Threshold is built around a simple idea: what you record about your body belongs to you. This page explains, plainly, how your information is handled.
Who we are, and how to reach us
Threshold is made independently in Adelaide, South Australia. It isn't funded by advertising, it isn't backed by an insurer or an employer, and nobody pays us to put anything in front of you. The only thing we sell is the subscription — which is why we have no reason to want your health record, and don't ask for it. To reach us about anything on this page, email hello@thresholdapp.com.au or use the contact form. It comes straight to us and we answer it ourselves.
On your device, by default
When you use Threshold without an account, everything you enter — your daily notes, notable moments, readings and notes — stays on your own phone. It isn't uploaded to us, and we can't see it. You can use the whole app this way, indefinitely, without ever creating an account.
If you choose to back up
Backup is optional and off by default. If you turn it on, your information is encrypted on your phone before it's sent, using a key only you hold. What's stored online is unreadable — not to us, not to our hosting provider, not to anyone without your key. This is called end-to-end encryption, and it's the reason we can offer a backup without breaking the promise above.
Because only you hold the key, only you can unlock your backup. If you lose your key, we're unable to recover the data for you — the same protection that keeps others out keeps a lost key out too.
We designed backup so that even we cannot read your notes. Your privacy shouldn't depend on trusting us — it should be built in.
What we collect
If you create an account for backup, we hold your email address, used only to sign you in (via a link we email you) and to contact you about your account. We store the encrypted backup itself, which we cannot read. We do not collect your name, and we never ask for more than we need.
Reminders, photos and files
If you set a reminder for something you're taking, it is scheduled by your own phone and shown by your phone. Nothing about it is sent to us, and we are not told whether you acted on it — Threshold never reads the absence of a tap.
If you attach a photo or a document to something you're taking, Threshold asks your phone for access to your camera or photo library at the moment you choose it. It only ever receives the one file you pick, and that file is stored on your device with the item you attached it to. Photos and files are not uploaded to us. If you have turned backup on, they are included in the same encrypted backup as everything else — unreadable to us, like the rest of it.
What your watch records
If you wear a watch or a ring and you choose to connect it, Threshold can read three things your device already records overnight: how long you slept and how broken that sleep was, your resting heart rate, and how much warmer or cooler your skin was than your own usual night. It asks your phone's health app for permission first, and it only ever reads — Threshold never writes anything back to your health records, and it never asks to.
Those readings are kept on your device with everything else you log, and they are shown back to you in plain words rather than as a score. Nothing is diagnosed and nothing is graded. If you have turned backup on they travel inside the same encrypted backup as the rest of your record, unreadable to us. If you would rather not connect anything, every other part of Threshold works exactly the same — and you can disconnect at any time in your phone's own health settings, or in Threshold under Your space.
What we never do with them: we do not sell them, we do not share them, we do not use them for advertising, and they are never sent to the AI that writes your readings unless they are part of the record you have asked it to read.
When something breaks
When something in the app fails, we receive a technical report — what broke and where in the code. It's configured not to include your IP address, cookies or the contents of what you were writing, and the screen is never recorded. It exists so a fault can be found and fixed, and nothing else.
If you use the in-app problem report to tell us about something, we receive what you write. Please leave out anything you'd rather we didn't read.
What we don't do
- We don't sell your information, or share it with advertisers.
- We don't show ads.
- We don't use your health information to train anything.
- We don't track you across other apps or websites.
Your choices
You can delete your account and its encrypted backup at any time from within the app — this removes your online account and the stored copy for good. Your notes on your own device remain until you clear them. You can also turn backup off whenever you like and return to a fully on-device experience.
The AI readings
Threshold's readings are generated by Anthropic's Claude. A short summary of your recent entries is sent to Anthropic only to produce the written reflection you see — it isn't used to identify you or build a profile. Under Anthropic's commercial API terms, this data is not used to train their models, and it isn't retained beyond what's needed to return your reading. You can read Anthropic's privacy policy for the full detail.
Where your information goes
Threshold is made and supplied from Australia, but a few of the services it relies on are not in Australia. Being specific about that is part of being honest about it:
- Your readings — the short summary described above goes to Anthropic, in the United States.
- The encrypted backup, if you turn it on — stored with Cloudflare. It is encrypted before it leaves your phone, so what is held is unreadable ciphertext.
- Error reports — Sentry, hosted in the European Union.
- Email we send you, such as a sign-in link — sent through Resend.
Your notes themselves are never sent anywhere as readable text, other than the short summary you ask for when you request a reading.
Payment
If you subscribe, payment is handled by the app store you bought it from. We never see your card details — The store tells us only that a subscription is active. The terms of use explain how billing, renewal and refunds work.
Who Threshold is for
Threshold is intended for adults, and you need to be at least 16 to use it. We don't knowingly collect information from children.
Your rights
Because your record lives on your device, you already hold it: you can read it, change it, export it and delete it whenever you like, without asking us.
For the small amount we do hold — your email address if you set up a backup, the encrypted backup itself, and error reports — you can ask us what there is, ask us to correct it, or ask us to delete it. Email hello@thresholdapp.com.au and we'll respond within 30 days.
Threshold is supplied from Australia, so this policy is written to meet the Australian Privacy Principles. If you believe we have mishandled your information, please raise it with us first — and if you aren't satisfied with our answer, you can take it to the Office of the Australian Information Commissioner at oaic.gov.au.
Threshold is not a medical service
Threshold records what you tell it and helps you notice patterns in it. It does not diagnose, it does not prescribe, and it never tells you what to take. Nothing in the app is medical advice, and no one at Threshold reads your notes to form a clinical view — we can't, and we don't want to. What you do with what you notice is a conversation for you and your GP or health practitioner.
Changes to this policy
If we change how any of this works, we'll update this page and change the date at the top. If a change is significant, we'll say so in the app rather than hoping you re-read a web page.
Getting in touch
Questions about your privacy are always welcome. Email us at hello@thresholdapp.com.au.
This page is written to be read rather than endured, and it is the whole of what we do with your information — there is no denser version of it kept somewhere else. The terms of use cover the rest of the agreement: what Threshold is, what it is not, and how subscriptions work.