Weedyy Privacy Policy

Last updated: May 27, 2026

1. Introduction

This Privacy Policy explains how Blueprint Group LLC, dba Weedyy (“Weedyy,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects information when you access or use Weedyy websites, mobile applications, portal products, embedded widgets, marketplace tools, menu tools, ordering or handoff features, sponsored discovery products, communications, support channels, and other products or services that link to this Privacy Policy.

This Privacy Policy applies to:

• consumers who use Weedyy to discover dispensaries, delivery options, menus, products, strains, promotions, routes, Stash features, or other consumer features;
• dispensaries, delivery operators, brands, advertisers, agencies, staff, contractors, listing owners, and other business users who use Weedyy portal, listing, menu, advertising, analytics, import, or market-operations tools;
• visitors to Weedyy websites, apps, embedded widgets, public pages, or support channels.

If a third-party dispensary, delivery operator, payment provider, point-of-sale provider, menu provider, loyalty provider, identity provider, app store, analytics provider, advertising provider, or other Partner collects information from you directly, that Partner’s privacy policy also applies.

2. Cannabis Privacy Notice

Cannabis-related activity can be sensitive. Your use of Weedyy may reveal or imply information about cannabis interests, dispensary browsing, product preferences, location, age, order intent, saved products, delivery or pickup interest, or interactions with licensed cannabis businesses.

Weedyy is not a healthcare provider, pharmacy, health plan, healthcare clearinghouse, or HIPAA-covered entity for ordinary use of the Services. Information you provide to Weedyy generally is not treated as protected health information under HIPAA unless a specific future feature expressly says otherwise and is legally structured that way.

We do not intentionally collect information from people under 21 on public cannabis discovery surfaces.

3. Information We Collect

The information we collect depends on how you use the Services.

3.1 Account and Profile Information

We may collect:

• name;
• username or display name;
• email address;
• phone number;
• password or authentication token;
• date of birth or age-confirmation status;
• profile photo;
• account preferences;
• saved addresses or market preferences;
• notification settings;
• support and account history.

3.2 Age, Eligibility, and Compliance Information

We may collect information used to support age, eligibility, market, commerce, legal, safety, or compliance controls, such as:

• date of birth;
• age-gate confirmations;
• location or market context;
• account eligibility signals;
• order, pickup, delivery, or handoff eligibility;
• legal acknowledgments;
• fraud, abuse, or security signals.

Weedyy currently does not make customer ID or medical-card verification a Weedyy-owned runtime gate. Dispensaries or delivery operators may verify identification, age, authorization, and eligibility at pickup, delivery, or fulfillment. If Weedyy later enables a feature that collects ID images, medical authorization details, or other verification documents, we will provide additional notice and controls as required by law.

3.3 Location Information

We may collect or infer:

• approximate location from IP address;
• precise location if you grant device or browser permission;
• selected city, state, market, delivery address, pickup location, or saved address;
• route-planning context;
• delivery zone, service-area, or nearest supported market context;
• location-related device or browser settings.

You can usually control precise location permissions through your device or browser settings. Disabling location may limit nearby discovery, delivery availability, route planning, and market-context features.

3.4 Discovery, Stash, and Usage Information

We may collect information about how you use Weedyy, including:

• dispensaries, products, strains, brands, promotions, menus, and pages you view;
• Stash items, favorites, saved dispensaries, saved products, lists, and preferences;
• search queries, filters, sorts, clicks, taps, scrolls, dwell time, navigation paths, and app events;
• market context, unsupported-market interactions, and feature eligibility states;
• recently viewed items;
• app sessions, feature usage, and settings;
• feedback, ratings, reviews, comments, reports, and moderation signals.

3.5 Order, Reservation, Checkout, Pickup, Delivery, and Handoff Information

If ordering, checkout, pickup, delivery, reservation, Stash-to-order, or Partner handoff features are available, we may collect:

• cart contents or intended products;
• order, reservation, pickup, delivery, or handoff details;
• dispensary or delivery operator selected;
• name, email, phone number, address, delivery instructions, pickup notes, and order notes;
• order status, confirmation, cancellation, recovery, support, refund, or dispute information;
• purchase-limit, market, commerce-flag, eligibility, and recovery signals;
• communications between you, Weedyy, dispensaries, delivery operators, or Partners;
• payment-related metadata, such as payment status or payment provider identifiers, where applicable.

Payment details may be collected directly by payment providers or other Partners. Weedyy generally does not need to store full payment card or bank account numbers unless a specific payment feature requires it and uses appropriate payment infrastructure.

3.6 Business, Portal, Listing, and Advertising Information

For Business Users, we may collect:

• business name, trade name, license information, permit information, and operating details;
• owner, manager, staff, contractor, agency, and authorized representative information;
• work email, phone number, role, permissions, and login credentials;
• business address, service areas, delivery zones, hours, menu data, product data, pricing, taxes, fees, photos, logos, descriptions, promotions, and inventory information;
• portal actions, approvals, imports, edits, verification submissions, support requests, billing status, campaign settings, analytics, and reporting data;
• advertising creative, targeting criteria, budgets, campaign results, sponsored placement details, and lead or engagement data;
• contracts, invoices, payment status, and subscription or service-plan information.

3.7 Communications and Support Information

We may collect messages, emails, texts, calls, chat transcripts, support tickets, survey responses, feedback, attachments, call metadata, and other information you provide when you contact us or communicate through the Services.

3.8 Device, Browser, Log, and Technical Information

We may collect:

• IP address;
• device identifiers;
• advertising identifiers where permitted;
• browser type;
• operating system;
• app version;
• device model;
• language and time zone;
• referring URLs;
• pages viewed;
• crash logs;
• performance data;
• cookies and similar technologies;
• fraud, abuse, security, and diagnostics data.

3.9 Information From Third Parties

We may receive information from:

• dispensaries, delivery operators, brands, advertisers, and agencies;
• point-of-sale, inventory, menu, loyalty, payment, delivery, support, analytics, and verification providers;
• app stores and authentication providers;
• public sources and regulatory sources;
• data import providers;
• fraud, security, abuse-prevention, and compliance vendors;
• other users who submit content, reports, referrals, or support requests involving you.

3.10 Collection by Feature

This table summarizes common Weedyy feature areas, the types of data they may involve, and why that data may be collected.

4. Sensitive Personal Information

Some information we collect may be considered sensitive under certain laws, such as precise geolocation, date of birth, government identification information if ever collected, medical authorization information if ever collected, account credentials, or information that may reveal cannabis-related interests.

We use sensitive information only for purposes reasonably necessary to provide, secure, personalize, support, verify, comply with law, prevent misuse, operate commerce-capable features, or perform services you request, unless we obtain consent or applicable law permits another use.

We do not use sensitive personal information to diagnose users, make health recommendations, target underage users, or create medical or therapeutic claims. Product recommendation, ranking, and personalization features are for discovery and merchandising, not medical advice.

5. How We Use Information

We may use information to:

• provide, operate, maintain, personalize, and improve the Services;
• age-gate cannabis discovery surfaces;
• determine market context, supported-market eligibility, route context, and feature availability;
• display dispensaries, menus, products, strains, promotions, sponsored placements, Stash, saved items, and recommendations;
• support ordering, checkout, pickup, delivery, handoff, confirmation, recovery, history, support, refund, and dispute workflows when enabled;
• transmit order, reservation, delivery, pickup, support, or handoff information to dispensaries, delivery operators, or Partners;
• create and manage accounts, authentication, preferences, and notifications;
• provide portal, listing, menu, advertising, analytics, import, and operations tools to Business Users;
• verify business ownership, license status, portal authority, and feature eligibility;
• communicate with you about your account, legal notices, changes, support, security, orders, delivery, pickup, promotions, or Services;
• send marketing communications where permitted;
• measure, analyze, debug, test, secure, and improve performance;
• prevent fraud, abuse, scraping, underage access, unlawful transactions, security incidents, data misuse, and policy violations;
• comply with legal, regulatory, tax, accounting, law enforcement, litigation, and cannabis-industry obligations;
• enforce our Terms, agreements, policies, and rights;
• protect Weedyy, users, dispensaries, Partners, and the public;
• perform any other purpose disclosed to you or with your consent.

6. How We Disclose Information

We may disclose information as described below.

6.1 Dispensaries, Delivery Operators, and Other Partners

We may share information with dispensaries, delivery operators, brands, advertisers, point-of-sale providers, menu providers, loyalty providers, payment providers, delivery providers, support providers, verification providers, and other Partners when needed to provide the Services, support a handoff, transmit an order or request, resolve a support issue, operate a listing, show a promotion, verify business authority, or provide analytics.

For example, if you request a pickup, delivery, reservation, checkout, or Partner handoff, we may share relevant contact, order, delivery, pickup, market, support, and eligibility information with the applicable dispensary, delivery operator, or Partner.

6.2 Service Providers

We may share information with vendors and service providers that help us operate the Services, including hosting, cloud infrastructure, analytics, customer support, communications, email, SMS, push notifications, payments, fraud prevention, security, logging, data processing, data storage, mapping, search, testing, debugging, and professional services.

6.3 Advertising and Analytics Partners

We may use analytics, measurement, and advertising tools to understand usage, measure campaigns, personalize content, and market Weedyy. These tools may use cookies, pixels, SDKs, identifiers, device data, usage data, approximate location, or similar technologies.

Depending on the law that applies, some advertising or analytics activities may be considered a “sale,” “sharing,” or use for targeted advertising. See Section 12 for choices.

Where required by law, Weedyy will provide a “Do Not Sell or Share My Personal Information” or similar privacy choice mechanism and will honor legally required Global Privacy Control signals where required and technically feasible.

6.4 Business Users and Public Surfaces

If you submit public or semi-public content, such as reviews, ratings, photos, comments, profile details, or listing content, that content may be visible to other users, dispensaries, Partners, search engines, or the public.

Business listing information, menus, promotions, ads, photos, descriptions, hours, service areas, license information, and similar business content may be published through Weedyy and embedded surfaces.

6.5 Legal, Safety, Compliance, and Enforcement

We may disclose information if we believe it is reasonably necessary to:

• comply with law, regulation, legal process, subpoena, warrant, court order, law enforcement request, regulatory request, or government request;
• enforce our Terms, agreements, policies, or rights;
• detect, prevent, investigate, or respond to fraud, underage access, unlawful transactions, security incidents, abuse, scraping, data misuse, spam, or harmful conduct;
• protect the rights, property, safety, or security of Weedyy, users, dispensaries, Partners, employees, contractors, or the public;
• support audits, compliance reviews, tax obligations, litigation, dispute resolution, or legal claims.

6.6 Corporate Transactions

We may disclose or transfer information in connection with a merger, acquisition, financing, reorganization, bankruptcy, receivership, asset sale, due diligence, or similar business transaction.

6.7 Consent or Direction

We may disclose information with your consent or at your direction.

7. Cookies and Similar Technologies

We and our Partners may use cookies, pixels, SDKs, local storage, device identifiers, advertising identifiers, and similar technologies to:

• keep you signed in;
• remember settings and age-gate state;
• measure traffic and usage;
• improve performance and security;
• detect fraud or abuse;
• personalize content and market context;
• measure advertising and sponsored placements;
• support marketing and retargeting where permitted.

You may be able to control cookies through browser settings, device settings, app settings, consent tools, or opt-out tools. Blocking cookies may affect functionality.

8. Data Retention

We retain personal information for as long as reasonably necessary to provide the Services, operate our business, comply with legal obligations, resolve disputes, enforce agreements, protect rights and safety, prevent fraud or abuse, maintain records, support audits, and satisfy lawful business purposes.

The length of time we retain information depends on factors such as:

• the type and sensitivity of the information;
• the purpose for which it was collected;
• whether you maintain an account;
• whether the information relates to an order, handoff, support request, dispute, compliance review, listing, portal action, campaign, payment, tax record, security incident, or legal obligation;
• legal, regulatory, tax, accounting, audit, law enforcement, litigation, and cannabis-industry recordkeeping requirements;
• operational needs, such as backup, disaster recovery, fraud prevention, security, and service integrity;
• whether retention is needed to prevent misuse, enforce our Terms, or protect Weedyy and others.

When information is no longer reasonably needed, we will delete, de-identify, aggregate, or otherwise handle it according to applicable law and our internal retention practices.

Because cannabis transactions, support records, legal disputes, compliance logs, and business records may be subject to recordkeeping or defense obligations, some information may not be deleted immediately upon request. We will explain applicable limitations when required by law.

8.1 Deletion Handling

When Weedyy honors a deletion request, deletion may mean removing information from active production systems, de-identifying information, aggregating information, suppressing public display, or marking data for deletion through scheduled processes. Weedyy may retain information where allowed or required by law, including for legal claims, cannabis compliance, safety, fraud prevention, security, accounting, tax, audit, support, contractual, backup, or dispute purposes.

9. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No system is completely secure. We cannot guarantee that information will never be accessed, disclosed, altered, lost, or destroyed.

You are responsible for keeping your login credentials secure and for promptly notifying us if you believe your account has been compromised.

10. Your Choices

Depending on your location and the Services you use, you may have choices including:

• updating account or profile information;
• changing notification settings;
• unsubscribing from marketing emails;
• replying STOP to certain text messages where supported;
• disabling push notifications in device settings;
• disabling precise location permissions in device or browser settings;
• clearing cookies or adjusting browser cookie controls;
• requesting access, correction, deletion, or portability where required by law;
• opting out of certain targeted advertising, sale, or sharing activities where required by law.

Some choices may limit functionality. We may still send transactional, legal, security, support, account, order, pickup, delivery, or other non-marketing messages where permitted by law.

11. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, may give you rights regarding your personal information, subject to exceptions.

These rights may include:

• the right to know what personal information we collect, use, disclose, sell, or share;
• the right to access specific pieces of personal information;
• the right to delete personal information;
• the right to correct inaccurate personal information;
• the right to opt out of sale or sharing of personal information;
• the right to limit use and disclosure of sensitive personal information where applicable;
• the right not to receive discriminatory treatment for exercising privacy rights.

To submit a request, contact privacy@bluepriintgroup.com with the subject line “California Privacy Request.” We may need to verify your identity before processing a request. You may use an authorized agent where permitted by law, but we may require proof of authorization and verification of identity.

11.1 California Categories of Information

In the last 12 months, Weedyy may have collected the following categories of personal information, depending on how you use the Services:

12. Sale, Sharing, and Targeted Advertising

We do not sell personal information for money in the ordinary sense. However, privacy laws may define “sale,” “sharing,” or “targeted advertising” broadly enough to include certain advertising, analytics, retargeting, measurement, or cookie-based activities.

Where required by law, you may opt out of sale, sharing, or targeted advertising by contacting privacy@bluepriintgroup.com with the subject line “Privacy Opt-Out” or by using any “Do Not Sell or Share My Personal Information” or similar privacy choice link that Weedyy makes available.

We will honor legally required Global Privacy Control signals where required by applicable law and technically feasible.

13. Children and Minors

The Services are not intended for people under 21 on public cannabis discovery surfaces. We do not knowingly collect personal information from people under 21 through public cannabis discovery surfaces. If we learn that we collected information from an underage person in violation of this Policy, we will take reasonable steps to delete or restrict it, subject to legal and safety obligations.

Parents or guardians who believe an underage person provided information to Weedyy may contact privacy@bluepriintgroup.com.

14. Third-Party Links and Partner Services

The Services may link or hand off to dispensaries, delivery operators, brands, payment providers, loyalty providers, menu providers, point-of-sale providers, app stores, social platforms, maps, support tools, websites, or other third parties.

We are not responsible for the privacy practices of third parties. Review the applicable third-party privacy policy before providing information to a third party.

15. International Users

Weedyy is designed primarily for users in the United States. If you access the Services from outside the United States, you understand that information may be processed in the United States or other locations where our service providers operate. Cannabis laws vary widely by country, state, province, territory, county, and municipality. You are responsible for complying with laws that apply to you.

16. De-Identified and Aggregated Information

We may create, use, disclose, and retain de-identified, aggregated, or anonymized information for analytics, research, reporting, product development, market operations, advertising measurement, compliance review, and other lawful purposes.

We will not attempt to re-identify de-identified information except as permitted by law, such as to test whether our de-identification processes work.

17. Account Deletion and Privacy Requests

You may request account deletion or privacy assistance by contacting privacy@bluepriintgroup.com. We may need to verify your identity and may retain certain information as described in Section 8.

Deleting your account may not delete:

• information retained by dispensaries, delivery operators, payment providers, app stores, or other Partners;
• public content already copied, cached, shared, indexed, or preserved by others;
• order, handoff, support, compliance, tax, accounting, fraud, security, audit, dispute, or legal records we are permitted or required to retain;
• de-identified or aggregated information.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the date and may provide additional notice through the Services, email, push notification, portal notice, in-app message, or other reasonable means.

Your continued use of the Services after an updated Privacy Policy becomes effective means you acknowledge the updated Policy.

19. Contact Us

Questions, requests, or complaints about privacy may be sent to:

Blueprint Group LLC, dba Weedyy
Email: privacy@bluepriintgroup.com
Address:
Bluepriint Group
333 N University St
Unit 33
Redlands 92374