THIKURA App Privacy Policy
About Us
Thikura Beauty Supply operates https://thikura.us. This policy explains how personal information is handled when you browse our website, make a purchase, create an account, or contact us.
For privacy questions, contact [email protected] or use our store contact page.
Information We Collect
When you place an order, we collect information needed to process it, including your name, email address, telephone number, billing and shipping addresses, and order details.
When you create an account or contact us, we collect the information you provide, including account details and messages.
If you choose the website's Google sign-in, we receive the name, email address and available profile picture returned for that sign-in. The website can save that profile picture as your account avatar. This optional website sign-in is separate from native app email/password sign-in and from on-device photo search.
Our website and its service providers may also collect technical information, such as your IP address, browser type, device information, and website activity, to operate the website and help detect errors, fraud, and spam.
How We Use Information
We use personal information to process orders and payments, arrange shipping, provide order updates, manage accounts, answer questions, handle returns, and maintain business records.
We also use relevant information to protect our website and customers, resolve disputes, and meet applicable legal obligations.
Payments and Service Providers
Our store uses WooCommerce. Stripe is currently enabled for store checkout. Available payment methods are shown at checkout. The selected payment provider processes information needed to complete your transaction under its own privacy policy.
Information needed to fulfill orders may be shared with shipping and delivery providers. Website, security, and communication services may also process information when providing their services to us.
Information may be disclosed when required by law or necessary to respond to lawful requests.
Website Analytics
We use Jetpack Stats, provided by Automattic, to understand website traffic and improve our website. This service processes information such as IP addresses, browser details, pages visited, referring URLs, visit times, language, and country. Where available, it may also process WordPress.com account identifiers for logged-in visitors.
We receive aggregate statistics rather than information identifying individual visitors. For more information about how Automattic handles this data, please read the Automattic Privacy Policy.
Automattic describes a 28-day retention period for raw Jetpack Stats logs containing visitor IP addresses and available WordPress.com usernames in its Stats documentation. This provider statement is distinct from confirmation that a particular deletion request has been completed.
Google Analytics and newsletters
Our website has Google Analytics 4 enabled through Google Site Kit to measure website usage. Analytics can process browser and device information, pages and interactions, and network information. Google handles data under its privacy policy. The store's browser-based pages are separate from the native app interface.
As of 22 October 2026, Google Signals is not enabled and Google Analytics ads personalization is disabled for all regions in the store's property. Our website also suppresses Google for WooCommerce advertising-conversion tags and Pinterest conversion tracking on store pages. These controls do not erase information previously received by a provider or remove the analytics used to operate and understand our store.
Newsletter forms use Mailchimp. If you choose to subscribe, the information you submit is sent for the subscription. You can unsubscribe using the link in a promotional email or contact us. Provider processing is explained in Intuit's privacy statement.
Cookies and Embedded Content
We use cookies to support website functions, including shopping carts, login sessions, and preferences. You can manage cookies through your browser settings. Blocking certain cookies may affect shopping or account features.
Embedded maps, videos, and other third-party content may collect information or set cookies when loaded. These providers handle information according to their own privacy policies.
Reviews and Comments
If you submit a review or comment, its content and your displayed name may become public. Technical information may be processed by spam-detection services.
Where Gravatar is used, a hash of your email address may be sent to that service to display a profile image. Avoid including private information in public reviews or uploading images containing sensitive location metadata.
Retention
We retain order, account, and communication records for purposes such as customer support, accounting, fraud prevention, and meeting legal obligations. Retention depends on the type of information and the reason it is held.
Financial and tax evidence for our Michigan retail business generally has a minimum four-year retention requirement. For invoice review, we count from the later of the relevant tax or return due date and actual return filing date. A longer applicable tax period, an open audit, dispute or preservation requirement can extend the necessary records' retention. Missing filing dates are not treated as an expired obligation. The relevant evidence can include the invoice reference, transaction date, items, quantities, totals, tax and necessary reconciliation or exemption details; it does not justify retaining the whole customer profile. These are legal minimums and review criteria, not a promise that every provider or backup copy is automatically erased on an anniversary. Sources: Michigan Sales Tax Act, section8, Michigan Treasury recordkeeping guidance, page5 and IRS retention exceptions.
يتطلب الإثبات المالي والضريبي لنشاطنا في Michigan عادةً أربع سنوات على الأقل. نراجع المدة من الأحدث بين استحقاق الضريبة أو الإقرار المعني وتقديمه فعليًا، مع تمديد ما يلزم عند انطباق مدة ضريبية أطول أو تدقيق أو نزاع أو حجز قانوني. تُحفظ الحقول المالية اللازمة فقط؛ لا يعني ذلك إبقاء ملف الحساب كاملًا، ولا وعدًا بمحو آلي لجميع نسخ المزوّدين والنسخ الاحتياطية عند نهاية المدة.
Your Choices and Requests
You may contact us to request access to, correction of, or deletion of your personal information. Available rights depend on applicable law. We may need to verify your identity, and some records may need to be retained for legal or legitimate business purposes.
You can request that we stop sending promotional emails by contacting us.
International Processing
Service providers may process information in the United States, Canada, or other countries where they operate. Privacy laws in those countries may differ from those where you live.
Changes to This Policy
We may update this policy to reflect changes to our website, services, or practices. Updates will be posted on this page.
THIKURA native apps: iOS 1.1 and Android 4.0
These details cover the current native THIKURA apps connected to thikura.us. Older app versions may work differently. Updated 22 October 2026.
Shopping, accounts and checkout
The apps send product identifiers, searches, filters, bag quantities and session information to the store to retrieve products, availability, prices and requested account information. Content and image delivery services receive network requests, including technical information such as an IP address and app version. The store can estimate a general location from an IP address for shopping and delivery calculations; the native apps do not request the device's precise location.
When you sign in, your account credentials are transmitted over HTTPS to authenticate your store account. The native apps do not save your password. An account session token is stored securely on the device. Account views can retrieve your name, email, orders, addresses and recorded shipment tracking information. Account creation and password recovery use the store website. Native app sign-in and the website's browser session are separate.
Checkout opens the store's hosted checkout. WooCommerce and the available payment provider process billing, delivery and payment information needed for your purchase. Stripe is currently enabled. The native apps do not collect or store full payment-card numbers. A temporary checkout receipt is used to retrieve payment status. Website cookies, analytics and provider practices described above also apply when you use hosted checkout or other store pages.
Barcode, label and photo search
Camera access is requested when you choose a camera feature. Barcode frames are processed on the device; the selected barcode is sent to the store when you request a lookup. Manual entry is available when scanning is unsupported or permission is denied.
For label/photo search, you choose a photo with the system picker or take one with the camera. The app processes the image on your device to read label text and calculate basic packaging measurements: an image hash, color distribution, brightness grid and aspect ratio. Before searching, review the recognized text and confirm that it may be sent. Your search sends that text and the calculated measurements to THIKURA; it does not upload the original photo, camera frames or photo location metadata. Do not select images containing private information. Results can be approximate and do not guarantee identification of the product or shade.
The apps do not request access to your entire photo library, contacts, messages, precise location or microphone. A camera permission can be changed in device settings. The website's own tools and embedded third-party content may behave differently; review their notices before using them.
Information on your device
Favorites and preferences are saved on your device. Looking up a favorite sends its product identifier to the store. iOS stores account and bag session information in Keychain; account tokens are restricted to that device. Android uses encrypted app storage and excludes app data from Android backup. These Android backup settings do not describe iOS. Clearing local preferences or uninstalling does not delete your store account or transaction records.
The reviewed native app source contains no advertising, analytics or crash-reporting SDK. This does not mean that no information is collected: the store, its hosted pages, image services and payment providers process information as explained in this policy.
Account deletion
Your account remains until you ask for its deletion. In the signed-in app, open Account and choose Delete account, then confirm the request. This records an authenticated request with a reference; the receipt is not a confirmation of completed deletion. If you cannot sign in, use the account and data deletion page.
Requests are handled by thikra Yalda at [email protected]. We verify ownership, complete deletion of the store account within 45 days of receipt and notify you of the result and the status of associated-data requests. Verification does not restart that period. Where specific records must be retained for a legal or transaction-related reason, we will explain the affected information, reason and applicable retention period. Retaining an invoice does not mean retaining the whole customer account.
Provider processing can take additional time. Google's GA4 user-deletion guidance describes up to 24 hours to hide a user from exploration views and up to 63 days to finish permanent erasure. A provider's receipt is not a confirmation that this process has finished. We identify any remaining provider processing or retained exceptions in our response and do not describe pending provider erasure as complete.
Backups can contain older information. Before a restored copy is returned to active use, it must be checked against the current deletion records so deleted accounts are not reinstated. Deleting a store account is not a promise that every historical provider or backup copy is instantly erased; we explain applicable processing and retention limits.