Privacy Policy | RezWeed

This policy explains what RezWeed collects, why, who it is shared with, how long it is kept, and how to access or delete it. It covers the RezWeed website and mobile app, and matches the Data Safety and App Privacy disclosures we file with the Google Play Store and Apple App Store.

Information We Collect

What	Detail	Why
Email address	When you create an account, claim a store listing, submit a correction, or contact us. Accounts are managed by Supabase Auth.	To sign you in, link you to a store you have claimed, and reply to you.
Name and phone number	Only when you enter them yourself on a claim, correction, or contact form.	To verify a claim over a listing and to contact you about it.
App and site activity	Pages and listings viewed, features used, referring site, device type, platform, and campaign tags in the link you arrived on.	To measure which features are used, fix what is broken, and report aggregate traffic to the shops we list.
Search terms	The text you enter into the map search, product search, and strain browser, stored with whether the search returned results. Limited to the first 100 characters.	To find what people look for and cannot find, so we can add missing shops, products, and strains.
A pseudonymous identifier	A random identifier your browser or app stores locally, which we retain only as a salted SHA-256 hash. Where local storage is unavailable we substitute a daily-rotating hash of your IP address and browser string. Raw IP addresses are not stored alongside activity.	To count returning visitors and sessions without identifying anyone.
Approximate location	Country, region, and city, derived from the IP address of the request by our hosting provider. Coarse by design.	To report which regions traffic comes from and to open the map in a sensible area.
Precise location	Only with your permission, and only in the browser or app. Passed to Mapbox to render the map. Not written to our analytics and not retained on our servers.	To centre the map on you and sort shops by distance.

We also process this information to prevent fraud and abuse, to enforce our Terms of Service, and to keep the service secure and working correctly.

What We Do Not Do

We do not sell or rent personal information.
We do not use tracking cookies or third-party advertising trackers.
We do not build advertising profiles, or share data with data brokers or ad networks.
We do not track you across other websites.

Analytics

Our analytics are first-party and self-hosted. Your browser or app stores a random identifier locally — not a cookie — and we record a salted hash of it alongside the page you viewed and any search you ran.

We describe that identifier as pseudonymous rather than anonymous: it is stable enough to recognise a returning visitor, though it is not linked to your name or email unless you are signed in. Clearing your browser or app storage resets it. Analytics records contain no name, email address, phone number, or precise location. As with any website, avoid entering personal information into a search box.

Precise Location

Location permission is optional and can be revoked at any time in your browser or device settings. If you grant it, your coordinates are used in the browser or app to centre the map and calculate the distance to each shop, and are passed to Mapbox to render the map. They are not written to our analytics and are not retained on our servers. If you decline, shops are simply not sorted by distance; everything else works normally.

Who We Share With

Mapbox — renders the maps. Receives map interactions, and your precise coordinates only where you have granted location permission.
Supabase — hosts our database and authentication. Stores your email address, anything you submit through a form, and the analytics records described above.

Both act as processors on our instructions and under their own privacy policies, and both may process data outside Canada, including in the United States. We may also disclose information where required by law, or to protect our rights, our users, or the security of the service.

How Long We Keep It

Account information — until you delete your account.
Analytics and search terms — kept on an ongoing basis in pseudonymous form for trend reporting.
Corrections and listing submissions — kept as the record of changes made to a business listing.
Contact messages — kept while we handle your enquiry and for a reasonable period afterwards.

Your Choices and Rights

You can access, correct, or delete the personal information we hold about you, withdraw consent for optional collection, and ask how your information has been used. To exercise any of these, use the contact form at the bottom of this page.

Location — revoke permission at any time in your browser or device settings.
Analytics identifier — reset it by clearing your browser or app storage.
Account — delete it yourself, as described below.

Deleting Your Account

You can delete your account from the account screen in the app or on the website. Instructions are at rezweed.com/account-deletion. Deletion is immediate and irreversible; it is not a request queued for review.

Deleting your account removes:

Your sign-in identity, including your email address and any linked Google sign-in.
Your saved favourite stores.
Your shopper profile and any preferences stored against it.

Two categories are retained:

Corrections and listing submissions. These describe a business — its address, hours, and contact details — rather than you, and other users rely on them. If a submission of yours contains your own contact details and you want them removed, contact us and we will remove them from that record.
Analytics records. These are tied to the pseudonymous identifier described above and are not linked to your account, so they cannot be located by identity.

Business Listing Information

Our directory contains business information about cannabis retailers: store name, address and location, contact details, social media links, and opening hours. This is either publicly available information gathered from business websites, social media, and public directories, or information submitted to us — standard practice for a business directory.

If you operate a listed business and want to update or remove your listing, use the "Suggest Edit" link on that store's page, or contact us.

Age Restriction

RezWeed is intended for adults of legal age to purchase cannabis in their jurisdiction. It is not directed at children, and we do not knowingly collect information from anyone under that age. If you believe a minor has provided us with personal information, contact us and we will delete it.

Security

We take appropriate measures to protect against unauthorised access to, or alteration, disclosure, or destruction of, the information we hold. These include internal review of our collection, storage, and processing practices, and restricting access to personal information to those who need it in order to operate, develop, or improve the service.

Changes to This Policy

We may update this policy from time to time. Material changes are reflected in the "Last Updated" date above. Continued use of RezWeed after a change constitutes acceptance of the updated policy.

Contact Us

For any privacy question, or to exercise any of the rights described above, use the form below or email hello@rezweed.com.