage logs: Retained for 2 years
- Error logs: Retained for 90 days (via Sentry)
Inactive Accounts:
- If you don't log in for 3 years, we may contact you about account closure
- After 4 years of inactivity, we may delete your account and associated data
After Account Deletion:
- Most data is deleted within 30 days
- Some data may be retained for up to 90 days in backups
- Aggregated/anonymized data may be retained indefinitely
- Legal compliance data may be retained as required by law
You can request immediate data deletion by contacting us (see Contact section).
6. Your Privacy Rights
You have the following rights regarding your personal information:
6.1 Access and Portability
- Right to Know: Request what personal information we have about you
- Right to Access: Obtain a copy of your personal information
- Right to Portability: Receive your data in a structured, machine-readable format (JSON export available in App)
6.2 Correction and Deletion
- Right to Correct: Update inaccurate or incomplete information (available in App settings)
- Right to Delete: Request deletion of your personal information
6.3 Control and Consent
- Right to Opt-Out: Opt out of marketing communications
- Right to Withdraw Consent: Withdraw consent for data processing (where consent is the legal basis)
- Right to Limit Use: Request limitations on how we process sensitive data
6.4 Non-Discrimination
We will not discriminate against you for exercising your privacy rights. You will not receive different pricing or service levels for making privacy requests.
6.5 How to Exercise Your Rights
π± In the App:
- Most data management: Settings β Privacy & Data
- Export your data: Settings β Export My Data
- Delete account: Settings β Account β Delete Account
π§ By Email:
- Send requests to: hello@thisiswhyimhigh.com
- Include: Your name, email/phone used for account, specific request
- We will verify your identity and respond within 45 days
7. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
7.1 Categories of Personal Information Collected
| Category | Examples | Collected |
|---|---|---|
| Identifiers | Email, phone number, device IDs | Yes (App) |
| Personal Records | Purchase receipts, consumption data | Yes (App) |
| Commercial Information | Purchase history, preferences | Yes (App) |
| Internet Activity | App usage, browsing data | Yes (Both) |
| Geolocation | General location (city/state) | Website only |
| Sensory Information | Receipt images (photos you upload) | Yes (App) |
| Inferences | Preferences, recommendations | Yes (App) |
7.2 Sale and Sharing of Personal Information
- Sale: We do NOT sell your personal information
- Sharing for Advertising: We do NOT share your personal information for targeted advertising
- Sensitive Personal Information: We do NOT use or disclose sensitive personal information beyond what is necessary to provide our services
7.2.1 Opt-Out Preference Signals
We honor opt-out preference signals such as the Global Privacy Control (GPC). When we detect a GPC signal from your browser, we treat it as a valid request to opt out of any sale or sharing of your personal information.
7.2.2 Data Broker Status
We are NOT a data broker as defined under California Civil Code Section 1798.99.80. We do not collect personal information about consumers with whom we do not have a direct relationship for the purpose of selling that information.
7.3 California Consumer Rights
You have the right to:
- Know what personal information we collect, use, and share
- Request deletion of your personal information
- Correct inaccurate personal information
- Opt out of the sale/sharing of personal information (not applicable - we don't sell/share)
- Limit use of sensitive personal information
- Non-discrimination for exercising your rights
7.4 Authorized Agents
You may designate an authorized agent to submit privacy requests on your behalf. Authorized agents must provide:
- Signed written authorization from you
- Proof of identity for both you and the agent
We may deny requests from agents that cannot verify proper authorization.
7.5 Contact for California Requests
Email: hello@thisiswhyimhigh.com
Subject: "California Privacy Rights Request"
We will respond within 45 days as required by California law.
8. Other State Privacy Rights
We comply with state privacy laws where applicable. Below are additional rights for residents of specific states:
Washington State (My Health My Data Act)
If you are a Washington State resident, your cannabis consumption data may be considered "consumer health data" under the My Health My Data Act. You have additional rights including:
- Right to explicit consent before collection of health data
- Right to know what consumer health data we collect and why
- Right to withdraw consent and request deletion
- Right to data portability
Colorado (Colorado Privacy Act)
Colorado residents have enhanced privacy protections for cannabis purchases including:
- Right to opt out of targeted advertising
- Right to access, correct, and delete personal data
- Right to data portability
Virginia, Connecticut, Utah, and Other States
Residents of states with comprehensive privacy laws (Virginia VCDPA, Connecticut CTDPA, Utah UCPA, Oregon, Texas, Montana, Delaware, Iowa, New Hampshire, New Jersey, and others) have similar rights to access, delete, correct, and port their data. Contact us at hello@thisiswhyimhigh.com to exercise these rights.
π Our Commitment
We do NOT sell or share your consumer health data or cannabis consumption information without your explicit consent. This applies regardless of your state of residence.
9. Cookie Policy
9.1 What Are Cookies?
Cookies are small text files stored on your device when you visit websites. They help websites remember your preferences and understand how you use the site.
9.2 Cookies We Use (Website Only)
| Type | Purpose | Duration | Opt Out? |
|---|---|---|---|
| Essential | Basic site functionality, security | Session - 1 year | No (required) |
| Analytics | Understand site usage | Up to 26 months | Yes |
| Preference | Remember your settings | Up to 1 year | Yes |
9.3 Mobile App - No Cookies
The High IQ App does NOT use cookies. Instead, we use secure local storage (MMKV) for app preferences and data, which remains on your device.
9.4 Cookie Management
Most browsers allow you to control cookies via settings. You can block all cookies, but some site features may not work. We will ask for cookie consent on your first visit (EU/UK visitors).
9.5 Do Not Track Signals
Some browsers send "Do Not Track" (DNT) signals. Due to the lack of a common industry standard for interpreting DNT signals, we do not specifically respond to DNT signals at this time. However, we do honor Global Privacy Control (GPC) signals as described in Section 7.2.1 above.
10. Children's Privacy
Our services are intended exclusively for adults 21 years of age or older, in compliance with cannabis-related age restrictions.
We do NOT knowingly collect information from anyone under 21 years of age. If we discover that we have collected information from someone under 21, we will delete it immediately.
If you believe we have collected information from someone under 21, please contact us immediately at hello@thisiswhyimhigh.com.
11. International Users
Our services are operated from the United States and designed for U.S. users.
If you are outside the United States:
- Your information will be transferred to and processed in the United States
- U.S. data protection laws may differ from your country's laws
- By using our services, you consent to this transfer
For EU/UK Users:
We comply with applicable data protection principles. Our third-party service providers participate in the Data Privacy Framework for EU-U.S. and UK-U.S. data transfers.
If you are in the EU or UK, you have additional rights under GDPR including the right to access, rectification, erasure, restriction, objection, and portability. Contact us at hello@thisiswhyimhigh.com to exercise these rights.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- Changes in our practices
- New legal requirements
- Service improvements or new features
How we notify you:
- Material Changes: We will notify you via email (if you have an App account) and/or prominent notice at least 30 days before changes take effect
- Minor Changes: We will update the "Last Updated" date and post the new policy
Your continued use of our services after changes take effect constitutes acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.
13. Third-Party Links
Our Website and App may contain links to third-party websites, services, or content (e.g., dispensary websites, strain lab reports, educational resources).
β οΈ Important:
- We are not responsible for the privacy practices of third-party sites
- Third-party sites have their own privacy policies
- We encourage you to read their privacy policies before providing any information
Links do not imply endorsement of third-party privacy practices.
14. Cannabis Industry Privacy Protections
We understand the sensitive nature of cannabis-related data and are committed to protecting your privacy:
Employment Concerns:
- We do NOT share your consumption data with employers
- We do NOT verify employment or conduct background checks
- Your data remains private and is used solely for app functionality
Legal Concerns:
- We will only disclose data if legally required
- We will notify you of legal requests unless prohibited by law
- We recommend reviewing your state's cannabis privacy laws
Insurance/Medical:
- We are NOT a healthcare provider
- We do NOT share data with insurance companies
- Our app is for personal research, not medical advice
State-Specific Protections:
Some states have additional privacy protections for cannabis consumers:
- Colorado CPA: Enhanced privacy for cannabis purchases
- Washington My Health My Data Act: Treats cannabis data as "consumer health data" with strict protections
- California CCPA/CPRA: Enhanced controls over sensitive personal information
We comply with applicable state privacy laws where we operate.
15. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices:
Email: hello@thisiswhyimhigh.com
Subject Line Suggestions:
"Privacy Question" (general inquiries)
"Data Request" (access, deletion, correction)
"California Privacy Rights Request" (CCPA requests)
Company: This Is Why I'm High
Location: California, United States
Response Time: We aim to respond within 5 business days for general inquiries and within 45 days (or sooner as required by law) for formal data requests.
Summary of Key Points
What We Collect
- β’ Website: Minimal analytics, no account required
- β’ App: Account info, cannabis purchases, consumption data
How We Use It
- β’ Provide personalized insights and reports
- β’ Improve our services
- β’ Essential communications only
We Do NOT
- β’ Sell your personal information
- β’ Share your data for advertising
- β’ Share consumption data with employers
Your Rights
- β’ Access, correct, or delete your data
- β’ Export your data (App)
- β’ Opt out of marketing
Effective Date: December 28, 2025 β’ Last Updated: December 28, 2025