NOBO Privacy Policy

Effective date: August 11, 2026

NOBO INC, doing business as NOBO (“NOBO,” “we,” “us,” or “our”), respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use the NOBO mobile application, our website at nobogoods.com, and related services (collectively, the “Services”).

By using the Services, you acknowledge the practices described in this policy. If you do not agree, do not use the Services.

1. Information we collect

Information you provide

We may collect information you provide directly, including your name, email address, phone number, date of birth or age-verification information, account credentials, preferred store, communications with us, and any other information you submit through the Services. If you place an order or use a payment feature, payment information is handled by the applicable payment processor; NOBO does not store full payment-card numbers unless expressly stated at the time of collection.

Information collected automatically

When you use the mobile app or website, we and our service providers may automatically collect:

• Device and app information, such as device type, operating system, app version, language, IP address, mobile network, browser type, and unique device identifiers.
• Advertising identifiers, including the Android Advertising ID (AAID), when available and permitted by your device settings.
• Usage and diagnostic information, such as pages or screens viewed, actions taken, search and interaction data, referring URLs, app performance, crash logs, and the date, time, and duration of use.
• Approximate location derived from IP address and, only with your permission, precise device location. You may withdraw location permission in your device settings. Location is used to provide nearby store, availability, and other location-based features.
• Cookies, pixels, local storage, and similar technologies on our website.

We may combine information collected through the Services with information from our affiliates, service providers, and publicly available sources, where permitted by law.

2. How we use information

We use information to:

• provide, operate, maintain, personalize, and improve the Services;
• create and manage accounts, confirm eligibility, respond to requests, and provide customer support;
• display nearby locations and location-relevant content;
• process and administer orders, loyalty benefits, offers, and transactions;
• analyze app and website use, troubleshoot errors, protect security, and prevent fraud or misuse;
• send service messages and, where permitted or with consent, marketing communications; and
• comply with legal, regulatory, recordkeeping, and enforcement obligations.

3. Third-party SDKs and service providers

The app and website use third-party services that may collect or process information on our behalf. The third-party software development kits (SDKs) and services used by NOBO include:

Service / SDK	Purpose	Information it may process
Google Maps SDK for Android / Google Maps Platform	Store maps, location search, and directions	Location data (when permission is granted), IP address, device and usage information
Google Play services	Core Android service functionality and security	Device identifiers, device and diagnostic information
Google Analytics / Google Tag Manager	Website and app usage analytics	Device, browser, IP address, identifiers, and usage data
Firebase Analytics	App usage and performance analytics	Device identifiers, app events, device and usage data
Firebase Cloud Messaging (FCM)	Push notifications	Device or app instance token, device information, and notification-delivery data
Firebase Crashlytics	Crash reporting and app stability	Crash logs, device information, app version, and diagnostic data
Dutchie 2.0	Loyalty, customer engagement, and marketing features	Account/contact information, loyalty activity, device and usage information
Dutchie	Online ordering, menu, and retail-service functionality	Account/contact information, order information, device and usage data

These providers process information under their own privacy terms and may collect information automatically when their SDKs or services are active. We do not authorize them to use NOBO customer information for their own independent marketing purposes except as described in their terms or where you separately consent.

Important accuracy note: Before publishing, remove any service from this table that is not integrated into the released app and add every SDK, payment processor, advertising network, or other data-collecting service that is integrated. This policy and the Google Play Data Safety form must match the released app exactly.

4. How we share information

We may share personal information with:

• service providers and SDK providers that help us operate the Services, including those identified above;
• payment processors, delivery or fulfillment providers, and business partners when needed to provide a requested service;
• our affiliates and entities under common control;
• professional advisers, auditors, insurers, lenders, and prospective buyers in connection with a business transaction; and
• government authorities or other parties when required by law or reasonably necessary to protect rights, safety, security, or property.

We do not sell personal information for money. We do not knowingly share personal information for third parties’ independent direct-marketing purposes without notice or consent where required by law.

5. Your choices and controls

You can manage push-notification and location permissions in your device settings. You can reset or limit use of your AAID through Android privacy or advertising settings. You may opt out of marketing emails using the unsubscribe link in the email. Disabling cookies or certain identifiers may affect Service functionality.

Subject to applicable law, you may request access to, correction of, or deletion of your personal information by contacting us at [email protected]. We may need to verify your identity before completing a request. We will not discriminate against you for exercising applicable privacy rights.

6. Data retention and security

We retain personal information only as long as reasonably necessary for the purposes described in this policy, including to meet legal, accounting, tax, regulatory, and dispute-resolution obligations. Retention periods can vary based on the information and purpose.

We use reasonable administrative, technical, and physical safeguards designed to protect information. No internet or electronic system is completely secure, and we cannot guarantee absolute security.

7. Children and age restrictions

The Services are intended only for adults who are legally permitted to access cannabis-related information and services in their jurisdiction. We do not knowingly collect personal information from anyone under 21 years of age. If you believe a person under 21 has provided us personal information, please contact us so we can investigate and delete it as appropriate.

8. Changes to this policy

We may update this policy from time to time. We will post the revised policy at this URL and update the effective date. Material changes will be communicated through the Services or by other appropriate means when required by law.

9. Contact us

For questions, privacy requests, or concerns, contact:

NOBO INC
1900 Ninth Street Suite 200
Boulder, CO 80302
Email: [email protected]