Privacy Policy

Dahlia Wellness Sanctuary built Dahlia to be private by design. We never show ads and never sell your data.

Who is responsible

Dahlia Wellness Sanctuary is the data controller for personal data processed through Dahlia, which means we decide how and why it is used and are responsible for protecting it.

What we collect and why

• Account data (name, email, password, age band — never your exact birthday): to create and secure your account and apply age-appropriate safeguards. Legal basis: contract.
• Wellness records (periods, symptoms, moods, journal entries, pregnancy due date, reminders, settings, profile photo): to provide the features you use. Legal basis: contract and your explicit consent for health-related data, which you can withdraw by deleting records.
• Support messages: to answer your questions. Legal basis: legitimate interests.
• Technical data (IP address, device and browser information, usage logs): for security, fraud prevention and fixing problems. Legal basis: legitimate interests.
• Subscription status (package, status, renewal date — never card details): to give you the right access. Legal basis: contract and legal obligation.

Who we share it with

• Paddle, our Merchant of Record, for selling the product, subscription management, payments, tax compliance and invoicing.
• Service providers who host our app and database, and send emails, only as needed to run Dahlia.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law.

International transfers

Our providers may process data outside your country. Where they do, we rely on appropriate safeguards such as standard contractual clauses.

How long we keep it

We keep your data while your account is active. When you delete records or your account, they are deleted promptly from the app; backups roll off within 30 days. Billing records may be kept by Paddle and us as long as tax law requires. Data no longer needed is deleted or anonymised.

Security

We use encryption in transit, per-account access controls so only you can see your records, private photo storage and limited staff access.

Your rights

Depending on where you live (including under POPIA and GDPR), you can access, correct, delete, restrict or object to use of your data, receive it in a portable format, and withdraw consent. Use Settings to export or delete your data, or email us; we respond within one month. You may also complain to your data protection authority.

Cookies

We use only essential browser storage to keep you signed in and remember your settings. We do not use advertising cookies.

Contact

For privacy questions or requests, contact Dahlia Wellness Sanctuary at hello@dahliawellnesssanctuary.com. For billing or account questions, email billing@dahliawellnesssanctuary.com.