Dris Rewards — Privacy Policy

Applies to the Dris Rewards app for Android (com.drisbrands.rewards). Last updated 27 September 2026.

Dris Rewards is a rewards and account app. It has no product catalog, no cart and no checkout, and it cannot be used to arrange a purchase. It shows your points, your place in line, your verified age status, and a receipt-style record of purchases you have already made.

Who we are

Dris Corporation, Boston, Massachusetts. For anything in this policy, email [email protected]. The app is for adults 21 and older; we do not knowingly collect information from anyone under 21.

What we collect, and why

• Account details — your name, phone number and email address, so we can identify your account, text you a sign-in code, and hold your place in line.
• Date of birth and a photo of a government ID — to verify you are 21 or older. Massachusetts cannabis regulations require a licensee to be able to show that an age check happened.
• Purchase history — what you have already bought from Dris, so the app can show it back to you and so you can review a product. It comes from our retail system; the app does not create purchases.
• Delivery address — where we deliver to you, saved on your account so our drivers know where to go. It is the address you set in the app on iPhone, or the one from your most recent delivery order, whichever is newer. It is deleted with your account, though each delivery record keeps the address that delivery went to.
• Device and diagnostic information — app version, device type, a push-notification token, crash reports and anonymous usage counts, so we can find and fix problems. These go to servers we run ourselves, not to a third-party analytics company.
• A per-install ID — a random ID the app creates once, when it is installed, and stores securely on your device. The app sends it to us when you sign up and when you turn on notifications. We keep only a one-way hash of it, never the ID itself, and use it to prevent fraud and referral abuse (for example, one phone signing up many "friends") and to run the app's referral program. It is deleted with your account.
• Support messages — if you write to us in the app, we keep the conversation with the name and phone on your account so we can reply.
• Contacts you choose to invite — only the specific people you pick in the invite screen, and only to send that invitation and credit your referral. We do not upload your address book.

What other people can see

The leaderboard shows other members your first name and last initial and your points — never your full name, phone number or email. Reviews you write are shown to other members the same way. You can hide another member's reviews by blocking them, or report a review for our team to look at.

Notifications

We send notifications about your order status, your rank, and rewards you have earned. You can turn categories off in the app, or all of them off in your device settings. Rank notifications are rate-limited so they cannot arrive repeatedly.

On iPhone, a delivery on its way can also show on your lock screen. For that, the app gives us a token for that one delivery, and we forget it when the delivery ends. You can turn this off in Settings, under Dris, Live Activities.

Who else handles your information

We do not sell your personal information. We share it only with providers who process it for us under confidentiality obligations: Sweed (customer accounts and purchase records), Google Firebase (support chat and push delivery), Expo (push notifications), Apple (lock-screen delivery updates on iPhone), Blackleaf (verification and delivery text messages), and CARTO / OpenStreetMap (map tiles). We may also disclose information where the law requires it, including requests from the Massachusetts Cannabis Control Commission.

Your choices

• Turn notification permissions off at any time in your device settings.
• Reply STOP to any text message to stop texts.
• Block or report content posted by other members, from inside the app.
• Delete your account in the app, or at drismobileapp.drisbrands.com/delete-account.

Access, correction and deletion

To request a copy of your personal information, a correction, or deletion of your account and data, email [email protected]. We respond within 30 days. Some records are kept even after an account is deleted: the record that an age check took place, and records of deliveries we made — what was delivered, the name, phone number and address on the order, when, and the signature collected. As a licensed Massachusetts cannabis retailer we keep delivery records permanently; once the account is gone they are no longer connected to it. We will tell you if this applies to your request. The ID image itself is deleted once verification is complete.

Changes

If we change this policy we will update the date at the top. Material changes will also be announced in the app.