Legal

Privacy Policy

NugVue Privacy Policy

Effective Date: January 30, 2025
Last updated: October 26, 2026

NugVue LLC (“NugVue”, “we”) runs the NugVue iOS app, the website at www.nugvue.com, and the NugVue Android app, which is the website packaged for Android (together, the “Services”). This policy explains what we collect, how we collect it, why, who else receives it, how long we keep it, and the choices you have. NugVue is for adults 21 and over.

1. What we collect and how

1.1 Information you give us

Account details: your date of birth (to confirm you are 21 or older; your age in years also goes to our analytics), email address, password, username, and, if you add them, a profile photo and bio. If you sign in with Apple or Google, we receive the email address and name those services send us. We do not offer Facebook sign-in.
Content: your reviews (the text, your ratings, the effects you felt, how you consumed the product and how much, aromas and activities), optional purchase details (price, quantity, THC amount and the dispensary), photos, posts (“high thoughts”, high stories and questions), comments, reactions, bookmarks, who you follow and block, your “I’m High” status, streak check-ins and giveaway entries.
Referral codes you enter or share.
Messages to support: what you write in Help & feedback in the iOS app, or in an email to support@nugvue.com. In the iOS app a diagnostics switch, which is on unless you turn it off, adds your iOS version, device model, language, the screen you were on, your appearance and reduce-motion settings, and any error code.
Names you type for a product or strain that is not in our catalog yet.
Your answers to the set-up questions in the iOS app (21 or older, and whether to show uncensored words) stay on your device.

1.2 Information collected automatically

Location in the iOS app, only if you allow it: the app reads your device’s location while you use it and turns it into your country, state and city. When you post a review, the app sends the review’s coordinates with it. With the review we store the city, state and country, and other members can see the city and state. We also keep the review’s exact location privately on our servers, except for reviews posted from September 18 to October 26, 2026, which have no private copy. For some reviews posted before September 18, 2026, it is also saved with your record of the products, brands and strains you have tried. These exact locations are never shown in our apps or on the website, and other members cannot access them. We keep them for possible future location features, and we will update this policy before we use them for anything. Separately, our server logs from before October 28, 2026, which we keep for up to 30 days to run and fix the Services, can include the exact location the app sent with any review, including reviews posted from September 18 to October 26, 2026. When you sign up we add your country, state and city to your account. The app also uses your location to find dispensaries near you and to show the feed, charts and giveaways for your region. If you do not allow location, you can pick your state by hand in Discover.
Location on the website: we estimate your country and state from your network (IP) address to pick your region’s feed and giveaways. The website’s set-up checklist asks for your browser’s location permission; we do not store or send that location. Reviews posted on the website carry no location.
Device and usage data: your device model, operating system version, app version, connection type, language, time zone, country and state; the screens you view, what you search for, the content you open, react to, bookmark and share, who you follow, the dispensaries you look up, and when you turn “I’m High” on or off; your age in years, the domain of your email address and how you signed in; and your account ID while you are signed in. On the website this includes the addresses of the pages you open, which can contain a search you typed. This data goes to Google Analytics. Versions of the iOS app before 2.6 also send it to Mixpanel; the website no longer does, and version 2.6 and later of the app send Mixpanel nothing (section 3.2).
Crash and performance reports from the iOS app, with your account ID.
Install and usage counts: an identifier for your copy of the app, the platform and version, and the country of your device’s region setting. These are not linked to your account.
Push notification token: the iOS app registers for notifications when it starts and stores the token with your account while you are signed in, so we can send the notifications you turn on.
Online presence: a “last online” time while the app is open, so we can count who is online.
Technical data on every request: the platform, app version and build. IP addresses appear in our hosting providers’ logs for up to 30 days, and we use a hashed form of them to limit abuse.
Cookies and browser storage on the website (section 5).
Advertising measurement in the iOS app, only if you allow tracking (section 3.4).

1.3 Information from other sources

Sign-in providers: if you use Sign in with Apple or Google, they send us your email address and name.
Links you follow to our website: if a link carries campaign or referral details (such as UTM tags, a click ID from Meta or Google, or the site that sent you), we record them to see which links bring new members.
Google Play: if you install the Android app from one of our links, Google Play passes us the link’s reference so we can credit it.
We do not buy information about you from data brokers.

2. How we use your information

We use what we collect to:

create and run your account, and confirm you are 21 or older;
publish the reviews and posts you ask us to publish, work out product, strain and brand ratings and rankings, and run search, bookmarks, feeds and charts for your region;
show dispensaries near you and open directions when you ask;
send the notifications you turn on, keep your nug balance, and run streaks, referrals and giveaways, including choosing and announcing winners;
answer your support messages. An AI model sorts them and may draft a reply; a person reviews every reply before it is sent;
keep NugVue safe: handle reports, block abuse, enforce our rules and limit how often requests can be made;
understand how NugVue is used, and find and fix crashes, bugs and slow screens;
measure our own advertising (section 3.4) and which links and QR codes bring new members;
send you emails about NugVue: account emails such as verification and password resets, and marketing emails until you unsubscribe (section 4);
comply with the law and protect our rights and our members.

3. Who receives your information

3.1 Other members and the public

Reviews are public, including their city and state, effects and purchase details. So are public posts and comments. Anyone can read them, with or without an account, and search engines and AI crawlers can index them. Your profile is public too: username, bio, photo, badges, stats (including your nug balance and referral counts), referral code, who referred you, who you follow, the giveaways you have won, and your “I’m High” status with the times it last changed. Your profile record also holds when your account was created and when you were last active. We ask search engines not to index profiles. Posts you mark private are hidden from other members in our apps and on the website.

3.2 Service providers

These companies process your information for us. Each may use it only to provide its service to us, and each is bound by terms that require it to protect your information at least as well as this policy and Apple’s App Store rules require.

Google (Firebase and Google Cloud): hosting, databases, file storage, sign-in, push notifications, abuse protection, analytics (Google Analytics) and crash reports; Google Places and Google Maps for dispensaries near you (they receive the area searched and the dispensary names you look up); and Vertex AI, which runs the Anthropic Claude models that sort support messages and draft replies. The support model receives your message and basic facts about your account (its status, whether your email is verified, when you were last active, how many reviews and posts you have, how often your account has been reported, and your nug balance), not your email address.
Apple: Sign in with Apple, turning your device’s location into a region, the dispensary map and its search, and delivering push notifications.
Algolia: search in the iOS app. It receives the text you search and holds copies of reviews, posts and the public parts of profiles so they can be searched. A copy of a post you make private can stay there for up to a week before we remove it.
Klaviyo: our email provider. It receives your email address, account ID, username, account type, sign-up date and your country, state and city.
Resend: sends account emails (verification, password resets, deletion confirmations and support replies).
Vercel: hosts the website and estimates your country and state from your IP address.
Mixpanel: analytics in versions of the iOS app before 2.6. The website no longer sends it anything, and version 2.6 and later of the app send it nothing.
Sentry: error monitoring on the website, when we switch it on. It records errors, page timings and, for a page with an error, a replay with the text masked, without your account ID.
OpenAI: writes a short description from the name you give a new product or strain. It receives the name and product type, nothing about you.
Anthropic: Claude, an AI assistant our team uses to run and support NugVue. When our team works with those records, it may see account information, your device’s push notification tokens and notification settings, content you post, giveaway entries, your email consent status, and emails you send to support.
Discord: our team’s internal alerts. Every content report is posted there with the reporter’s and the reported member’s usernames and account IDs, the reason, and an excerpt of the reported content, together with daily summaries of activity.

3.3 Giveaway co-sponsors

If you enter a giveaway that has a co-sponsor, its official rules say what you give to NugVue and to that co-sponsor. We do not collect a postal address or phone number in the app. If you win, we contact you by email and ask for what we need to deliver your prize, such as a postal address, and we use it only for that.

3.4 Advertising measurement (Meta)

NugVue shows no third-party ads. To measure our own ads on Meta’s platforms, the iOS app includes Meta’s (Facebook) software. In version 2.6 and later it starts only if you allow tracking when iOS asks. It then sends Meta your device’s advertising identifier and events such as installing or opening the app and creating an account. It never receives your reviews, effects or amounts. If you say no, Meta receives nothing and nothing in the app changes. In versions before 2.6, Meta’s software starts when the app opens and sends those events whether or not you allow tracking; the advertising identifier is sent only if you allow it. You can change your choice at any time in iOS Settings › Privacy & Security › Tracking. Meta uses what it receives under its own terms.

3.5 Creator and partner links

When you follow or scan one of our tracked links or QR codes, we record the click (time, device type, browser, country and region, the page that sent you) to measure the link. An approved creator who owns a link can see those click records for their own links. The records are not tied to your account unless you sign up through the link, in which case we note that your account came from it.

3.6 Legal reasons and business changes

We share information when the law requires it, to protect our rights and our members, and if NugVue is sold, merged or reorganized, in which case the new owner takes on this policy.

We do not sell your personal information.

4. Your choices

Tracking: answer the iOS prompt, or change your choice later in iOS Settings › Privacy & Security › Tracking. Saying no changes nothing in the app.
Location: allow or decline it in iOS Settings › Privacy & Security › Location Services, or in your browser. In the iOS app you can pick your state by hand in Discover.
Notifications: turn them off in iOS Settings, or choose the types you want in the app under Settings › Notifications: reactions, comments, new followers, mentions and giveaways (our promotional notifications). Announcements we send to every member, including about giveaways, are not controlled by these switches; to stop them, turn NugVue’s notifications off in iOS Settings.
Analytics: the iOS app has no switch for usage analytics; it collects usage data while you use the app. On the website, turn on Do Not Track in your browser (the set-up checklist also offers “No thanks” to tracking when you first sign up). Google Analytics’ automatic measurement stops once you reload the site. If your browser sends a Global Privacy Control signal, we also skip recording your clicks on our tracked links.
Marketing email: when you sign up, we add you to our email list. Use the unsubscribe link in our marketing emails, or email support@nugvue.com. Account emails continue while you have an account.
What others see: mark a post private, turn your “I’m High” status off, block members, and delete your reviews, posts and comments at any time.
Support diagnostics: turn the diagnostics switch off before you send a note from Help & feedback.
Cookies: control them in your browser (section 5).

5. Cookies and website storage

The website uses these cookies and browser storage. None is used to show you ads; two of them record which of our links or ads brought you here.

Sign-in session (__session): keeps you signed in for up to 5 days.
Your tracking answer (nv_tracking_consent): 1 year.
Where you came from (nv_attr): the campaign details of your first visit, 90 days.
Link click ID (nv_cid): joins a click on one of our tracked links to a sign-up, 400 days. Not set if your browser sends Do Not Track or Global Privacy Control.
Referral code (nv_ref) and scanned item (nv_item): 30 days each.
Google Analytics (_ga cookies): analytics identifiers, set by that service. If you visited before October 25, 2026, your browser may still hold a Mixpanel identifier from the analytics we used then; the website no longer reads or sends it.
Google reCAPTCHA: protects our servers from automated abuse; it runs on every page.
Browser storage also holds your preferences (such as the censor setting), unsent drafts, and your Firebase sign-in state. The offline shell caches static files only, never your content.

6. How long we keep your information

Your account and content: until you delete your account or the content.
Support messages: until you delete your account or ask us to erase them. Closed conversations are archived after 90 days.
Photos you remove: the original upload is cleared within a day; copies of deleted images are purged within a few days; our storage keeps deleted files recoverable for 7 days.
Search copies: removed when the content is removed, and checked every week.
Backups and logs: database backups are kept for 14 days and server logs for 30 days.
Analytics and crash data: Google Analytics keeps event-level data for up to 14 months; Crashlytics keeps crash reports for 90 days.
Link click records: kept until we delete them; only counts are needed long term.
Install and online counts: kept as anonymous statistics.
Abuse-prevention records (hashed IP addresses): kept until we delete them.

7. Deleting your account, and your other requests

You can delete your account in the iOS app (Profile › Edit › Edit Profile › Delete Account) or on the website and in the Android app (Settings › Delete account). We ask you to confirm with your password or by signing in again with Apple or Google. Deletion removes your account, your reviews and the exact locations we keep privately for them, your posts, comments and photos, your follows, your reactions on other members’ content, your giveaway entries, the reports you filed, your referral code’s reservation, your support conversations, your notification tokens, your record with our email provider (Klaviyo) and your sign-in. Reports about you are kept for moderation with your account ID removed. Deletion normally finishes within 24 hours, and copies in search and caches clear within a week. If part of it fails, some of these records can remain until we remove them; email support@nugvue.com and we will finish it.

Deletion does not yet remove:

mentions of your username inside other members’ posts;
block records that sit under other members’ accounts;
the record that you added a product or strain to the catalog;
any record of a giveaway you won;
moderation records, which can keep your account ID;
referral records naming you;
the record of a link you signed up through, or of a printed item you claimed;
the alerts about reports already posted to our team’s Discord;
your history in Google Analytics, Mixpanel and Crashlytics;
backups for 14 days and server logs for 30 days.

To ask us to remove what we can of these, or to see, correct or receive a copy of the information we hold about you, email support@nugvue.com from the address on your account. We confirm requests through your account or your email address, and we answer within 45 days, or sooner where your local law sets a shorter time (sections 11.3 and 11.4). If we cannot act on a request, we tell you why, and you can appeal by replying to our answer.

8. Security

We protect your information with encryption in transit and at rest, access controls, and device attestation that blocks automated abuse. No method of transmission or storage is completely secure, so take care with what you share publicly.

9. Children

NugVue is for adults 21 and over. We ask for your date of birth at sign-up and do not create an account for anyone under 21, and the Services are not directed to children under 13. If we learn that we hold information from someone under 21, we delete it.

10. Where your information is stored

Our servers are in the United States (Google Cloud, Iowa region) and our website is hosted by Vercel. If you use NugVue from Canada, the United Kingdom or elsewhere, your information is transferred to and processed in the United States, where privacy law may differ from your country’s.

11. Your rights by region

11.1 United States state privacy laws

If you live in California or another state with a consumer privacy law, you may have the right to know what personal information we collect, use and share and why; to access it and receive a copy; to correct it; to delete it; to opt out of the sale or sharing of personal information and of targeted advertising; to limit the use of sensitive personal information; and not to be treated differently for exercising these rights.

In the last 12 months we collected the categories described in section 1 (identifiers, account details, content, location, and device and usage data), from the sources in section 1, for the purposes in section 2, and disclosed them to the recipients in section 3. We do not sell personal information. The only disclosure that could count as “sharing” for cross-context behavioral advertising is the advertising measurement in section 3.4. In version 2.6 and later of the iOS app it happens only if you allow tracking, and declining or revoking tracking in iOS Settings is how you opt out; in earlier versions, declining tracking keeps your advertising identifier out of what Meta receives, but the app events are still sent until you update. Sensitive information you choose to post, such as the effects of a product, is used only to provide the Services.

To exercise these rights, use the controls in section 4, delete your account in the app, or email support@nugvue.com. An authorized agent may act for you with your written permission. We respond within 45 days; if we need longer, we tell you.

11.2 Washington consumer health data

Washington’s My Health My Data Act protects “consumer health data”. Some of what you share on NugVue may be consumer health data under that law.

What we collect: the products, strains and brands you view, bookmark and review; your review text and ratings, including the effects you report (such as anxiety, headache, sleepiness or relief) and the amount you consumed; what you search for; the dispensaries you look up; your “I’m High” status and when it changed; your country, state and city; the exact location of the reviews you post from the iOS app with location on, kept privately on our servers (reviews posted from September 18 to October 26, 2026 have no private copy) and, for some reviews posted before September 18, 2026, with your record of what you have tried (section 1); the exact location sent with any review, including reviews posted from September 18 to October 26, 2026, in server logs from before October 28, 2026, kept for up to 30 days; and your account ID, which is attached to most of this.
Where it comes from: you, as you use the Services; your device; and your network address, from which our providers estimate a general location.
Why: to publish what you ask us to publish, run search, bookmarks and dispensary directions, rate and rank products, understand how the app is used and fix what breaks, and measure which of our own ads bring members who stay. We keep the exact location of reviews privately for possible future location features; it is not used for anything else today.
Who we share it with: other members and anyone who reads NugVue, because reviews and your status are public; the service providers in section 3.2 that host, search, analyze and support the Services; and our team’s Discord for content reports. We do not sell it. Meta receives none of it (section 3.4).
Your rights: to confirm whether we collect, share or sell your consumer health data; to see it and the list of third parties it was shared with; to withdraw your consent; and to have it deleted. We delete what we hold and ask our providers to delete their copies where we can; section 7 lists what we cannot yet remove. Email support@nugvue.com. We answer within 45 days. If we decline a request, you can appeal by replying to our answer, and if your appeal is denied you can contact the Washington Attorney General at atg.wa.gov/file-complaint.
Withdrawing consent today: the iOS app has no switch for this data. Deleting the app stops the collection, and deleting your account removes what section 7 describes; you can ask us to remove the rest. On the website, Do Not Track stops analytics.

11.3 Canada

We handle Canadian members’ information under the Personal Information Protection and Electronic Documents Act and the provincial laws that apply, including Quebec’s private sector privacy law.

By signing up and choosing what to post and allow, you consent to the collection, use and sharing described here. Some of what you post, such as the effects of a product, may be sensitive; we use it only to provide the Services.
You can withdraw consent through the controls in section 4 or by deleting your account, subject to legal limits.
You can ask to access or correct your information, or ask how we handle it, by emailing support@nugvue.com; we respond within 30 days.
Your information is stored in the United States (section 10).
If you are not satisfied with our answer, you may complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in Quebec, to the Commission d’accès à l’information (cai.gouv.qc.ca).
Marketing emails follow Canada’s anti-spam law: stop them with the unsubscribe link or by emailing support@nugvue.com.

11.4 United Kingdom

If you are in the United Kingdom, NugVue LLC is the controller of your personal data under the UK GDPR. We process it to perform our agreement with you (your account and the features you use); with your consent where iOS or your browser asks for it (location, notifications, and tracking from version 2.6 of the iOS app; earlier versions send Meta the events described in section 3.4 without it), which you can withdraw at any time through section 4; and for our legitimate interests in keeping NugVue safe, understanding how it is used, measuring our own marketing, and telling members about NugVue by email, which you can stop at any time (section 4). Information about the effects you felt from a product is health-related; you choose to publish it, and we process it because you have made it public. You have the right to access, correct, erase and receive a copy of your data, to restrict or object to its processing, and to withdraw consent. Email support@nugvue.com; we respond within one month. Your data is transferred to the United States under the UK’s international data transfer rules. You can complain to the Information Commissioner’s Office at ico.org.uk.

12. Changes to this policy

We may update this policy from time to time. We post the new version here, with its “Last updated” date at the top, before it takes effect. For significant changes we may also tell you in the app or by email.

13. Contact us

Questions about this policy or your information:

NugVue LLC
support@nugvue.com
420 Pontius Ave, APT 612, Seattle, WA, 98109