Privacy Policy

This Privacy Policy explains how the Highness mobile application, and the highnessapp.eu website, handle information when you use them.

1. What Highness is

Highness is a personal diary app for logging sessions and related notes. It is not a medical service and does not provide health advice.

2. Information stored on your device

Your diary data, such as sessions, stash entries, preferences, and images you attach, is stored locally on your device unless you choose to use optional Apple services such as iCloud sync. This data remains under your control and may be included in your device backups depending on your system settings.

Because local storage depends on your device security and backup settings, you should use a passcode or biometric lock on your device if you consider this information sensitive.

3. Optional iCloud sync (Apple CloudKit)

If you choose to enable iCloud sync, relevant diary data may be stored in your private iCloud database using Apple’s CloudKit. In that case, processing is subject to Apple’s privacy policy. We do not store the contents of your private iCloud data on our own servers.

4. Limited network use

The app may make limited network requests needed to support certain features, such as Apple services, subscriptions, maps, analytics, or loading app resources. Unless explicitly described in this Privacy Policy, we do not upload the contents of your diary entries, stash notes, or attached images to our own servers. The one feature that does send content you provide to our servers is the Menu Scanner, described in the next section.

5. Menu Scanner

The Menu Scanner lets you photograph a dispensary or coffeeshop menu and receive recommendations matched to your own logged history. You get one scan per week, or five per week with Highness Plus. To do this, the app sends two things to our server, hosted in Europe, over an encrypted connection (HTTPS): the photo or photos you took (up to 3), and a compact taste profile built on your device from your own data. The profile is a short summary, never your journal: it carries strain names you rated well or poorly with their average score, your preferred THC range, and prices you typically pay. It does not include notes, dates, locations, photos, or moods.

Our server prepares the photos so the menu can be read properly (very tall screenshots may be split into pieces, and images are resized and re-encoded), then passes them together with the profile to Mistral AI, a European AI provider, which reads the menu and generates the recommendations. The result is sent back to your device, and processing ends there.

Our server keeps nothing. Once your results are ready, the photos and the menu’s contents are gone from it; the only thing it remembers is how many scans you have left this week, tied to an anonymous per-device key (Apple App Attest) or, for Highness Plus subscribers, your App Store subscription status. There are no accounts and no user IDs. Mistral may hold the photos for up to 30 days to check for abuse, never to train their AI, and then deletes them too. See Mistral AI’s privacy documentation.

Your scan results and the photos shown under Recent scans are stored only on your device.

6. Analytics

We use Aptabase (configured in the EU region) to collect basic usage analytics, such as screens viewed, button taps, feature usage, and approximate country-level usage. This helps us improve the app.

We do not send the contents of diary entries, stash notes, or attached images to Aptabase.

For more information, see Aptabase’s privacy information.

On the highnessapp.eu website we use Simple Analytics to count page visits. It sets no cookies, does not follow you across other sites, and does not collect personal data, so there is nothing stored on your device and nothing for you to opt out of. See Simple Analytics’ privacy information.

7. Subscriptions and payments

Purchases, including Highness Plus subscriptions, are processed by Apple via the App Store. We do not receive your full payment card details. Apple provides the app with transaction or subscription status information needed to unlock features. See Apple’s privacy policy for payment-related processing.

8. Location and maps

If you use place search features, the app may use Apple’s MapKit and related services to suggest places based on what you type. Highness does not request access to your device location for this feature. MapKit processing is subject to Apple’s terms and privacy policy.

9. Permissions

The app may request access to the camera or photo library so you can attach images. You can revoke access at any time in iOS Settings. We use these permissions only to provide the features you trigger.

10. Legal bases (EEA/UK)

If the GDPR applies, we rely on performance of a contract to provide the app, legitimate interests for security, reliability, and product improvement, and, where required, consent where consent is the appropriate legal basis.

11. Retention

Data stored locally on your device remains there until you delete it, remove the app, or remove it through your device or backup settings. Data processed by Apple services, such as iCloud or App Store purchases, is subject to Apple’s retention practices. Analytics data is retained according to the settings and practices of our analytics provider.

12. Your rights

Depending on where you live, you may have rights regarding personal data we process, including rights to access, correct, delete, or object to certain processing. Where data is stored only on your device or in your private iCloud account, you may also be able to manage or delete that data directly through your device or Apple account settings. You may also lodge a complaint with your local data protection authority.

13. Children

The app is not directed at children. You must be old enough to lawfully use the app in your region, including rules about cannabis-related content where applicable. We do not knowingly collect personal information from children.

14. International transfers

Some service providers we rely on, such as Apple or analytics providers, may process data outside your country. Where applicable, we rely on appropriate safeguards under relevant law.

15. Changes

We may update this Privacy Policy from time to time. When we do, we will update this page and revise the “Last updated” date above.

16. Contact

For privacy questions or requests, contact us through the options on highnessapp.eu or at pedro@highnessapp.com.