Happy Valley Genetics Rewards Mobile Application

Effective: June 1, 2026

This section supplements the Happy Valley Genetics Privacy Policy above and describes how HVV Genetics, LLC ("we", "our", "us") collects, uses, and shares personal information through the Happy Valley Genetics Rewards mobile and web application (the "Rewards App"). Where this section and the Privacy Policy address the same topic, this section controls for data collected through the Rewards App.

The Rewards App is restricted to users 21 years of age or older.

1. What the Rewards App Collects

1.1 Account information

When you create a Rewards App account, we collect:

• Email address. Provided by you (Email/Password sign-in), by Google (Google Sign-In), or by Apple (Sign in with Apple — see Section 1.2 below).
• Display name. Provided by Google or Apple if you use those sign-in methods; optional for Email/Password.
• Profile photo URL. Provided by Google or Apple, where applicable. We store only the URL; the image itself is hosted by the provider.
• Account password. Email/Password sign-in only. Stored only as a one-way hash by our authentication provider (Firebase Authentication). We never see or store your plaintext password.

1.2 Sign in with Apple — "Hide My Email"

If you sign in with Apple and choose "Hide My Email," Apple provides us with a private relay email address (@privaterelay.appleid.com) instead of your real email. We treat this relay address the same as any other email: we store it, we may send transactional messages to it, and we do not attempt to identify, deanonymize, or trace it back to your real Apple ID.

1.3 RedKeySeeds account link

To award points for purchases, the Rewards App optionally links your Rewards account to your existing customer record on redkeyseeds.com ("RKS"). When you link, we collect and store:

• The email address you used at RKS checkout (if different from your Rewards App email)
• Your RKS WooCommerce customer ID
• The timestamp and method of the link

We also write a record of your Rewards App identifier into your RKS customer record so the link persists if your email later changes.

1.4 Loyalty program data

While you use the Rewards App, we maintain on your behalf:

• Current points balance and lifetime points earned
• Tier status (Hobbyist, Cultivator, or PRO)
• Lifetime dollars spent on RKS (sum of completed orders) and total count of completed RKS orders
• Per-order records synchronized from RKS via authenticated webhook (order ID, status, post-discount subtotal, dates, points earned)
• Per-redemption records (reward chosen, point cost, coupon code issued, status, date)

1.5 What the Rewards App does NOT collect

For transparency, the Rewards App does not collect:

• Phone number
• Date of birth
• Physical address (any shipping/billing address you provide at RKS checkout is governed by RKS’s own data handling)
• Medical marijuana card details
• Location data (no GPS, no IP-based geolocation tracking)
• Device identifiers used for advertising or cross-app tracking
• Behavioral analytics or in-app interaction telemetry
• Browsing history

The Rewards App does not embed any advertising networks, third-party analytics platforms, or behavioral tracking tools.

2. How We Use the Data

We use the information described in Section 1 to:

• Authenticate you and provide access to your account
• Calculate, award, and adjust points balances and tier status
• Issue and validate redemption coupons
• Synchronize your purchase history from RKS so points reflect your actual completed orders
• Provide customer support
• Detect and prevent abuse (e.g., refund-cycle exploitation, unauthorized attempts to link another user’s RKS account)
• Comply with legal obligations (tax records, lawful requests)

We do not use Rewards App data for advertising, marketing personalization, or sale to third parties.

3. Who Processes Your Data

We use the following third-party service providers ("processors") to operate the Rewards App. These processors act on our behalf under contractual confidentiality and data-protection obligations.

Provider	Role	What they receive
Google LLC — Firebase Authentication	Identity and authentication	Email, hashed password (if applicable), OAuth tokens
Google LLC — Cloud Firestore	Database hosting (US, region us-central1)	All account, points, order, and redemption records described in Section 1
Google LLC — Cloud Functions and Cloud Logging	Server-side compute and operational logs	Inbound webhook payloads, request metadata, application logs
Apple Inc.	Sign in with Apple (only if you use this sign-in method)	Authentication metadata; Apple’s own privacy terms govern Apple’s collection
RedKeySeeds.com (operated by HVV Genetics, LLC, LLC)	Source of order and customer data; coupon issuance	Your Rewards App identifier is written to your linked customer record. No other Rewards App data is sent to RKS.

Google services are operated under Google’s Cloud Data Processing Addendum. Rewards App data is stored in United States data centers.

4. Sharing Between the Rewards App and RedKeySeeds

The Rewards App and RedKeySeeds.com are both operated by HVV Genetics, LLC. The two systems exchange data as follows:

• From RKS into the Rewards App: Your order activity (order ID, status, subtotal, dates) flows into the Rewards App via authenticated webhook so points can be calculated.
• From the Rewards App into RKS: When you link your accounts, your Rewards App identifier is written onto your RKS customer record. We do not send your Rewards App email, points balance, redemption history, or any other Rewards App data to RKS.

Because both systems are operated by the same legal entity, this exchange is for legitimate business purposes (operating the loyalty program) and does not constitute a "sale" or "share" of personal information under the California Consumer Privacy Act.

5. Retention

Data category	Retention
Account information (email, display name)	While your account is active; deleted within 30 days of account deletion
Points and tier records	While your account is active; deleted within 30 days of account deletion
Order activity records (synced from RKS)	While your account is active; deleted within 30 days of account deletion
Redemption history	While your account is active; deleted within 30 days of account deletion
Issued coupons inside RKS WooCommerce	Governed by RKS’s coupon retention policy; coupons remain valid per their stated terms
Operational logs (Google Cloud Logging)	Auto-expires per Google Cloud’s default retention (currently 30 days)
Backups	Purged within 90 days of account deletion

If you delete your account in-app (see Section 7), we initiate immediate deletion of your Firebase Authentication record and Firestore data. Backups are purged on the schedule above.

We may retain a minimal record of issued coupons for tax, accounting, and anti-abuse purposes for as long as required by law.

6. Your Rights

6.1 All users

You may:

• Access your account information within the Rewards App at any time.
• Permanently delete your account in-app: Settings ? Delete Account (a typed-DELETE confirmation is required). This is irreversible.
• Sign out at any time without deleting your account.
• Contact us at support@happyvalleygenetics.com to request corrections, exports, or to ask privacy-related questions.

6.2 European Economic Area, United Kingdom, and Switzerland (GDPR / UK GDPR)

If you are located in the EEA, UK, or Switzerland, you have the following rights:

• Access — request a copy of the personal data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion (in-app deletion satisfies this; you may also email us)
• Restriction — ask us to limit how we process your data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interest
• Lodge a complaint with your local data protection authority

Our legal basis for processing is performance of a contract (operating the loyalty program), legitimate interest (fraud prevention, security), and consent where applicable.

The data controller is Happy Valley Ventures, LLC. We do not currently have an EU representative. Contact support@happyvalleygenetics.com to assert your rights.

6.3 California (CCPA / CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, disclose, and share
• Delete your personal information (in-app deletion satisfies this)
• Correct inaccurate personal information
• Limit the use of sensitive personal information. (We do not collect sensitive personal information through the Rewards App as defined by CPRA.)
• Opt out of "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined by CCPA/CPRA. The Rewards App does not engage in cross-context behavioral advertising.
• Non-discrimination — we will not discriminate against you for exercising any of these rights.

Exercise these rights by emailing support@happyvalleygenetics.com or using in-app account deletion. We may need to verify your identity before fulfilling certain requests. You may authorize an agent to make a request on your behalf; we will require written authorization.

6.4 Other US states

Residents of Virginia, Colorado, Connecticut, Utah, Texas, and other US states with comprehensive privacy laws have rights similar to those above. Contact support@happyvalleygenetics.com to exercise them.

7. How to Delete Your Account

To permanently delete your Rewards App account and all associated personal information:

1. Open the Rewards App.
2. Go to Profile ? Settings.
3. Tap Delete Account (located below Log Out).
4. Confirm by typing DELETE in the confirmation dialog.

Deletion is immediate and irreversible. Your authentication record, account data, points balance, order activity, and redemption history are removed. Backups are purged within 90 days. Coupons you previously redeemed remain valid in RKS per their stated terms.

If you cannot access the Rewards App but wish to delete your account, email support@happyvalleygenetics.com from the email address associated with your account.

8. Children’s Privacy

The Rewards App is restricted to users 21 years of age or older. We do not knowingly collect personal information from anyone under 21. If you believe a user under 21 has provided us with personal information, contact support@happyvalleygenetics.com and we will delete it.

9. Security

We use industry-standard security controls including:

• TLS encryption for data in transit
• AES-256 encryption for data at rest (Firestore default)
• Strong-password requirements for Email/Password accounts
• Server-side enforcement of all points calculations, tier transitions, and redemption operations (the Rewards App client cannot modify these directly)
• Database security rules that restrict each user’s data to their own authenticated identity

No system can be guaranteed 100% secure. If we become aware of a breach affecting your data, we will notify you as required by applicable law.

10. Changes to This Section

We may update this section from time to time. The current version will always be posted at /privacy-policy/ with an updated "Effective" date. Material changes will be communicated within the Rewards App.

11. Contact

For privacy-related questions or to exercise your rights: Email: support@happyvalleygenetics.com or Mail: HVV Genetics, LLC, 38 Blackburn Center, Gloucester, MA 01930

Privacy Policy

This additional Privacy Policy (this “Privacy Policy”) is for HVV Genetics, LLC and its related companies (collectively, “Happy Valley”) applies to all visitors and users of our website accessible at www.happyvalleygenetics.com (the “Happy Valley Genetics Website”) and to Happy Valley Genetics customers using the Pheno Hunter app. Your privacy, trust and patronage is very important to us. This Privacy Policy is intended to demonstrate Happy Valley’s commitment to privacy so that visitors and users of the Happy Valley Website, and customers using the Happy Valley Genetics Pheno Hunter App, understand how data is collected and used by Happy Valley and their choices with respect to the collection and use of such data.

Happy Valley respects your privacy and information you provide to Happy Valley will only be used as described in this Privacy Policy or otherwise with your consent. Please read our Privacy Policy carefully.

By accessing or using the Happy Valley Genetics Website or the Happy Valley Genetics Pheno Hunter App, and providing user information through the Happy Valley Genetics Website or Happy Valley Genetics Pheno Hunter App, you agree to the terms of this Privacy Policy. If you do not agree with this Privacy Policy, please do not access, use, or authorize another on your behalf to use, the Happy Valley Website or Happy Valley Genetics Pheno Hunter App. Questions and concerns regarding our Privacy Policy should be directed to support at happyvalleygenetics dot com.

INFORMATION COLLECTION AND USE

1. Data Collected

Data collected from visitors and users of the Happy Valley Genetics Website and customers using Happy Valley Pheno Hunter App, by or on behalf of Happy Valley Genetics includes:

Log Data. Log Data is collected from your browser and may include information such as your computer’s Internet Protocol (“IP”) address, browser version, information about your use of the Happy Valley Genetics Website and Happy Valley Pheno Hunter App, pages of our site you visit, time and date of your visit, navigation paths, the time spent on such pages, details about the number of times you use our Website, other technology on the devices you use to access the Happy Valley Website and other statistics.

Cookies. Cookies are files with small amounts of data sent to your browser from the website you visit and are stored on your device hard drive. You informed when a cookie is being sent to your device and you have the option to either accept or refuse cookies. If you choose not to accept our cookies, you may not be able to access some portions of the Happy Valley Website.

Customer Data. Customer Data includes but may not be limited to data relating to the Happy Valley ordering process using the Happy Valley Website or data relating to the use of the Happy Valley Apps. Data collected may include your name, email address, phone number, contact details, purchase details, medical marijuana card details and product evaluations and product evaluations.

2. How Data is Used

Happy Valley Genetics uses data collected for the following purposes:
Log Data is used by Happy Valley Genetics to analyze the use of the Happy Valley Website by visitors, users and customers, and to operate, administer and protect the Happy Valley Genetics business, the Happy Valley Genetics Website and Happy Valley Genetics Pheno Hunter App.

Happy Valley uses Cookies to collect, store and track information to improve the products and services provided by Happy Valley including the Happy Valley Genetics Website.

Customer Data is used to process your Happy Valley Genetics orders, to provide records of purchases and manage each customer’s account. This information is not shared with third parties except as described below in Section 3–Non-Disclosure of Data, unless specifically stated otherwise or in special circumstances.

Happy Valley Genetics also uses data collected for Happy Valley Genetics promotions targeted for its customers.

3. Non Disclosure of Data

Happy Valley Genetics does not use or share data collected from visitors, users or customers using the Happy Valley Genetics Website or Happy Valley Rewards App, except as set forth in this Privacy Policy.

Happy Valley Genetics may employ third party providers and subcontractors to do to the following on behalf of Happy Valley:

• Maintain, administer and secure the Happy Valley Genetics Website, Happy Valley Apps and data collected and stored;
• Process on-line ordering by Happy Valley Genetics customers; and
• Analyze and improve the Happy Valley Genetics Website, Happy Valley Apps and business offerings.

These third party providers and subcontractors may have access to data provided to Happy Valley by visitors, users and customers using the Happy Valley Website and Happy Valley Apps but Happy Valley uses diligent efforts to restrict use of this data by these third parties to the purpose of providing the specific services for which they have been contacted on behalf of Happy Valley.

Additionally, data provided to Happy Valley Genetics by visitors, users and customers using the Happy Valley Genetics Website and Happy Valley Genetics Apps may be shared among subsidiaries and affiliates of HVV Genetics, LLC.

Happy Valley Genetics does not use or share data provided to Happy Valley Genetics by visitors, users and customers using the Happy Valley Genetics Website and Happy Valley Genetics Apps in ways unrelated to the ones described above without providing the visitor, user or customer with the opportunity to opt out or reject such unrelated uses.

Notwithstanding the above described policies regarding the non-disclosure of data, Happy Valley Genetics expressly reserves the right to disclose data provided to Happy Valley Genetics by visitors, users and customers using the Happy Valley Website and Happy Valley Apps, for any reason if, in the sole discretion of Happy Valley Genetics, Happy Valley Genetics believes that it is reasonable to do so, including without limitation, upon the request of law enforcement (with or without a subpoena), to satisfy laws, such as the Electronic Communications Privacy Act and the Child Online Privacy Act, for the enforcement of contracts or user policies by Happy Valley or to otherwise protect Happy Valley as it may deem to be reasonably prudent or necessary.

How Data is Stored

Happy Valley Genetics values your patronage, your visits to the Happy ValleyGenetics Website and your use of the Happy Valley Pheno Hunter App. Happy Valley Genetics has taken, and has in place, organizational, technical and other security measures reasonably intended to protect data collected from visitors, users or customers using the Happy Valley Genetics Website or Happy Valley Genetics Pheno Hunter App. While no method of transmission over the internet, or method of electronic storage is 100% secure and reliable, Happy Valley Genetics makes diligent efforts and uses commercial acceptable means to protect data collected.

Happy Valley Genetics strives to protect data collected from visitors, users or customers using the Happy Valley Genetics Website or Happy Valley Genetics Pheno Hunter App and we also encourage all such visitors, users and customers to take reasonable steps to keep their own data secure. Specifically, log in information and passwords should be protected and not disclosed to anyone else. Sensitive, personally identifiable information should not be posted, uploaded, provided, or stored using the Happy Valley Genetics Website or Happy Valley Pheno Hunter App. Happy Valley Genetics is not responsible for any use of data if you treat your sensitive, personally identifiable information in this manner, or for the use or distribution of any of such information or data stored if it is obtained through the use of your log in information or password by a third person.

Third Party Sites

The Happy Valley Genetics Website and Happy Valley Genetics Pheno Hunter App may contain links to other websites. If you click on a third party link, you will be directed to that site. Note that these external sites are not operated by Happy Valley. Therefore, Happy Valley Genetics strongly advises you to review the privacy policies for sites accessible through these links. Happy Valley Genetics has no control over, and assumes no responsibility for the content, privacy policies or practices of any third party sites or services.

How to Correct or Delete Data

If data you have provided to Happy Valley Genetics changes, or if you no longer wish to use the Happy Valley Website or Happy Valley Genetics Apps, you may update, correct or request deletion of such information by emailing support at happyvalleygenetics dot com. Happy Valley Genetics will use reasonable efforts to delete your data from our systems to the extent possible.

Modifications; Limitation of Liability

Happy Valley Genetics reserves the right to modify this Privacy Policy at any time. Happy Valley Genetics will provide you with notice of material changes to this Privacy Policy by posting a notice on the Happy Valley Genetics Website home page and/or Happy Valley App screen. All modifications to this Privacy Policy will be binding on visitors, users or customers using the Happy Valley Website or Happy Valley Genetics Apps immediately.

The Happy Valley Genetics Website and Happy Valley Genetics Pheno Hunter are not intended for use by persons under the age of 21. If it is discovered that a person under the age of 21 is accessing the Happy Valley Genetics Website or using a Happy Valley Genetics Pheno Hunter App, please contact us at the email address provided above so that Happy Valley may take necessary and appropriate action.

USE OF THE HAPPY VALLEY GENETICS WEBSITE AND HAPPY VALLEY PHENO HUNTER APP IS AT YOUR SOLE RISK AND HAPPY VALLEY DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, IN CONNECTION WITH THE USE OF THE HAPPY VALLEY WEBSITE AND HAPPY VALLEY PHENO HUNTER APP. HAPPY VALLEY SHALL NOT BE RESPONSIBLE FOR ANY DAMAGES OF ANY NATURE WHATSOEVER RESULTING FROM THE USE OF THE HAPPY VALLEY GENETICS WEBSITE OR HAPPY VALLEY PHENO HUNTER APP.