Privacy Policy

Puffy's Sesh & Planner · Last updated November 9, 2026

This policy explains what information the Puffy's Sesh & Planner app and the Puffy's strain database website (the "Service") use, and why. "We" means Knicknak Enterprises LLC, an Oklahoma limited liability company doing business as Puffy's. The short version: your journal stays on your device. We don't have accounts, we don't sell personal information, and we don't use advertising trackers.

1. What stays on your device

Your sessions, ratings, notes, photos, lab results, goals, favorites, try list, settings, badges and the strains you add, edit or save are stored in your browser or phone's own storage. They are not sent to us. Clearing the app's data or uninstalling it removes them, so keep your own backups. A PIN lock, if you set one, is kept on your device as a one-way code; the PIN itself is never stored or sent anywhere.

2. What our server receives

• Strain lookups and imports. When you search or import strains, the app sends your search words and filters to the Puffy's strain database to get results.
• Your IP address. Every request includes it. We use it briefly to limit abuse, such as too many requests a minute, and don't store it with anything you do in the app (strain suggestions, below, are the one exception).
• Your location, only when you use the Map. If you tap Use my location, your phone asks your permission first. The app rounds the location to about 1 km (roughly a neighborhood) before sending it, and our server uses it only to look up nearby shops. If you search a city or ZIP code instead, we receive what you typed. We don't store either one with your IP address or anything else about you; the server keeps the shop results for a few hours, under the rounded area only, so repeat lookups are faster. The last area you looked at and the shops you save stay on your device.
• Your approximate state. Our host, Cloudflare, tells our server which US state a request comes from. We use it only to choose which sponsored cards may show in your state, and we don't store it.
• Sponsored card counts. When a sponsored card is on your screen or you tap it, the app sends that card's id and a count. We keep only daily totals per card, with no device id, name or IP address.
• Purchases. If you buy Basic or Advanced, Apple or Google handles the payment under its own privacy policy. We never see your card or store account details; the app only learns which plan is active on your device.
• Things you choose to send. If you suggest a strain or share a lab result, we receive what you submit. With a strain suggestion we also keep the IP address it came from, so we can stop spam; it is never shown publicly.

3. Other companies involved

• Cloudflare hosts the website and API and may keep request logs for a limited time under its own privacy policy.
• Google Fonts provides the app's fonts, so your browser asks Google for them.
• OpenStreetMap. Shop listings and place search come from OpenStreetMap through our server, so OpenStreetMap sees our server's request with the rounded area, not your device. The map pictures (tiles) are loaded by your browser straight from OpenFreeMap (or, on phones that can't show that map, from OpenStreetMap's tile servers under the OpenStreetMap Foundation's privacy policy), which therefore see your IP address and the part of the map you're viewing. The map code itself comes from cdnjs (Cloudflare).
• Route previews. Tapping Route after Use my location draws a straight line and an estimated distance and drive time on your phone; nothing about the route is sent to us or anyone else. Turn-by-turn directions happen in your own maps app (Apple Maps, Google Maps, Waze or another), under that app's privacy policy.
• Support messages. If you contact support from the app or the support page, we receive your message, the topic you picked, the app version and your type of device (iPhone, Android or web), plus your email address only if you give one so we can reply. We don't keep your IP address with a message, only the same one-way daily code as problem reports, which limits how many messages one phone can send. We use them only to answer you and improve the app, and delete every message automatically 90 days after it arrives. Please don't include health or other sensitive details.
• Problem reports. If you report a problem with a shop, we receive the shop, what you picked, and any note you write. Reports never include your location. We don't keep your IP address with a report, only a one-way code made from it and the date, so the same phone can't send the same report twice in a day. Reports are used only to fix the map.
• State license records. Licensed shops on the Map come from public records published by each state's licensing agency, served by our own server. Looking them up sends only the map area around the rounded location.
• Links you open (sponsors, shop websites, product searches on Weedmaps, Leafly, AllBud or Google, and directions in Apple Maps, Google Maps or Waze) take you to sites with their own privacy policies.
• Sharing. Share cards are made on your device. Nothing is posted unless you post it.

4. What we don't do

We don't sell or rent personal information, don't build profiles about you, and don't use third-party advertising or analytics trackers. Sponsors never receive information about you from us. If you tap a sponsor's button, their site may collect information under its own policy.

5. Age

The Service is only for adults 21 and older. We don't knowingly collect information from anyone younger.

6. Security and retention

Connections to our server are encrypted. Sponsored card totals are kept so sponsors can see results. Strain suggestions and lab results you send are kept as part of the database. We keep nothing else about you.

7. Your choices

You can delete strains saved from the online database in Me › Strain data and remove everything else by clearing the app's data. If your state gives you privacy rights, such as the right to know or delete information, contact us and we'll help. We hold very little to begin with.

8. Changes and contact

We may update this policy. The date at the top shows the latest version. For privacy questions, contact Puffy's through our Support page.