Legal

Privacy Policy

Effective date: March 2025

Threde is a macOS application developed by Sandymount LLC (threde@threde.ai). This policy explains what data Threde accesses, where that data goes, and what is never collected.

What Threde accesses

Threde requests read-only access to your Gmail account via Google's OAuth 2.0 authorisation flow. Specifically, it uses the gmail.readonly scope to fetch email subject lines, sender names, and body text from newsletter emails in your inbox. Threde does not access drafts, sent mail, contacts, calendar, or any data outside the Gmail API.

Where your data goes

All processing happens on your computer. Email content fetched from Gmail is passed to the Google Gemini API (a service operated by Google) to generate summaries. No email content is sent to any Threde server — there is no Threde server. The summarised briefing is stored as an HTML file on your local disk and served by a local web server running on your machine.

What is stored on your machine

• Your Gemini API key, saved in a local configuration file (config.yaml)
• A Gmail OAuth token (token.json) stored in the application directory
• Daily briefing HTML files in the application directory
• A list of processed email IDs to avoid re-summarising the same newsletter

All of these files remain on your computer. Uninstalling the application removes the application directory and all of its contents.

What Threde never does

• Transmits your email content to any server operated by Threde
• Sells, rents, or shares your data with third parties
• Collects analytics, crash reports, or usage telemetry
• Accesses email outside the read-only Gmail scope
• Reads personal messages, drafts, sent mail, or attachments

Third-party services

Threde uses two third-party APIs: the Gmail API (Google) to fetch newsletters, and the Gemini API (Google) to generate summaries. Your use of these services is subject to Google's own privacy policy at policies.google.com/privacy. Your Gemini API key is transmitted to Google's servers only when Threde makes a summarisation request — no key is ever sent to Threde or stored anywhere other than your local machine.

Data retention and deletion

Threde does not retain any of your data. To remove all Threde data from your computer, delete the application directory at ~/Applications/Threde and revoke Gmail access at myaccount.google.com/permissions.

Children's privacy

Threde is not directed at children under 13 and does not knowingly collect information from them.

Changes to this policy

If this policy changes materially, the effective date at the top of this page will be updated. Continued use of the application after changes are posted constitutes acceptance of the revised policy.

Contact

Questions about this policy can be sent to threde@threde.ai.

---