Privacy Policy — Thread

Last Updated: April 17, 2026 | Effective: April 17, 2026

Our core commitment: Thread is built local-first. Your calendar data and preferences live on your device. We do not operate servers that store your personal information, and we do not sell your data. Ever.

1. Who We Are

This Privacy Policy describes how Slumbering Thread Studios ("Developer," "we," "us") handles information in connection with your use of the Thread mobile and web applications (collectively, the "App"). By using Thread, you agree to the practices described in this Policy.

2. What Data Thread Handles

2.1 — Google Account Email

When you sign in with a Google account to sync your Google Calendar, Thread stores your Google account email address locally on your device using Android's encrypted DataStore. This is used solely to authenticate with Google's Calendar API on your behalf.

Stored: locally on your device only
Shared with third parties: No
Used for advertising or analytics: No

2.2 — Calendar Events

Thread reads and writes calendar events from two sources you configure:

Google Calendar — Events are fetched from Google's Calendar API using your account credentials and displayed in the app. Thread does not copy or store Google Calendar events on any server. Communication with Google's API is over HTTPS.
Device Calendar — Thread reads events from your device's built-in calendar via Android's Calendar Provider (requires READ_CALENDAR / WRITE_CALENDAR permissions).
iCal Feeds — Events from iCal URLs you add are fetched over HTTPS and cached in a local database on your device.

None of this event data is transmitted to our servers. We do not have servers that receive your calendar data.

2.3 — App Preferences

Settings such as your theme, handedness preference, default calendar, and reminder defaults are stored locally in encrypted DataStore on your device. These never leave your device.

2.4 — Task Metadata Sync (Cross-Device)

If you use Thread's task tracking, small pieces of metadata (e.g., whether an event is marked "done" or designated as a task type) are synced to Firebase Firestore to keep your devices in sync. This data is keyed by your Google user ID. Your actual calendar event details (titles, descriptions, times) are never stored in Firestore.

Local-Only Mode: You can turn on the "Local Only" toggle in settings to completely disable Firebase sync, keeping your task metadata entirely on-device.

2.5 — What We Do Not Collect

Thread contains no analytics, no crash reporting, no advertising SDKs, and no usage telemetry of any kind. We do not collect:

Location data
Contacts
Device identifiers
Usage statistics
Any data beyond what is described above

3. How Data Is Used

The data Thread handles is used for one purpose only: to show you your calendar and tasks within the app. It is not used for advertising, profiling, or any purpose other than operating the core features you use.

4. Data Sharing

We do not sell, rent, or share your data with any third party.

Recipient	What Is Shared	Why
Google (Calendar API)	Auth token, calendar read/write requests	To sync your Google Calendar — only when you sign in with Google. Google acts as a data processor on your behalf.
iCal feed hosts	HTTP request to the URL you provide	To fetch the calendar feed you explicitly added. No personal identifiers are included.
Google (Firebase Firestore)	Task status and type metadata	To synchronize task completion metadata between your devices. This can be completely disabled by turning on "Local Only" mode in settings.
Anyone else	Nothing	—

5. Security

Preferences at rest: Stored locally using Android's encrypted DataStore (on mobile) or your browser's local storage (on web).
Local database: Stored in a private app directory or browser database on your device, inaccessible to other apps.
In transit: All communication with Google's Calendar API and iCal feed URLs uses HTTPS/TLS.

6. Data Deletion

Because all data is stored locally on your device, you can delete it at any time:

In-app: Go to Settings → "Sign out & clear all data" to sign out of all Google accounts and erase all local data immediately.
Uninstall: Uninstalling the app removes all locally stored data from your device.

We do not hold your data on any server, so there is nothing for us to delete on our end. For more details see our data deletion page.

7. Children's Privacy

Thread is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 is using the app, please contact us and we will provide guidance on removing their data from the device.

8. Changes to This Policy

If we make material changes to this Policy, we will update the "Last Updated" date above and notify users within the app where feasible.

9. Contact

Questions or requests related to this Privacy Policy:

contact@slumberingthread.com

This Privacy Policy covers the Thread applications for Android and Web by Slumbering Thread Studios. Last updated April 17, 2026. | Terms of Service | Delete My Data