1. Information We Collect

Kushy Scanner collects the following types of information:

Photos: Images you capture or upload for strain identification (processed in real-time and stored on AWS S3)
Account Information: Email address for authentication via Supabase
Scan Results: Strain identification results, confidence scores, timestamps, and optional user notes
Usage Data: Device information, app version, and feature usage for improving the service
Location (Optional): General region for regional strain recommendations (if granted)

2. How We Use Your Information

We use your information to:

Process cannabis strain photos using AI/ML (DINOv2 vision model) for identification
Analyze image quality using OpenAI GPT-4 Vision to provide quality grading
Store your scan history for future reference and personalization
Improve our AI models through anonymized training data (with user consent only)
Provide customer support and respond to your inquiries
Process in-app purchases and subscriptions via Apple App Store and Google Play
Send important service updates and account notifications

3. Third-Party Services

We use the following trusted third-party services to operate Kushy Scanner:

Supabase: Secure authentication, database storage, and real-time data sync
AWS (Amazon Web Services): Image storage (S3) and content delivery (CloudFront CDN)
OpenAI: GPT-4 Vision API for cannabis quality analysis and grading
Apple App Store & Google Play: In-app purchase and subscription management

These services have their own privacy policies and security measures. We ensure all partners meet industry standards for data protection.

4. Data Storage and Security

Your data is protected with enterprise-grade security:

Encryption: All data is encrypted in transit (TLS/SSL) and at rest
Authentication: Supabase authentication with row-level security (RLS) policies
Image Storage: Photos stored on AWS S3 with access controls and versioning
Database: PostgreSQL with vector embeddings for ML, access-controlled per user
CDN: Fast, secure image delivery via CloudFront with HTTPS

Important: While we store your scan results and photos for your personal history, images are never shared publicly or with third parties without your explicit consent.

5. Data Retention and Deletion

We retain your data as follows:

Scan History: Stored indefinitely in your account until you delete individual scans or your entire account
Photos: Stored on AWS S3 until you delete them from your scan history
Account Data: Retained until you request account deletion
Anonymized Analytics: May be retained for service improvement

You can delete individual scans or your entire account at any time through the app settings.

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share data only in these limited circumstances:

With Your Consent: When you explicitly choose to share scan results (e.g., certificate sharing)
Service Providers: With third-party services listed above, solely for operating the app
Anonymized Data: Aggregated, non-identifiable usage statistics for research and ML model improvement
Legal Requirements: If required by law, court order, or to protect our legal rights

7. Your Privacy Rights

You have the right to:

Access: View all personal data we have about you
Deletion: Request deletion of your account and all associated data
Export: Download your scan history in a portable format
Correction: Update or correct your account information
Opt-Out: Unsubscribe from promotional emails (service emails still required)
Portability: Request a copy of your data in a machine-readable format

To exercise these rights, contact us at privacy@getkushy.com or use the account settings in the app.

8. Children's Privacy

Kushy Scanner is intended exclusively for users 21 years of age and older (or the legal age for cannabis consumption in your jurisdiction). We do not knowingly collect information from individuals under the legal age. If we become aware of such collection, we will promptly delete the information.

9. International Users

Kushy Scanner is operated from the United States. If you are accessing the service from outside the US, your information will be transferred to, stored, and processed in the United States. By using Kushy Scanner, you consent to this transfer.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information is collected and how it's used
Right to delete personal information
Right to opt-out of the sale of personal information (note: we do not sell your data)
Right to non-discrimination for exercising your privacy rights

11. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes via:

Email notification to your registered address
In-app notification
Update to the "Last Updated" date at the top of this policy

Your continued use of Kushy Scanner after changes indicates your acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

Email: privacy@getkushy.com
Response Time: We aim to respond to all inquiries within 48 hours