Thalia by Dzifa

Privacy policy

Effective date: October 30, 2026

This policy explains how Thalia by Dzifa (“Thalia,” “we,” or “our”) handles information when you use the Thalia hair-care app. It covers information entered into the app and information handled by the services that support sign-in, cloud sync, and photo storage.

Information you provide

Depending on how you use Thalia, information may include:

• Account identifiers, such as your email address and, if provided by your sign-in account, phone number.
• Profile details you enter, including your name, age, location, hair texture, density, porosity, and preferences.
• Your routines, calendar and reminder choices, completed practices, goals, product lists and reviews, and Hair Diary entries.
• Progress photos you choose to upload. The app converts uploaded photos to WebP and resizes them before storing them.

Hair and scalp notes may contain sensitive personal information. Please only enter details and upload photos you are comfortable storing in the app.

How information is stored

• On your device: The app uses browser local storage for app data and session storage for temporary sign-in information. Routine and diary data stored locally stays on that browser/device until you clear its site data.
• Cloud data: When you sign in, the app uses an authenticated Thalia API hosted on Amazon Web Services (AWS) to restore and save supported account data.
• Progress photos: Photos you upload are stored in a private AWS S3 bucket and accessed using your signed-in account. Photo uploads are optional.
• Offline app files: Thalia uses a service worker to cache app files so the app can load reliably. This cache is separate from your account data.

Sign out ends your current app session; it does not by itself delete information already saved on your device or in the cloud.

How we use information

We use information to provide your hair-care features, keep your data available across signed-in sessions, manage your account and protect access to your private data, and respond to privacy or support requests. We do not use your hair-care entries or photos for advertising.

Service providers and external links

We rely on AWS services for account authentication, cloud data access, and private photo storage. AWS processes information as needed to provide those services. The app also loads typefaces from Google Fonts; your browser contacts Google to retrieve those font files. These services may process technical connection information such as your IP address.

Thalia may link to third-party websites, including product retailers. Those websites have their own privacy practices, and this policy does not cover information you provide directly to them.

Notifications

If you enable browser notifications, your browser will ask for permission. Notification permission and reminder preferences are managed by your browser/device; you can revoke permission in its settings. Thalia does not send push notifications from a separate notification service.

Retention and your choices

• You can clear Thalia’s local data and cached files through your browser’s site-data settings. This may remove information stored only on that device.
• You can manage or revoke notification permission in your browser/device settings.
• For a request to access, correct, or delete cloud account data, contact us at legacyhealthandbeauty@gmail.com from the email associated with your account. We may need to verify your request. Cloud data is retained while needed to operate the service and until an appropriate deletion request is processed.

Deleting local browser data does not delete cloud data, and signing out does not delete either. Please contact us if you need help with account data or uploaded photos.

Security and location

We use sign-in controls and private cloud storage to protect account data and photos. No internet transmission or storage method can be guaranteed completely secure. AWS services used for cloud and photo operations are configured in the eu-west-1 region; service providers may process information in other locations as required to provide their services.

Children’s privacy

Thalia is not designed for children under 13, and we do not knowingly seek personal information from children under 13. If you believe a child has provided information to Thalia, contact us so we can review the request.

Changes and contact

We may update this policy as the app changes. The effective date above indicates when this version took effect. Questions or privacy requests can be sent to legacyhealthandbeauty@gmail.com.