TREEHOUSE PHARMACY
Privacy Policy
Last updated October 8, 2026
- We use your information to run your rewards, order-ahead pickups and the notifications you choose.
- We never sell your information, and we don’t use third-party advertising trackers.
- Deals & news notifications are off unless you turn them on, and you can turn them off anytime.
- Your app account only connects to your store record with a code from our staff, in person.
Who we are
Treehouse Pharmacy is a licensed medical marijuana dispensary at 1801 N Union St, Ponca City, OK 74601, (580) 716-6720. This policy covers our website (treehousepharmacy.com), the My Treehouse app, the My Points lookup, and the menus on our in-store screens.
Information we collect
Your store record
When you shop with us, our point-of-sale system (GrowFlow) keeps the information Oklahoma law requires and that we need to serve you, such as your name, birth date, patient status and medical license details, contact details you give us, your purchases and your rewards points.
Signing in to the app
Sign-in is handled by our sign-in provider, Auth0 (by Okta). If you create an account with an email address and password, Auth0 keeps them; we never see your password. If you choose “Continue with Google,” Google shares your name, email address and profile picture with Auth0. The app itself receives only a sign-in identifier and your email address, and does not store your email.
Your app account
- An account identifier and secure sign-in sessions (each lasts up to 7 days).
- The link to your store record, made only with a one-time code from our staff after they check your ID in person.
- For order-ahead pickups: the items, order number and status. The medical license number you enter is sent to our point-of-sale system to place the order. It is saved only if you tick “Remember my license number,” and then it is encrypted and shown back to you only as its last four characters.
- If you turn on notifications: a technical address your browser gives us for delivering them to your device, the notifications you chose, when you turned Deals & news on or off, and whether you opened a notification we sent.
- Visit ratings and any message you send to a manager, and any welcome-gift code you were given.
Our website
We note how people find us (for example, which of our QR codes was scanned) without advertising trackers, and we skip this when your browser asks not to be tracked. Our website loads fonts from Google and page styling from a public library, and our hosting and security provider, Cloudflare, may use security cookies. The My Points lookup sends the name and ID ending you enter to check your balance; they are not saved.
How we use it
- To show your points and rewards, take order-ahead pickups and tell you when an order is ready.
- To send Deals & news notifications, only if you turn them on: no more than two a week, between 9 am and 8 pm, worded discreetly for your lock screen. This includes birthday and welcome offers.
- To choose offers people will find useful. For this we use a separate customer system that keeps an internal customer number, customer type (medical or recreational), visit and purchase dates and amounts, the products, categories and brands bought, points, and birth month and day. It does not store names, phone numbers, email addresses, birth years or license numbers.
- To answer a manager follow-up you ask for, keep our services secure, and meet our legal obligations.
Who we share it with
We do not sell your information or share it for anyone else’s marketing. We use these service providers only to run our services: Cloudflare (website hosting and security), Auth0 by Okta (sign-in), GrowFlow (point of sale and rewards), Google (only if you use Google sign-in), and Apple, Google and Mozilla’s notification services, which deliver notifications to your device. We may also share information when the law requires it, for example with the Oklahoma Medical Marijuana Authority.
How long we keep it
- Purchase details in our offers system: 2 years.
- Customers who haven’t visited in 3 years are removed from our offers system.
- App sign-in sessions: up to 7 days. How you found our website: 180 days.
- Your app account: until you remove it or ask us to delete it.
- Store records: as long as Oklahoma law requires.
Your choices
- Turn Deals & news or order notifications off anytime in the app (Account → Notifications) or in your device settings.
- Remove your rewards connection in the app (Account). This signs you out on every device and deletes any saved license number.
- Ask us to delete your app account and your information in our offers system, or ask what we hold about you, by calling (580) 716-6720 or visiting the store. Store records the law requires us to keep are kept.
Security
Information travels encrypted between your device and our services, saved license numbers are encrypted, and only authorized staff can use our customer tools.
Who our services are for
Our products and services are for registered medical marijuana patients and are not directed to minors.
Changes and contact
If we change this policy, we will update the date above. Questions? Call (580) 716-6720 or visit us at 1801 N Union St, Ponca City, OK 74601.