Privacy Policy — Weed to Flowers

Last updated: October 21, 2026 · Version 2026-10-21 · App: Weed to Flowers (Android and iOS, app ID com.weedtoflowers.app) · Provider: Askesis Intelligence

Weed to Flowers ("the app") is an educational and self-help tool to support people who want to reduce or quit cannabis use. It is provided by Askesis Intelligence ("we", "us"). This policy explains what information the app stores, why, where it is kept, who helps us run it, and the choices you have. Some of what you tell the app is sensitive, health-related information about your cannabis use, so we have tried to explain this as plainly as we can.

In short

• Weed to Flowers is for people who want to quit or cut down on cannabis. You need a free account to use it. What you record in the app (your questionnaire answers, journal, use log and progress) is stored in that account on our cloud servers, so it is backed up and you can pick up where you left off on a new phone.
• We use what you record for two things only: to run the app for you, and to understand what leads to cannabis addiction and what helps people get out of it, so that we can make the program better.
• We never sell, share or publish your data, and we never use it for advertising. There are no ads and no third-party analytics, advertising or tracking tools in the app.
• Two service providers (listed below) store the data and handle sign-in for us. They act only on our instructions. We work with no advertisers, affiliates or data buyers.
• You can delete your account and all of its data at any time in the app (Profile → Delete account) or by emailing us. See how to delete your account.
• The app is for adults aged 18 and over.

Your account and your consent

An account is required. On Android you sign in with your Google account, and on iPhone with your Apple ID (Sign in with Apple). There is no separate password.

The sign-in screen shows: "By tapping ‘Agree and continue’, you agree to the Privacy Policy, including your answers, journal, use log and progress being stored securely in your account and used to understand cannabis addiction and how to help people out of it." Tapping Agree and continue with Google (Android) or Continue with Apple (iPhone) is how you give your explicit consent for us to store your health-related information and use it in this way. We record when you agreed and which version of this policy you agreed to (this version is 2026-10-21).

What we collect

Everything below is stored in the cloud and linked to your account:

• Account information: your email address; the name and profile photo link that Google provides (Android), or the name and email address Apple provides (iPhone; Apple lets you hide your real email behind a private relay address); a randomly generated user ID; and the times you sign in (kept by our sign-in provider).
• Your questionnaire answers: the name or nickname you give; your sex (female, male, intersex, or prefer not to say); how long you have used cannabis; how old you were when you first tried it; what was going on in your life when it became regular; how you use it (joints, bong or pipe, vape, edibles, dabs, mixed with tobacco); when and alongside what you use it; your reasons for using; who around you uses cannabis; your answers to the CUDIT-R screening questionnaire (8 questions about your cannabis use in the past 6 months) and the resulting score (0–32); whether you have tried to stop before, what brought you back and the longest you went without; when you last used; roughly how much you spend on cannabis each week; whether you also regularly use alcohol, nicotine or other drugs; whether any health conditions apply that change which activities suit you (a heart condition or high blood pressure, pregnancy, asthma or another breathing problem, epilepsy or seizures, panic attacks, or an injury, recent surgery or pain that limits movement); your goal (quit, cut down, take a break, or not sure yet); the reasons you want to change; and anything you write "in your own words". Each time you retake the questionnaire we keep that set of answers too, with its date, so that change over time can be seen.
• Your progress: which lessons, daily movement-plan activities and meditation sessions you have completed, and when.
• Your journal: for each entry, your mood, craving level (1–10), what you write, your triggers and coping strategies, the reflection prompt you used, and the date and time. A quick mood check-in saves your mood and, if you add one, a short note on what is on your mind.
• Your cycle (optional): if you told us your sex is female, the mood calendar offers period tracking. If you turn it on, we store the days you mark as period days. The app uses them to show you how your mood and thoughts change across your cycle, and we use them, together with your other records, to understand how quitting or cutting down affects people. You can leave it off, unmark days, or turn it off at any time.
• Your use log: each time you log that you used cannabis, or had a craving and did not use: the date and time; what set it off; why you used and how much compared with your usual amount; how strong the craving was (1–10); what helped; how you felt afterwards; and any note you add.
• Your consent record: the version of this policy you agreed to and when.

Your questionnaire answers (including your sex), CUDIT-R score, journal entries, mood check-ins, use log and period days are information about your substance use, wellbeing and reproductive health. We treat them as sensitive health-related data (called "special category data" under the GDPR), and we store and use them only with the explicit consent you give at sign-up.

Like most online services, our hosting and sign-in provider automatically keeps short-term technical logs (for example IP address, device or app type, and the time of each request) to keep the service secure and working. These logs are kept for up to 7 days and then deleted.

What we don't collect

The app contains no third-party analytics, advertising, or tracking SDKs, and shows no ads. It does not read your contacts, location, photos, or microphone. (On Android we only store the link to the profile photo Google provides; the app does not access photos on your phone.)

How we use your information

• To run your account and the app: signing you in and showing your progress, journal, use log, patterns and questionnaire results.
• To back up and sync your data, so it is not lost if you change or reset your phone.
• To understand cannabis addiction and how people get out of it, and to improve Weed to Flowers. We look at what people record in the app: questionnaire answers, journal entries, use logs and progress, including one person's records, and any feedback you send us. We do this to learn what leads to addiction, what sets off cravings and use, and what helps people cut down or quit. Only Askesis Intelligence does this, and only for this purpose. We do not use your data for anything else.

We never sell your data, share it, publish it, or use it for advertising, and we do not give it to anyone for their own purposes. We have no advertising partners, affiliates or data buyers. If we ever describe what we have learned, for example in a lesson, it will be as overall findings that cannot identify anyone.

Legal bases (EEA and UK users)

• Account information: needed to provide the service you asked for (performance of a contract).
• Health-related information (questionnaire answers, CUDIT-R score, journal and mood check-ins, use log, period days): your explicit consent (GDPR / UK GDPR Article 9(2)(a)), given when you create your account, both to store it and to use it as described above. You can withdraw it at any time by deleting your account. Because storing this information is how the app works, the app cannot be used without it. Period tracking is the exception: it is off until you turn it on, and turning it on is your consent to store and use your period days. Turning it off stops new days being recorded, and you can unmark days to delete them.
• Understanding addiction and improving the app: for health-related information, your explicit consent; for everything else, our legitimate interest in making the program better.
• Technical logs: our legitimate interest in keeping the service secure.

Service providers

We use these providers to run the app. They process data on our behalf and under our instructions, not for their own purposes:

• Supabase — our database and sign-in (authentication) provider. Your data is hosted on Amazon Web Services (AWS) in the US West (Oregon) region.
• Google — for sign-in. Google confirms who you are and gives us your email address, name and profile photo link. Google's own privacy policy covers what Google does with your Google account.
• Apple — for sign-in on iPhone (Sign in with Apple). Apple confirms who you are and gives us your email address (or a private relay address) and, if you choose to share it, your name. Apple's own privacy policy covers what Apple does with your Apple ID.

We do not share your data with anyone else, except where we are legally required to (for example, by a valid court order).

Where your data is stored

Your data is stored in the United States. If you live outside the US (for example in the EEA or UK), using the app means your data is transferred to and stored in the US, where data protection law may differ from yours and where courts and authorities may be able to access it under US law. These transfers are protected by the European Commission's Standard Contractual Clauses, with the UK and Swiss addenda, which are part of our Data Processing Addendum with Supabase.

How we protect it

• All data is encrypted in transit (HTTPS/TLS) and encrypted at rest by our hosting provider.
• The database uses row-level security, so each account can only read and write its own data.
• The app also keeps a copy of your data on your device so it works offline. That copy is protected by your phone's own security, so we recommend using a screen lock.

No system is perfectly secure, but we work to protect your information and limit who can access it.

Network use and your device

Lessons, audio and meditations are built into the app and work offline. The app connects to the internet to sign you in and to back up and sync your data. If you tap an external reference link (for example a research citation), it opens in your own web browser.

Signing out removes your data from that device but keeps your account and its data in the cloud. Uninstalling the app removes the copy on your device but does not delete your account.

How long we keep it

We keep your data for as long as your account exists. When you delete your account, the account and all of its data in the cloud are permanently deleted straight away, and the data on that device is cleared. Residual copies in our provider's backups may remain for up to 30 days before they are purged.

Deleting your account

In the app, go to Profile → Delete account. This immediately and permanently deletes your account and everything listed above. You can also ask us to do it by email. Full details: weedtoflowers.com/delete-account.

Your rights

You can ask to access your data, correct it, get a copy of it (export), or delete it. Some of this you can do yourself in the app — for example viewing your journal, use log and progress, deleting single journal or log entries, retaking the questionnaire, or deleting your account. For anything else, email us from the email address on your account (so we know the request is yours). We aim to respond within 30 days.

• EEA and UK (GDPR / UK GDPR): you also have the right to withdraw your consent at any time, to object to or restrict some processing, to data portability, and to complain to your local data protection authority (in the UK, the Information Commissioner's Office).
• California (CCPA / CPRA): you have the right to know what personal information we hold, and to have it deleted or corrected. We do not sell or "share" personal information (as those terms are defined in California law), and we use sensitive personal information only to provide the app and for the purpose described under "How we use your information". We will not treat you differently for exercising your rights.
• Canada (PIPEDA / BC PIPA): you can ask to access or correct your personal information, and you can complain to the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada.

Age requirement

The app is for adults aged 18 and over and is not directed to children. If you believe someone under 18 has created an account, please contact us and we will delete it.

Medical disclaimer

Weed to Flowers provides education and self-help and is not a substitute for professional medical or psychological care. The CUDIT-R result shown in the app is a screening result, not a diagnosis. If you are in crisis or need treatment, please contact a qualified professional or a support service such as Narcotics Anonymous (na.org).

Changes

If this policy changes, we will update this page and the "Last updated" date and version above. If we make significant changes — especially to how health-related information is used — we will tell you in the app and, where required, ask for your consent again.

Contact

Askesis Intelligence is responsible for your data (the "data controller"). Questions or requests? Email askesisintelligence@gmail.com. Askesis Intelligence is based in Surrey, British Columbia, Canada.