Privacy Policy
Threadlets is made by Design Werks ("we", "us"). This policy explains what happens to your information when you use the Threadlets app for iPhone and the Threadlets web services that support it.
The short version
- Your notes, tasks, events and saved links are stored on your device and, if you use iCloud Sync, in your own private iCloud database. We can't read them.
- We don't show ads, sell your information, track you across apps or websites, or use analytics or crash-reporting services.
- Some features are optional and send information to our servers: a Threadlets account, share links, collaboration, the capture inbox for Muse, and the connected AI service. Each is described below, including what we keep and for how long.
Your library: on your device and in your iCloud
Threadlets stores your library (notes, tasks, events, saved links, attachments and settings) on your iPhone. If you're signed in to iCloud, Threadlets turns on iCloud Sync during setup and keeps a copy in the private database of your iCloud account, so your library appears on your other devices. This data is stored by Apple under Apple's privacy policy. It belongs to your Apple Account, and we have no access to it. You can turn iCloud Sync off in Settings › iCloud Sync.
Links you share to Threadlets from other apps are saved to your library the same way. If you use Threadlets on your Mac, it reads pages you saved through your Mac and your own browser, and it communicates with the iPhone app through your iCloud. Nothing passes through our servers.
Apple features Threadlets uses
- Apple Intelligence. When it's available on your iPhone, Threadlets uses Apple's on-device model to help plan your day, suggest tags and projects, find things in your library and tidy link titles. This runs on your device.
- Dictation in Ask. If you dictate a question, Threadlets uses Apple's speech recognition. Apple may process the audio on its servers to turn it into text. Threadlets doesn't store the recording.
- Maps. If you allow location access, Threadlets uses your approximate location while the app is open, together with Apple Maps, to estimate travel time to events that have a place. Your location isn't stored or sent to us.
- Calendar, Photos and notifications. With your permission, Threadlets adds your events to Calendar and can show your other calendar events in Today and Upcoming. It lets you add photos to notes and saves gallery artwork to Photos. It also schedules reminders on your device. Calendar information is sent elsewhere only if you use the connected AI service, as described below.
Optional features that use our servers
The features below are off until you choose to use them. Our servers run on Cloudflare, which processes requests on our behalf, including your IP address as part of delivering them.
Threadlets account
A Threadlets account is needed for share links, collaboration and the capture inbox. You sign in with a link we email you, so we store your email address and your sign-in sessions, including the IP address and device type they came from. Sessions last up to 30 days. Sign-in emails are sent through our email provider, Resend. To limit abuse, we briefly keep a hashed record of sign-in attempts, and we delete it after one day. You don't need an account to use Threadlets or iCloud Sync.
Share links
When you share a page as a link, we store a copy of that page's content, its source link and the display name you share it under, so anyone with the link can view it. Shared pages ask search engines not to list them. They expire after 30 days unless you choose a different length, and you can stop sharing at any time, which deletes the copy. If a viewer reports a shared page, we receive their report and any contact details they choose to include.
Collaboration
When you invite people to collaborate on a page, we store the page's text, the names and email addresses of the people on it, and a history of recent changes. Invitations are emailed through Resend. Everyone you invite can see the page and its members.
Capture inbox for Muse
If you connect Muse, Meta's assistant, it can send links and notes into your library through our capture inbox. Each capture is held until your iPhone picks it up, then cleared, or deleted after 14 days if it's never picked up. We keep basic records of each delivery, without its content, for 90 days. To let your iPhone know a capture is waiting, we store your device's push notification token and send it a silent notification through Apple. If you separately turn on task and note control for Muse, Muse can search and read the items it asks for, and those items pass through our servers to Muse. Replies are kept for at most 24 hours. What Muse does with information is governed by Meta's terms and privacy policy.
Connected AI service
Threadlets can connect to a hosted AI service for Ask and for help planning and filing. During testing this is available only to people we give a private access code. When it's connected, the information needed to answer each request is sent through our server to the AI provider you choose: Meta (Muse), xAI (Grok) or OpenAI. That can include:
- your question and recent conversation;
- the notes, tasks and pages the request needs, and attachments you add;
- your time zone;
- for planning your day, your task titles and the titles and times of your calendar events;
- for filing a saved link, the page's text along with your tag and project names.
Our server keeps requests and results for about one hour so they can be delivered to your device, then deletes them. We keep usage counts and costs per device without the content of your requests. Each provider handles what it receives under its own terms and privacy policy. Disconnecting in Settings stops all of this.
Links and images in your notes
When you add a link, Threadlets may fetch the page's title, or YouTube and X preview details, directly from that site. It also loads images, videos and data you've linked in your notes. Those sites receive your request, including your IP address, under their own policies.
Your choices and deleting your information
- Items in your library: delete them in the app. Deleted items stay in Trash for 30 days, or until you empty Trash, and the deletion syncs to your iCloud.
- Everything on a device: delete the app. Your iCloud copy remains in your iCloud account, and you can manage it in your iPhone's iCloud settings.
- Share links: open Shares in the side menu and stop sharing a page to delete our copy.
- Your account: delete it in Settings. This deletes your account, sessions, capture inbox and share links, along with the collaborative pages you started and your place on pages you joined. Edits you made to someone else's page stay in that page's history without your name. Your library on your devices and in iCloud isn't affected.
- Connected AI and Muse: disconnect them in Settings at any time.
To ask what information we hold about you, or to have it corrected or deleted, email support@threadlets.com. We'll respond within 30 days. Depending on where you live, you may have additional rights under local law, and we'll honor them.
Security
Information sent between the app and our servers is encrypted in transit. Account sessions and access codes are kept in your iPhone's Keychain. Our servers keep the minimum needed for each feature and delete it on the schedules above. Your iCloud copy is stored and protected by Apple as part of your iCloud account.
Children
Threadlets isn't directed to children under 13, and we don't knowingly collect personal information from them. If you believe a child has given us information, contact us and we'll delete it.
Changes
If we change this policy, we'll post the new version here with a new effective date. If a change significantly affects how your information is handled, we'll also tell you in the app.
Contact
Design Werks
support@threadlets.com