To operate Trees Rewards, we collect: your phone number (your account identifier) and an email address, which we use only to send a one-time verification code when you sign up or log in — there are no passwords, and we don't use your email for marketing; a record of which unit codes you've redeemed and when; your points balance and history; and, only when you redeem a reward, a shipping address (for merch) or the email address you provide at redemption (for digital gift cards, which may differ from your login email).
This data is used to operate the rewards program: crediting points, enforcing program limits (like the monthly code cap), fulfilling redemptions, and reviewing activity that looks unusual for fraud-prevention purposes, as described in our Program Terms.
Redemption and proof-of-purchase records are retained for at least 90 days to support the proof-of-purchase window described in our terms. We don't currently define a maximum retention period beyond that — this is one of the open items pending attorney review before launch.
We don't sell your data. Data is not shared with dispensaries — Trees Rewards has no connection to any dispensary point-of-sale system, and dispensaries have no visibility into individual patient accounts.
See also our Program Terms & Eligibility.