Legal

Privacy Policy

Effective date: April 26, 2026  ·  Tuff Ghost Media LLC

Headstash is a product of Tuff Ghost Media LLC ("we," "us," or "our"). This Privacy Policy explains how we collect, use, and protect information when you use Headstash -- the receipt-based brand loyalty app ("Service"). By using Headstash you agree to this policy.

What we collect

• Phone number -- used to create your account and send you program updates and rewards via SMS.
• Receipt images and purchase data -- photos you upload of cannabis purchase receipts. We extract brand, product, and purchase amount to calculate your reward progress.
• Device and usage data -- browser type, IP address, and in-app activity used to operate and improve the Service.

How we use it

• To track your reward progress toward brand campaigns you have opted into.
• To send you SMS notifications about your stash, rewards, and program updates.
• To share relevant purchase data with the specific brand whose campaign you opted into -- so they can fulfill your reward.
• To detect and prevent fraud (duplicate receipts, invalid submissions).
• To improve the Service and develop new features.

Who we share it with

We share your data only with the cannabis brands whose loyalty campaigns you have directly opted into. We do not sell your data to third parties, data brokers, or advertisers. We do not share your data with dispensaries.

We use Supabase (database), Resend (transactional email), and Vercel (hosting). These sub-processors receive data only as necessary to operate the Service and are bound by their own privacy commitments.

SMS communications

By creating a Headstash account you consent to receive SMS messages related to your account and active brand campaigns. Message and data rates may apply. You can opt out at any time by replying STOP to any message. Reply HELP for assistance.

Data retention

We retain your data for as long as your account is active or as needed to provide the Service. You can request deletion of your account and associated data at any time by contacting us at the address below.

Your rights

Depending on your state, you may have the right to access, correct, or delete your personal data, or to opt out of certain data uses. To exercise these rights, contact us at privacy@headstash.co.

Children

Headstash is intended for adults 21 and older in accordance with applicable cannabis laws. We do not knowingly collect data from anyone under 21.

Changes to this policy

We may update this policy from time to time. We will notify you of material changes via SMS or by posting a notice in the app. Continued use after changes constitutes acceptance.

Contact

Tuff Ghost Media LLC
privacy@headstash.co