CannaGLAP ← Home

Privacy Policy

Grown Like A PRO LLC ("we", "us") builds Canna GLAP, a private, end-to-end encrypted grow journal for adults growing cannabis where it is legal. This policy explains what we collect, what we deliberately cannot read, who else handles data to make the app work, and your choices. The app is for adults 21 or older (or older where local law requires).

1. What is end-to-end encrypted

This content is encrypted on your device with AES-256-GCM before upload. We store only unreadable ciphertext:

• Grow records: rooms, fields, plants, strains, phases, feed logs, harvests and notes.
• Stock and inventory records, including batches, curing stages and "best used by" dates.
• Plant photos. Location data is removed from a photo when you add it, before it is encrypted.
• Your saved Cannie conversation history.
• Room sensor readings (the temperature, humidity and battery level in each reading) and the alert limits you set for a sensor. These belong to your farm, so everyone on your farm team can read them: they are locked with a farm sensor key that only the team's phones hold. That key opens sensor readings and nothing else; the rest of your grow stays under your own key.
• Backups you export (an encrypted .cannabackup file that stays wherever you save it).

What this means if our systems were ever broken into is explained in plain words on What if we get hacked?

How your key works

One random key encrypts your grow. We store three locked copies of it, and none of them can be opened by us:

• Passphrase copy: locked with a key derived from your passphrase using Argon2id. This is how you unlock on a new device.
• Recovery copy: locked with your 24-word recovery phrase, for when you forget your passphrase.
• Trusted device copy: after you unlock once on a phone, a copy is kept in that phone's secure keychain so signing in to your account on that phone opens your grow without retyping your passphrase. It never leaves the device.

Until you confirm you have saved your recovery phrase, the app keeps it in this phone's secure keychain so it can show it again. It is deleted when you confirm or delete your account, and can no longer be used once the app is reinstalled.

If you turn on Face ID or fingerprint sign-in, your account email and password are stored in your phone's secure keychain so the app can sign you in after the biometric check. If you lose both your passphrase and your recovery phrase, your encrypted grow cannot be recovered, by you or by us.

2. What is not end-to-end encrypted

We can read the following, because the app needs it to run, bill, or keep your account safe:

• Account details: email address, the name you give (a nickname is fine; a last name is optional), date of birth and the location (country, state, city) you enter at sign-up, plus your sign-in method (email, or Apple, Google or Microsoft where offered). Passwords are salted and hashed by our authentication provider; we never see them.
• Subscription status: whether your intro period, subscription or gift time is active, when it renews or ends, and whether a payment failed. We never receive your full card number.
• Sensor details: each sensor's name and ID, where it sits in your room, its battery level and signal, whether it is online, when it last reported and when an alert last fired; and for each stored reading, its time, where it came from and which team member's phone uploaded it. The readings themselves are encrypted (section 1).
• Farm details: farm name and the address or town you enter, used for weather.
• Team membership: who belongs to your grow and their role. People on a farm team with you can see your account record: your name and email, your plan and any gift time, the billing country and ZIP code you gave, and any IP address we hold for your account. Your encrypted grow is never visible to them.
• Security records: the IP address you sign in from, shortened before we store it (the last part is removed, so 203.0.113.77 is kept as 203.0.113.0: enough to tell networks apart, not to point to a home); sign-in attempts (email, time, success or failure, and that shortened IP address), kept for 30 days (a nightly clean-up removes them, so up to a day longer); security events such as two-factor authentication and password resets, and device name and operating system for your sessions, both kept for 60 days and then deleted automatically, or sooner with Delete my history (section 7); our sign-in provider's own records, which hold the full IP address: its log of each sign-in, which we delete after 30 days, and its record of each device that is signed in (with the device's browser or app details), kept until that device signs out, or deleted once it has gone unused for 30 days (by a nightly clean-up, so up to a day longer); and one-time sign-in codes we email you (stored scrambled), with the address they went to, kept until 7 days after they expire or are used (again up to a day longer). Our web host and our backend provider also keep standard access logs of requests to them (IP address and browser details) for a short time under their own policies. We use these to protect accounts, alert you to failed sign-ins, and stop abuse, including automated checks that can flag suspicious sign-ups.
• Notification tokens: so we can send the reminders and alerts you turn on. Notifications we store or send through push services say only that something is waiting (for example "You have a task waiting"), never a task title, plant name or person's name, because lock screens and push services can read them. Reminders your phone schedules for itself stay on your phone.
• Support messages and feedback you send us. Our support team reads these, so leave out your full name, address and anything else you would rather keep private.
• When things happen: our servers can see when each of your encrypted records is created or changed and how many there are, though not what they say. Your phones need this to keep in sync with each other. So someone with access to our database could see that your account saved several records on a given evening, but not whether they were plants, feedings, notes or photos. We looked at encrypting these times as well: doing so would stop your phones from syncing, so we keep them and say so here.
• Usage counts: how many Cannie requests your account makes, to keep the service fair.
• Gifts: a redeemed gift is kept with the account it was redeemed on: which plan it gives, how long, and when its time starts and ends (so codes for different plans run in turn and a refund takes back only unused time). If you upgrade gift time on our website, we keep a record of the upgrade: your account, the gift, the plans before and after, the amount and Stripe's payment reference, so a refund or dispute can be handled. When you buy a gift, we hold your email, the recipient's email if you ask us to send it, and your name and note if you add them. We use these only to send the gift email, and delete them from our database once it has been sent (our email provider, Resend, keeps a copy of each email it sends for a limited time under its own policy). Details from a checkout that was never paid are deleted automatically, normally within an hour and in any case within 18 days; those of a gift that could not be delivered, within 31 days. We also use the IP address of the request, and your email, to limit abuse of the gift checkout and of other account actions; the rate-limit counters kept for this hold them only in hashed (scrambled, though not anonymous) form and are deleted within three days (sign-in attempts are kept as described under Security records). We send a gift email to its recipient because the buyer asked us to (our legitimate interest in delivering what was bought for them); the email says it comes from us, why it was sent, and how to stop more. If someone asks us to stop sending gift emails to their address, we keep a one-way fingerprint of that address so we can honor it (like the rate-limit counters, scrambled but not anonymous: an address we are given can be checked against it). After delivery we keep only that a code was redeemed, on which account and when, so a refunded or disputed payment can be reversed; if you delete your account, the gift record no longer names it. Our database never holds the code itself, only a one-way fingerprint of it (the email that carried it, and our email provider's copy of that email, do contain it). Stripe keeps its own record of the payment, which carries the gift's reference number: so Stripe's records and ours together show which account redeemed a gift that someone paid for. Our email provider's records of a gift email and of the "gift sent" note to the buyer carry the same gift reference, so they too link the buyer's and the recipient's addresses.
• The planner and leaf chart emails (only if you ask for the Clone to Cure Planner or the leaf symptom chart on our website): your email address, which one you asked for, when and with what wording you agreed, a scrambled form of the IP address you agreed from, whether you confirmed, and which of the five emails we have sent. We send nothing but the confirm email until you press its button, then the planner or chart and four more emails over about two weeks, from "Canna GLAP" through our email provider, Resend. Every one has a link to stop them; stopping deletes your address from the list at once. An address that is never confirmed is deleted within 30 days. We never sell or share the list. The same rate-limit counters as for gifts protect the form.
• The grow guide emails (only if you have a paid plan): 15 emails that walk through a typical grow, stage by stage, at most 4 in your first month and 3 a month after. We send them to your account email through Resend. We keep when you joined the guide, which ones we have sent and when, and whether you pressed stop (kept until your account is deleted, so a stop stays a stop). If you are also getting the planner or leaf chart emails, the guide waits until those finish, which it checks by comparing your account email with that list. We cannot see your plants, so they follow a typical timeline, not your grow. Every one has a link to stop them; stopping keeps your account and plan exactly as they are.
• Signing in on our website: you can sign in or create an account on growcannabiseasily.com to subscribe or redeem a gift. The same account details and security records as in the app apply, including failed sign-in alerts. You stay signed in on the website only while the page is open: it signs you out when you leave, and a website sign-in left behind is ended once it is two hours old, the next time the app checks your devices, or within about a day by a nightly clean-up. A website sign-in does not use up one of your device slots; a sign-up (on the website or in the app) that is never confirmed is kept, so we recognize the address if you come back, until you ask us to delete it; if you create an account there, your browser remembers your email address so the sign-in form can fill it in; it is used for up to a day, and cleared the next time you visit our site after that.

3. Cannie, the AI assistant

When you ask Cannie something, the following is sent to our AI provider, OpenAI, to produce an answer:

• your message and any photo you attach;
• your recent conversation with Cannie;
• the strain and stage of the plant you're asking about;
• a summary of your recent room temperature and humidity (worked out on the phone of the person asking, from your encrypted readings) and local weather, so answers fit your conditions;
• a summary of your feed history, only if you switch that on.

Before your words go to OpenAI, our server removes any email address, phone number or street address it can recognize. It cannot reliably recognize names, so leave names out. Cannie does not need them.

This is the one place grow information leaves your device in readable form, and only when you ask Cannie a question. Cannie's answers are guidance, not professional advice.

Staying anonymous

You do not have to give us your real identity:

• Use a nickname. Only the first name box is required, and any name works.
• Use an alias email address instead of your personal one: Apple's Hide My Email, a forwarding address, or a separate email account you make just for this. Your sign-in codes and receipts go there, so pick one you check.
• Pay with a prepaid gift card. Plans and gifts bought on our website can be paid with a prepaid Visa, Mastercard, American Express or Discover gift card that is not in your name. Some prepaid cards need a ZIP code registered with the card issuer before they work online. A purchase through the App Store or Google Play is tied to your Apple or Google account instead.
• Your profile photo stays on your phone. It is never uploaded.

With a nickname, an alias email and a prepaid card, the account we hold is not tied to your name.

4. Who else handles data

We don't sell your personal information. We use these service providers to run the app:

• Supabase: hosting, authentication and data storage (including the encrypted grow data).
• Stripe: payments made on our website. Stripe receives your email and payment details under its own privacy policy.
• Apple App Store and Google Play: in-app subscriptions. We receive a purchase confirmation, not your payment details.
• Apple, Google and Microsoft sign-in: where offered, if you choose to sign in with them.
• OpenAI: Cannie's answers, as described above.
• Resend: account, security, subscription and gift emails, such as sign-in codes, subscription confirmations, failed sign-in alerts (which include the time, device type and IP address of the attempt), and gift codes sent to the person you chose.
• WeatherAPI.com: your farm's town or city, to fetch weather and severe-weather alerts. We don't send your exact coordinates.
• Expo: delivering push notifications to your phone.
• Sentry: crash and error reports, where enabled. We filter these to exclude grow content, but reports can include device details, sensor connection information and, for a failed purchase check, your account id.

What this means in practice, in plain words: Can the government see my grow journal?

We may disclose the readable information above if we are legally required to. Your end-to-end encrypted grow stays unreadable to us, and so to anyone we could be compelled to hand it to.

5. How we use information

• To provide the app, sync your data, and run your subscription.
• To keep accounts secure, alert you to failed sign-ins, and prevent abuse and fraud.
• To answer Cannie questions and fetch weather for your farm.
• To send the notifications and emails you've asked for or that concern your account.
• To respond to support requests.

6. Keeping and deleting your data

We keep your account data while your account is active. Activity logs and session records are deleted after 60 days, and sign-in attempts after 30. To delete your account and its data, use Settings → Delete Account in the app, or email HelpMe@growcannabiseasily.com from the address on your account and we will confirm once it is done. Some records may be kept where the law requires it or to prevent fraud (for example, payment records held by Stripe, Apple or Google; Stripe's include your email address and our reference to your account). Our service logs, which can include your email address or account reference for troubleshooting, are deleted automatically by our hosting provider within days. If one of our staff deletes an account, we keep a record that they did, which account id it was, and a short reason (with any email address removed). Notes our staff made about an account for abuse or fraud prevention (for example why it was blocked) are kept with that account id after deletion, and our nightly maintenance record lists the ids of never-confirmed sign-ups it removed, for 90 days. One more is ours: if you have ever subscribed on our website, had our first-month intro, or had any trial or subscription with us before we began keeping this record in 2026, we keep your email address after your account is deleted, only so the intro cannot be claimed again. Deleted data can also remain for a limited time in our hosting provider's backups of the database, until those backups are overwritten. Encrypted grow data cannot be read without your keys, so once your keys are gone it is permanently unreadable.

7. Your choices and rights

• You can ask for a copy of, correction of, or deletion of the readable personal information we hold about you by emailing us.
• You control Cannie: don't send what you don't want sent, and keep feed-history sharing off if you prefer.
• You can turn notifications, Face ID / fingerprint sign-in and trusted-device unlock on or off in the app.
• You can delete your past sign-in sessions, your activity log and your old sign-in attempts at any time with Settings → Security → Delete my history. The last 7 days of the activity log and the last day of sign-in attempts are kept to protect your account if someone else gets into it, and are deleted automatically later.
• Depending on where you live, you may have additional rights under local law; contact us to use them.

8. Age

The app is only for adults 21 or older, or older where local law requires. It is not directed to anyone younger.

9. Changes

We may update this policy. The "Last updated" date shows the current version, and we'll tell you in the app or by email about material changes.

10. Contact

Questions about privacy: HelpMe@growcannabiseasily.com.