Privacy Policy

1. Who this applies to

This policy covers ThreadCast's Chrome extension, Android app, iOS app (when launched), and this website at threadcast.app. ThreadCast is operated by Pixel Labs.

2. What we do not collect

• The content of Reddit posts or comments you listen to.
• Your Reddit account, username, or login credentials.
• Which threads you open, queue, skip, or finish.
• Audio data — every voice engine (System voices on every surface, plus the AI neural engines on the Chrome extension and on the Android app for Premium users when that launches) synthesizes speech locally on your device. No audio is ever transmitted to a server.
• Your browsing history outside of reddit.com.

3. What the AI neural engines do download

The optional AI neural CPU and GPU engines on the Chrome extension — and the equivalent Premium engines on the Android app — need a one-time download of model weights to run on your device. These weights are hosted on Hugging Face's public CDN. When you opt into a neural engine, ThreadCast fetches the model files directly from Hugging Face's CDN and caches them locally — in the browser on the extension, in the app's private storage on Android. After the first download, the engine runs fully offline — nothing is sent on subsequent listens. You can cancel a download in progress and delete cached models any time from settings.

We do not log model downloads or correlate them with your identity. Hugging Face, as the host of the model files, may keep standard CDN access logs (IP address, user agent, timestamp) under their own privacy policy. If you never enable a neural engine, no Hugging Face request is ever made.

4. What we do collect

Chrome extension

Nothing is transmitted to us. Your voice preferences and queue state are stored in your browser's local extension storage only and never leave your device.

Android app

The app uses internet access for two purposes: loading Reddit content (posts, comments, images, videos) from reddit.com, and — only if you opt into a Premium AI neural engine — fetching the corresponding model weights from Hugging Face's public CDN, one time. See section 3 for the model-download details. No microphone, camera, contacts, or location permissions are requested. Nothing about what you read or listen to is transmitted to us. Google Play may collect standard install and diagnostics data per Google's own privacy policy.

The Android app uses Sentry for crash reporting only — stack traces, device model, OS version, and app version are sent so we can fix crashes. No personally identifying information, Reddit content, voice data, or usage analytics are sent. Crash data is processed under Sentry's privacy policy. The app uses no advertising SDKs and no behavioral analytics SDKs. Any additional crash or ANR data is collected by Google Play's built-in reporting under Google's policies and is not accessible to us in a form linked to your identity.

This website

Our hosting provider (Cloudflare) keeps standard server logs — IP address, browser user agent, timestamp — for up to 30 days for security and abuse prevention. We do not access or analyze these logs for marketing.

We also use Cloudflare Web Analytics to count page views and see referrers in aggregate. It is cookieless, sets no identifiers in your browser, collects no personal data, and does not fingerprint visitors. No analytics SDK is bundled into the extension or the apps — this is website-only.

When you email us

Your email address and the contents of your message. We retain these until your request is resolved, plus up to two years for our records.

When you submit feedback (Android app or Chrome extension)

ThreadCast's Send Feedback form — in the Android app under Settings, and in the Chrome extension under Settings → Help & feedback — lets you submit a bug report, feature request, voice-quality note, or other message. When you send it, your message is transmitted to our feedback endpoint at api.threadcast.app (a Cloudflare Worker we operate), which forwards it as an email to our support inbox via Resend.

Each submission includes:

• The category you selected (Bug, Feature, Voice, Other) and your message.
• The email address you optionally provided so we can reply — leave it empty to submit anonymously.
• Diagnostic context: the app or extension version, your operating system, and — on the Android app — your device model, or on the Chrome extension, your browser name instead. This helps us reproduce bugs (e.g. "occurs on OnePlus 12 with Android 14", or "Chrome on Windows 11"). It does not include any identifier linked to you.

We never attach what you read or listen to in ThreadCast, your Reddit account, your queue, or any usage analytics. The Worker keeps short-lived rate-limit metadata (request counts per IP, retained under 24 hours) to prevent abuse, and Cloudflare may keep standard edge logs as described in section 4 above. We retain feedback messages until your request is resolved, plus up to two years for our records, identical to email correspondence.

When you join a waitlist

If you join the iOS waitlist or ask us to notify you about a future release, we keep your email address until either you unsubscribe or we send the notification you signed up for.

Data linked to you vs. data not linked to you

The only personal data that could be linked to your identity is your email address — and only if you voluntarily provide it (support email, waitlist, or paid plan purchase). All other data described in this section (server logs, testing diagnostics) is either automatically deleted or is not associated with your identity.

5. Third parties we use

• Cloudflare — website hosting, DNS, CDN, DDoS protection, and Web Analytics (cookieless, aggregate-only). Server logs and analytics are processed per Cloudflare's privacy policy.
• Hugging Face — public CDN host of our AI neural model files. Used only when you opt into a neural engine; weights download once and cache locally. Governed by Hugging Face's privacy policy.
• Google (Chrome Web Store, Google Play) — distribution of our apps. Your interaction with these stores is governed by Google's privacy policy.
• Apple (App Store, TestFlight) — distribution of our iOS app when launched. Governed by Apple's privacy policy.
• Sentry — crash reporting on the Android app only. Receives stack traces, device model, OS version, and app version when the app crashes. No personal data, Reddit content, or behavioral analytics. Governed by Sentry's privacy policy.
• Resend — transactional email delivery (support replies, waitlist notifications, in-app feedback forwarding). Messages and email addresses you provide are processed per Resend's privacy policy.
• Lemon Squeezy — payment processing and billing when paid plans launch. As the merchant of record, Lemon Squeezy handles payment data directly, governed by their privacy policy. We receive only an order reference and your email to manage your subscription.

The Chrome extension uses no analytics, tracking, or advertising — there is no SDK or telemetry bundled into it. The Android app uses Sentry for crash reporting only (described above) and no other tracking. The website uses Cloudflare Web Analytics, which is cookieless, aggregate-only, and processes no personal data. We will update this policy before any further change to analytics or tracking goes live.

6. Cookies and local storage

We do not set tracking cookies. Your browser may use localStorage to save site preferences (like your theme choice); this data stays on your device. See our Cookie Policy for details.

7. Your rights

If you are in the European Economic Area, United Kingdom, or California, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate information.
• Request deletion of your data.
• Object to our processing.
• Receive your data in a portable format.
• Lodge a complaint with your local data protection authority.

California residents additionally have the right to know what categories of personal information we collect and to opt out of any "sale" of personal data. We do not sell personal data.

To exercise any of these rights, email privacy@threadcast.app. We respond within 30 days.

8. Data deletion and account removal

You may request deletion of any personal data we hold about you at any time.

• In the Android app: open Settings → About → Delete my data. The app launches your email composer with a pre-filled deletion request including your install info, so we can find and purge the anonymous crash records associated with your install. Just send.
• Email us directly at privacy@threadcast.app with the subject line "Delete my data". We will process your request within 30 days and confirm by email once complete.
• Waitlist removal: every waitlist email includes an unsubscribe link. Clicking it removes your address immediately.
• Paid plan data: if you hold a Premium or Lifetime license, cancelling and requesting deletion will remove your email and license record. Transaction records required by law (e.g. for tax purposes) are held by Lemon Squeezy per their retention policy.
• Android crash reports: the Android app sends crash logs to Sentry tied to an anonymous per-install identifier. On request, we will purge the crash data associated with your install (provide your install ID from the app's About section, or describe the device + approximate install date in your email). Sentry's default retention also auto-purges crash data after 90 days regardless.

Because the Chrome extension and Android app store all preferences locally on your device, you can delete that data at any time by clearing the extension's storage in your browser settings or uninstalling the app.

9. Data retention

• Support correspondence and in-app feedback: up to 2 years after the issue is resolved.
• Server logs: up to 30 days, then automatically purged by Cloudflare.
• Feedback Worker rate-limit metadata: under 24 hours.
• Waitlist emails: until you unsubscribe or we send the launch notification you requested.

10. International transfers

Our providers may process data outside your country. Where applicable (for example, for users in the EEA), we rely on Standard Contractual Clauses or equivalent safeguards provided by our vendors.

11. Children

ThreadCast is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have, please contact us and we will delete it.

12. Security

We take reasonable technical and organizational measures to protect the limited personal data we collect. No system is fully secure — our approach is to minimize what we collect so there's less to protect in the first place.

13. Changes to this policy

We may update this policy from time to time. Material changes will be announced on this website, and the "Last updated" date above will be revised. Continued use of ThreadCast after a change constitutes acceptance of the updated policy.

14. Contact

For privacy questions, data requests, or complaints:

• Email: privacy@threadcast.app
• Company: Pixel Labs

You also have the right to lodge a complaint with a data-protection authority. For EU residents, you can find your local authority at edpb.europa.eu.