Privacy Policy

Effective date: July 14, 2026

Information We Collect

We do not operate an account system or server for REC data. If a user enters medical cannabis card details, practitioner information, notes, purchase entries, or a confirmed allotment value, the app stores that information locally on the device. We do not receive those values on our servers.

Official Portals

Official state portals and retailer websites open in Safari. The user signs in directly with the external service. Weed Authority does not collect or receive portal usernames, passwords, multi-factor authentication codes, session cookies, or Safari browsing data. It does not automate portal navigation, inject scripts, or read portal page content. Those services have their own privacy practices and are not controlled by Weed Authority.

Florida and Arizona Screenshot Import

For supported Florida and Arizona portal screens, a user may choose a screenshot from the device. Apple on-device text recognition reads the image, and the app presents possible allotment values for the user to review and explicitly confirm. The screenshot is used only for that import flow; Weed Authority does not save a separate copy, and the in-app copy is discarded after processing. The original remains wherever the user saved it, such as the Photos library, until the user deletes it there.

Only the normalized value, unit, route or category when available, source state, and confirmation time are saved in the device-only Keychain. There is no background or live portal synchronization. A saved snapshot is marked stale after 24 hours and is invalidated when the user records a new purchase.

Advertising and Consent

Weed Authority uses Google AdMob banner advertising on the Explore, Deals, Learn, and Account screens. The REC screen does not display an ad banner, and the app does not send REC profile fields, medical cannabis identifiers, screenshot text, allotment values, or purchase ledger values to Google.

The Google Mobile Ads SDK may process device or advertising identifiers, IP-derived information, ad interactions, and app or device diagnostics to serve, measure, prevent fraud, and improve ads, subject to the user's consent choices and Google's policies. Where required, the app presents Google's consent or privacy-options controls and requests ads only when the Google consent SDK reports that ads may be requested. Learn more in Google's Privacy Policy.

Data Sharing

We do not sell personal information. We do not share app-entered REC profile, screenshot-derived allotment, or purchase ledger values with Google or other third parties. Advertising data processed by Google is governed by the consent choices and policies described above.

Accuracy and State Records

A confirmed snapshot is a convenience copy, not proof of eligibility or authorization to purchase. Optical text recognition, manual entries, and saved data can be incomplete, stale, or incorrect. The state registry, the user's clinician, and the licensed dispensary remain authoritative.

Deletion

Users can delete local Weed Authority data inside the app from Account → Delete local data. A screenshot originally saved to Photos must be deleted separately in Photos. Removing the app from the device also removes its local app data according to iOS behavior.

Contact

For privacy questions, email social@eb28.co.