Limited-trial privacy notice
Privacy and your data
Version 3 · 18 October 2026
Who is responsible
Thread is operated by Jon Fuller trading as Thread. For privacy questions, requests or complaints, email privacy@makemythread.com.
What Thread collects
Thread holds account and contact information, professional and client relationships, journal entries, voice recordings while they are transcribed, accepted transcripts, professional guidance, weekly reports and source-linked pre-session brief material, feedback, and security and operational records. A journal may contain health information or other sensitive personal information that you choose to record.
Why it is used
We use this information to provide and secure your private Thread, connect clients with professionals when both journeys permit it, convert voice entries into text, generate weekly reports and source-linked material for the professional pre-session brief, operate the limited trial, respond to feedback, prevent misuse and meet legal obligations. Thread does not sell personal information or use journal material for advertising.
Our legal bases
We process ordinary account and service information because it is necessary to provide Thread during the trial, to take requested steps before providing it, and for legitimate interests in securing and improving the service. We use information where necessary to meet legal obligations. During the limited trial, we rely on your explicit consent to process health information or other special-category information you choose to put in your journal for transcription and source-linked report and pre-session brief processing. You may withdraw that consent by contacting us, but Thread cannot perform those functions without processing the material concerned.
Who can see journal information
A client can see their own Thread. A professional can see relevant client material only while an active relationship grants access. Organisation or platform administration alone does not grant access to journal content. Ending a relationship removes that professional’s access but does not delete the client-owned journal.
Optional Apple Health tracking
On a supported iPhone, Thread can read all workout activity types recorded in Apple Health, including strength training, cycling, swimming, yoga, Pilates and HIIT, with start and end times, duration and distance when available, plus daily step totals. Thread does not write to Apple Health or read heart rate, sleep, HRV, sets or reps, GPS routes or other health metrics. A separate 90-day preview is held in memory on your device and is not joined to or used to validate your reflection. Where Thread server sync is enabled, connecting requires Apple Health read permission and your separate, recorded affirmative consent to encrypted storage and processing; only the latest 14 calendar days are imported when you connect and after a saved reflection. The applicable retention period is shown with that consent. Health data is not sent to AI providers, used in AI reports, or sent to telemetry or push notifications. Professional access is available only where enabled and only after you separately grant access to each eligible named professional; it is never automatic. Disconnecting stops new imports and professional access after Thread confirms the server change, but does not erase the stored copy or withdraw storage consent. Use “Withdraw sync consent and erase Thread’s copy” to withdraw consent and erase stored measurements and sync cursors. Turning the connection off also clears the local preview preference; revoke Apple Health permission separately in the Apple Health app’s Apps and Services settings. Apple may return no data without telling Thread whether read permission was denied.
AI and voice processing
Thread uses automated services to transcribe voice and generate weekly reports containing source-linked material that can support a professional’s pre-session preparation. AI output is kept separate from the client’s original words, must retain source references, and is not a diagnosis or professional decision. Original voice recordings are normally deleted after a transcript is safely stored; a failed recording may be retained encrypted for up to 48 hours to allow retry.
Service providers
Thread uses carefully selected service providers to operate hosting, authentication, encrypted storage, transactional email, app distribution, transcription and report processing. These currently include Vercel, Supabase, Resend, Apple/Expo services and the OpenAI API. Where Apple Health server sync is enabled, Supabase stores encrypted Health measurements for Thread’s server-side processing; Health measurements are not sent to the OpenAI API. Providers receive only the information needed for their role and do not gain professional access to a client’s Thread.
International processing
Some service providers may process information outside the United Kingdom. Where this occurs, Thread will use the provider’s applicable contractual and data-protection safeguards and will document the arrangement as part of the trial review.
Keeping and deleting information
Journal entries, accepted transcripts and other account records are kept while the account remains active unless a shorter period is stated. Clients can end professional access without deleting their Thread, or permanently delete their client data from the app. Professionals can delete their professional account data through the web workspace. Infrastructure backups may expire on a separate controlled schedule, so deletion may not remove encrypted backup copies immediately.
Your choices and rights
You may ask for access to, correction of or a copy of your information, object to or restrict some processing, withdraw consent where consent applies, disconnect a professional, or request deletion. You may complain to Thread first and also have the right to complain to the UK Information Commissioner’s Office. Contact us before deleting an account if you need a copy of its information.
Automated processing
Thread’s automated processing does not make decisions with legal or similarly significant effects. It prepares weekly reports and source-linked pre-session brief material for a professional, who remains responsible for their own judgement and decisions.
Safety
Thread is not monitored for emergencies and is not a therapy, diagnosis, crisis or messaging service. Do not use feedback to request urgent help. Contact your professional, NHS 111, emergency services or another appropriate support route when needed.
Changes
We will tell trial participants about material changes and update the version and date shown here. This notice describes the limited trial and will be reviewed before any wider launch.