Threadline Inbox
Privacy policy.

Who we are

Threadline Inbox (“Threadline”) is an iPhone app made by Orbit & Loom (“we”, “us”). This policy explains what happens to your information when you use it.

What Threadline accesses

When you connect a service, Threadline signs in to that service on your behalf and downloads your recent messages and conversation details (such as sender names, subjects and times) directly from that service to your iPhone. When you reply or mark something as read, Threadline sends that request directly to the service. Depending on what you connect, this can include:

• Gmail (Google): inbox threads, sending replies, marking as read.
• Google Chat (Google Workspace): spaces, direct messages, sending messages.
• iCloud Mail (Apple): recent inbox email over IMAP and replies over SMTP, using an app-specific password you create.
• Slack, Microsoft Teams, Matrix, Telegram and Discord: your recent conversations and the ability to reply.
• Imported chats (WhatsApp, Messenger, iMessage): only the chat exports or text you choose to import.

Where your information is stored

• Sign-in tokens, app-specific passwords and bot tokens are stored in your iPhone’s Keychain, which is encrypted and only available on that device.
• Imported chats and, for Telegram, a local message cache are stored in the app’s private storage on your iPhone.
• Messages from other services are kept in memory while the app is open so they can be shown to you.

Nothing is uploaded to us. Threadline contains no analytics, advertising or tracking code, and does not track you across apps or websites.

Google user data

Threadline’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail and Google Chat data is used only to show your messages in Threadline and to perform actions you request (reply, mark as read). It is not transferred to anyone, not used for advertising, not used to train AI models, and not read by humans.

Third-party services

Each service you connect handles your data under its own privacy policy: Google, Apple, Slack, Microsoft, your Matrix homeserver, Telegram and Discord. Threadline only acts within the permissions you grant when you sign in.

Your choices

• Disconnect any service in Threadline › Accounts. This deletes its sign-in from your Keychain.
• Revoke access at any time from the service’s own settings (for example, your Google Account’s third-party connections).
• Delete everything by deleting the Threadline app, which removes its stored data from your iPhone.

Crash reports

If you choose to share analytics with Apple in iOS Settings, Apple may provide us with anonymous crash reports. These do not include your messages.

Children

Threadline is not directed to children under 13, and we do not knowingly collect information from children.

Changes and contact

If this policy changes, we’ll update this page and the date above. Questions? Email [email protected].