Privacy Policy

We collect the information you provide to operate your account and power the features you use:

• •Account information: your name, email address, and assigned role (patient, caregiver, dispensary, or admin).
• •Health logs: symptom entries, severity and mood scores, pain levels, sleep quality, lifestyle and dietary habits, women's wellness and cycle data, and cannabis strain journal entries.
• •Cannabis usage data: strains used, dosage, consumption method, and perceived effects.
• •Caregiver relationships: the email addresses of caregivers or family members you invite, and the records you choose to share with them.
• •Messages: content of secure messages between you and your caregivers or care team.
• •Audit trail: a record of key actions (logins, data exports, sharing changes, deletion requests) stored for security and compliance.
• •Optional device data: approximate location (if you grant permission) and browser/device type for security and analytics.

We use your data only to provide and improve the app's features:

• •To store and display your personal health logs and generate trend insights and PDF reports.
• •To enable sharing of specific records with caregivers or doctors you authorize.
• •To send secure in-app messages and wellness notifications you request.
• •To maintain an audit trail for security, fraud prevention, and compliance.
• •To aggregate, de-identified analytics that help us improve the platform. We never sell your data.

You are in full control of who sees your records. Sharing is never automatic — you must explicitly share a record with a recipient's email address.

H3 supports field-level selective sharing. For every record you share, you can hide specific fields (for example, cannabis strain or dosage) from a recipient, either as a one-time override or as a saved default for that person. Hidden fields are either omitted entirely or shown as a "Hidden by patient" placeholder, depending on your preference.

Recipients can only view the records and fields you allow. They cannot edit or delete your data. You can revoke access at any time by removing a recipient from a record or from your sharing defaults.

We protect your data with industry-standard safeguards:

• •Encryption in transit: all communication between your device and our servers uses HTTPS/TLS.
• •Encryption at rest: stored data is encrypted on the server.
• •Row-level security: access to every record is enforced server-side, so a user can only read or modify records they own or that have been explicitly shared with them.
• •Audit logging: sensitive actions are recorded in a personal audit trail you can review.
• •Offline buffer: when you create logs without a connection, they are stored locally on your device until sync. This local buffer is not encrypted; clearing the app or logging out removes it.

For users in the European Economic Area, our legal bases for processing are:

• •Consent: for optional features like location and push notifications.
• •Contract: to provide the account and features you signed up for.
• •Legitimate interests: for security, audit logging, and platform improvement using de-identified data.
• •Legal obligation: where we are required to keep records for compliance.

H3 is not intended for use by children under 16. The Pediatric Tracker module is designed for a parent or caregiver to log and manage a child's health data on their behalf. By using that module, you confirm you are the parent or legal guardian and consent to the processing of your child's data as described in this policy.

We keep your data for as long as your account is active. When you request account deletion, we remove your personal logs and shared records and record the deletion request in the audit trail. Some aggregated, de-identified data may be retained for analytics. Messages and audit entries may be retained for a limited period as required for security and compliance.

You have the following rights over your data:

• •Access: view all your data within the app or export it as a PDF.
• •Rectification: edit any of your logs at any time.
• •Erasure: request permanent account deletion from the Account page.
• •Restriction: pause sharing with any caregiver at any time.
• •Portability: export your symptom, lifestyle, dietary, and wellness logs as PDF files.
• •Objection: opt out of optional analytics and notifications in Settings.
• •Field-level consent: decide exactly which fields each recipient can see, per record or as a default.

H3 uses trusted infrastructure providers for hosting, authentication, and email delivery. These providers process data on our behalf under data processing agreements and do not use your data for their own purposes. We do not share your personal data with advertisers.

Your data may be processed on servers located outside your country of residence. Where this involves a transfer outside the EEA, UK, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses.

H3 uses local storage on your device to remember your language, theme, and offline sync queue. We do not use advertising or tracking cookies.

We may update this policy as the app evolves. Material changes will be announced in the app, and the "Last updated" date above will reflect the change. Continued use after a change constitutes acceptance of the updated policy.

If you have questions about this policy or want to exercise your data rights, contact us through the in-app Messaging feature or the support channel listed in your Account page.