Privacy Policy

1. Information you put in your journal

You may record aliases, relationship stages, dates, manually entered places, time spent, notes, milestones, tags, personal reflection metrics, expense amounts and currencies, and reminders. The app processes these on your device to provide People, Timeline, Quick Log, Private Brief, and descriptive Insights.

Insights use local calculations, not remote AI. We do not analyze your journal on a server, infer a diagnosis, or generate a ranking of people. Reflection metrics can use a scale, Yes/No, single choice, or a whole-number slider. Stage-duration summaries describe recorded changes, not advice about a relationship. The app does not offer photo selection or attachment import.

The optional Sample Preview uses clearly labeled fictional information held separately in memory. It is read-only, does not add records to your journal, and saves nothing when you exit.

2. What the app does not automatically collect

Threadline does not automatically upload journal content to the developer. It has no login, account database, advertising SDK, third-party behavioral analytics, attribution, session replay, or third-party crash-reporting SDK.

The app does not read your contacts, obtain your location, record your microphone, use your camera, or track your activity across other companies' apps and websites. Apple may separately provide App Store or system-level analytics and crash information according to your Apple settings and Apple's privacy policy; this is not a Threadline journal-upload service.

3. On-device storage and security

Journal information is stored in the app's sandbox using iOS data protection. Sensitive private text, including notes and Private Brief text, is encrypted on device using AES-GCM. The encryption key is stored in the device's Keychain with a device-only accessibility setting. Searchable fields, such as aliases, are not separately encrypted at the application layer.

App Lock is optional and off unless you choose to enable it. When enabled, it uses Face ID or Touch ID without an in-app device-passcode fallback and locks the journal when the app enters the background. When App Lock is off, the iOS App Switcher preview may show the current screen; Threadline does not add a separate privacy cover. From an already unlocked app session, sensitive actions such as creating a backup, readable export, or erasing data may separately require device-owner authentication, including a device passcode. Threadline receives the authentication result, not your biometric template or passcode.

App Lock and encryption are separate safeguards, not a guarantee of absolute security. They do not protect content you copy, screenshot, export, or disclose, and they cannot prevent access by someone authorized to unlock your device and app. Keep your device and any external copies secure.

4. Permissions and local reminders

Threadline may request Face ID access when you enable App Lock and notification permission when you choose to schedule a reminder or enable notifications. If access has been denied, the app provides a path to iOS Settings rather than repeatedly requesting permission. A reminder may remain saved in the app without a scheduled notification when permission is unavailable; the app shows that state.

Reminders are scheduled locally on your device, not delivered by a developer-operated push service. Default notification text is generic and does not include an alias or private note. Consider your lock-screen notification settings if other people can see your device.

The app does not request contacts, location, tracking, camera, microphone, calendar, or photo-library access.

5. Purchases through Apple

Apple processes optional Pro purchases through the App Store. StoreKit transaction and subscription status are checked on your device to determine feature access. The developer does not receive your payment-card details through Threadline or combine purchase status with a server copy of your journal.

Apple handles purchase, account, payment, and related information under its own terms and privacy policy. Apple may make transaction and sales information available to developers as part of operating the App Store. Restoring a purchase restores eligible feature access, not journal content.

6. Exports, external copies, and data loss

You can export readable JSON or a package of CSV tables. These exports contain sensitive information in plain text. They are not encrypted by Threadline and are no longer protected by App Lock after leaving the app's sandbox.

If you choose iCloud Drive or another file provider in the system file picker, that provider may store or sync your exported file under its own policies. This is a user-directed export, not automatic journal sync by Threadline.

A separate encrypted-backup feature creates a .threadlinebackup file protected with a password you choose. We do not receive or store that password and cannot reset or recover it. Save the file outside the app and keep its password separately. Verify the saved file before deleting the app, erasing or replacing a device, or undertaking major troubleshooting.

Restoring requires a usable encrypted backup and its password. After validation and a preview, restore replaces, rather than merges with, the destination journal. It does not import App Lock preferences, appearance settings, or App Store purchase access. Reminders can be rescheduled only when notification permission and future reminder dates allow. Readable JSON and CSV exports cannot be imported as a journal.

After a successful restore, protected copies of earlier journals and their local keys may remain on the device for recovery. Erase All Data removes these on-device recovery copies too. Without a usable encrypted backup and its password, losing the app's storage or device-only key may permanently remove access to journal content. We cannot recover a journal from a server. Do not rely on an ordinary device backup as a substitute for a verified Threadline encrypted backup.

7. Support email and this website

If you email captainlongevity@gmail.com, we receive your email address, message, and any attachments you intentionally send. We use this information to respond, investigate issues, protect against abuse, and meet legal obligations. Send only what is necessary and redact private details. There is no automatic support upload or journal attachment.

Threadline does not include an in-app support-diagnostics export. If you contact support, you may choose to include your app version, iOS version, or a screenshot after removing private details. Nothing is attached or sent from your journal automatically; any information you choose to email is handled as support correspondence under this policy.

Support email is handled through Gmail, provided by Google. Google processes email and associated technical information under its privacy policy.

These static support and legal pages are hosted by Vercel. When you visit, Vercel may process technical request information such as your IP address, browser or device details, requested URL, and access time to deliver and secure the website. See Vercel's privacy notice.

We have not added advertising, analytics scripts, tracking pixels, web forms, or optional tracking cookies to these pages. Hosting providers may use technical mechanisms necessary to operate and protect their services. Do not put private journal information into website URLs.

8. Sharing and international processing

We do not sell or rent your journal content or use it for targeted advertising. Information you voluntarily send to support, or technical information associated with website visits, may be processed by the providers described above for those services. We may disclose information we actually hold when required by law or necessary to protect legal rights and prevent abuse.

Journal processing occurs on your device. Support email and website access information may be processed in countries other than your own, through Google and Vercel's international infrastructure. Their linked privacy notices describe their processing locations and transfer safeguards. External services you choose for exports have their own policies.

9. Retention and deletion

Your current journal remains on your device until you delete it or lose access to the app's local storage. You can delete individual records, a person and associated records, or all journal data using Settings > Data & Backup > Erase All Data. Individual deletions affect the current journal; protected earlier-journal copies retained after restore may still contain earlier information. Erase All Data removes those on-device recovery copies and their local keys as well. Treat deletion as irreversible; secure physical erasure of flash storage cannot be guaranteed.

We retain support correspondence only for as long as reasonably necessary to resolve the request, maintain relevant support records, prevent abuse, or meet legal obligations. Retention depends on the issue and applicable requirements; you may request deletion by email. Service providers may retain limited backups or security records under their own retention policies.

We cannot delete copies you have exported to another location. Delete those separately, including any synced copies or provider backups where available. Deleting local app data does not erase Apple's purchase history or cancel a subscription.

10. Your choices and privacy rights

You control the information entered into Threadline, permission settings, App Lock, exports, and local deletion. Use aliases and avoid recording unnecessary identifiers or information you are not entitled to keep.

Depending on your location, you may have rights to access, correct, delete, obtain a copy of, restrict, or object to processing of personal information we hold, and to complain to a data-protection authority. Contact us to exercise applicable rights concerning support information. We may need proportionate information to verify a request; do not send your journal or identity documents unless specifically necessary and agreed.

Because we do not possess your on-device journal, we cannot remotely access, edit, export, or delete it for you. Use the app's controls for that information.

11. Children

Threadline is not designed for children. Users must meet the age requirements applicable to them and to the app's App Store availability. We do not knowingly solicit children's personal information through support. If you believe a child has sent us personal information, contact us so we can address the request and delete information where appropriate.

12. Changes and contact

We may update this policy to reflect app changes, provider changes, or legal requirements. The date above identifies the current version. Material changes to in-app data handling will also be explained through an appropriate in-app notice or release information when applicable.

For privacy questions or requests, email captainlongevity@gmail.com. Visit Threadline Support for help with exports, deletion, and purchases.