Privacy Policy

1. Overview

Cultivar (“the App”) is published by The Canna Codex (“we,” “us,” or “our”). This policy describes what information we collect when you use Cultivar, how we use it, and your rights regarding that information. By using the App, you agree to the practices described here.

2. Information We Collect

2a. Information You Provide

• Account information — email address and password (or third-party OAuth token) when you create an account.
• Grow data — plant names, strain selections, grow stage logs, watering and feeding records, environmental notes, and any text you enter into the grow journal.
• Photos — images you capture or upload for AI plant diagnosis and grow photo journals. Photos are transmitted to our servers for analysis and optionally stored in your grow log.
• AI coach messages — text you send to the in-app Grow Coach. These messages are processed by the Anthropic Claude API to generate responses.

2b. Information Collected Automatically

• Device information — device model, iOS version, app version, and a random device identifier.
• Usage data — features used, screens visited, and in-app events (e.g., diagnosis performed, grow created). Collected via anonymized analytics.
• Crash reports — stack traces and device state at the time of a crash, used solely for debugging.

2c. Information We Do NOT Collect

• Precise GPS location
• Contacts or address book data
• Health or fitness data via HealthKit
• Any data from children under 21 (18 in applicable medical jurisdictions) — the App is for adults only

3. How We Use Your Information

• Provide and operate core app features (grow tracking, AI diagnosis, Grow Coach).
• Transmit photos and messages to the Anthropic Claude API to generate AI responses. We do not use your content to train Anthropic’s models; see Anthropic’s Privacy Policy.
• Sync your grow data across devices via our secure cloud backend (Supabase).
• Send transactional emails (account verification, password reset) via Resend.
• Diagnose bugs and improve app stability using crash reports.
• Understand aggregate feature usage to prioritize improvements (no individual profiling).

4. Data Sharing

We do not sell your personal information. We share data only with the following service providers, solely to operate the App:

• Anthropic — AI processing of photos and chat messages
• Supabase — cloud database and file storage
• Resend — transactional email delivery
• Apple — crash reporting via standard iOS mechanisms

We may disclose information if required by law, to protect our legal rights, or to prevent imminent harm.

5. Data Retention

Your grow data and account information are retained for as long as your account is active. Photos submitted for AI diagnosis that you do not save to a grow log are deleted from our servers within 24 hours. You may delete your account and all associated data at any time from Settings → Account → Delete Account within the App.

6. Security

Data is encrypted in transit (TLS 1.2+) and at rest. Access to production databases is restricted to authorized personnel. We use Row Level Security (RLS) in our database so your data is accessible only to your authenticated account.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access a copy of your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability (export your grow logs)

To exercise any of these rights, email us at privacy@thecannacodex.com. We will respond within 30 days.

8. Children

Cultivar is intended for adults 21 and older (18+ in applicable medical jurisdictions). We do not knowingly collect data from anyone under the applicable age threshold. If you believe a minor has created an account, contact us and we will delete it promptly.

9. Changes to This Policy

We may update this policy periodically. If we make material changes, we will notify you via an in-app notice or email at least 14 days before the change takes effect. Continued use of the App after that date constitutes acceptance of the updated policy.

10. Contact

Questions or concerns about this policy: