Your privacy

Threshold is built around a simple idea: what you record about your body belongs to you. This page explains how your information is handled.

Who we are, and how to reach us

Threshold is made independently in Adelaide, South Australia. It isn't funded by advertising, it isn't backed by an insurer or an employer, and nobody pays us to put anything in front of you. The only thing we sell is the subscription — which is why we have no reason to want your health record, and don't ask for it. To reach us about anything on this page, email hello@thresholdapp.com.au or use the contact form. It comes straight to us and we answer it ourselves.

On your device, by default

When you use Threshold without an account, everything you enter — your daily notes, notable moments, readings and notes — stays on your own phone. It isn't uploaded to us, and we can't see it. You can use the whole app this way, indefinitely, without ever creating an account.

If you choose to back up

Backup is optional and off by default. If you turn it on, your information is encrypted on your phone before it's sent, using a key only you hold. What's stored online is unreadable — not to us, not to our hosting provider, not to anyone without your key. This is called end-to-end encryption, and it's the reason we can offer a backup without breaking the promise above.

Because only you hold the key, only you can unlock your backup. If you lose your key, we're unable to recover the data for you — the same protection that keeps others out keeps a lost key out too.

Like your other apps, your phone's own backup (iCloud or Google) may include Threshold if you have it switched on. That backup is Apple's or Google's, not ours, and they encrypt it.

What we collect

If you create an account for backup, we hold your email address, used only to sign you in (via a link we email you) and to contact you about your account. We store the encrypted backup itself, which we cannot read. We do not collect your name, and we never ask for more than we need.

Reminders, photos and files

If you set a reminder for something you're taking, it is scheduled by your own phone and shown by your phone. Nothing about it is sent to us, and we are not told whether you acted on it — Threshold never knows whether you took it.

If you attach a photo or a document to something you're taking, Threshold asks your phone for access to your camera or photo library at the moment you choose it. It only ever receives the one file you pick, and that file is stored on your device with the item you attached it to. Photos and files are not uploaded to us, with one exception you choose: if you ask Threshold to read a page of a report you have photographed, or the PDF a lab sent you (Read my page), those photos or PDFs are sent to be read, as described below. If you have turned backup on, they are included in the same encrypted backup as everything else — unreadable to us, like the rest of it.

Your scripts

If you keep a script (or prescription) in Threshold, the link or code from the text your doctor or pharmacy sent is stored on your phone, and in your private backup and your downloaded data if you use them, so you can show it at the counter. It is never sent to the AI. Threshold draws the code on your screen itself and never opens or fetches the link. When you share a text into Threshold, your phone passes it to the app and nothing else.

Medicine names for your country

When you add something you're taking, Threshold can suggest names from public medicine registers: your country's, where Threshold has one, and the United States' and the United Kingdom's for anything your country's list doesn't cover. To do that, the app downloads the list from Threshold's own server, and checks about once a day whether a newer one exists. The request says only which country's list; it carries nothing about you or anything you've logged. The app works out the country on your phone, from its time zone and language. The list is kept on your phone, so the suggestions still work offline, and choosing one is the same as typing the name yourself.

Like any request on the internet, it reaches our server from your phone's IP address. Our own code keeps no record of it; our hosting provider, Cloudflare, sees it the way it sees any visit to a website.

In Australia the names come from the Pharmaceutical Benefits Scheme (PBS) and the Australian Medicines Terminology (AMT), including the vitamin and supplement brands it lists. The AMT names are sent only to phones in Australia and are never built into the app. This material includes SNOMED Clinical Terms™ (SNOMED CT®) which is used by permission of the International Health Terminology Standards Development Organisation (IHTSDO). All rights reserved. SNOMED CT®, was originally created by The College of American Pathologists. 'SNOMED' and 'SNOMED CT' are registered trademarks of the IHTSDO. Medicine names from the Australian Medicines Terminology, published by the Australian Digital Health Agency through the National Clinical Terminology Service. The Agency and the IHTSDO do not endorse this app.

Finding a clinic

When you add someone to your care team, or a place to an appointment, Threshold can suggest matching clinics as you type. When you search for a clinic, the words you type and your phone's country and language go to Apple or Google to find it. Never your location. On an iPhone the search is Apple Maps'; on Android it is Google's. Nothing else you have logged goes with it, and Threshold never asks for your location, so it never shows a distance. Choosing a suggestion is the same as typing the clinic's name and address yourself, and it is kept on your phone with the rest of your record.

What your watch records

If you wear a watch or a ring and you choose to connect it, Threshold can read what your device already records: how long you slept and how broken that sleep was, your resting heart rate, your heart rate variability, your blood oxygen and breathing rate, your steps, how much warmer or cooler your skin was than your own usual night, the workouts it recorded (what kind, how long each one lasted, and how far you went), the blood pressure readings a cuff saves to your phone's health app, and your weight and body fat if a scale saves them there, along with the name of the app that saved them. Weight, body fat, temperature, resting heart rate and blood oxygen you type yourself stay on your device like everything else you log. When you press Connect or Read again it reads up to the last 90 days, so your history comes across too. A workout shows in that day's note, where you can keep it or take it off. A blood pressure reading sits with the ones you have noted yourself, and a reading you type in for that day always comes first. It asks your phone's health app for permission first, and it only ever reads: Threshold never writes anything back to your health records, and it never asks to. Once you have connected, Threshold reads again by itself when you open the app, so new nights and readings arrive without you pressing anything.

Those readings are kept on your device with everything else you log, and they are described back to you, never turned into a score. Nothing is diagnosed and nothing is graded. If you have turned backup on they travel inside the same encrypted backup as the rest of your record, unreadable to us. If you would rather not connect anything, every other part of Threshold works exactly the same — and you can disconnect at any time in your phone's own health settings, or in Threshold under Your space.

What we never do with them: we do not sell them, we do not share them, we do not use them for advertising, and they are never sent to the AI that writes your readings unless they are part of the record you have asked it to read.

When something breaks

When something in the app fails, or a screen stops responding, a short technical report is sent to us automatically, once: what broke, where in the code, and the names of the last few screens you opened (never what was on them). It's configured not to include your IP address, cookies or anything you wrote, and the screen is never recorded. It exists so a fault can be found and fixed, and nothing else.

The next time you open Threshold, a short card lets you add a note if you'd like to tell us more. If you use it, or the in-app problem report, we receive what you write. Please leave out anything you'd rather we didn't read.

If a word you type isn't in one of Threshold's lists, such as something you take, a symptom, or someone's role in your care team, you can press "Let us know" so we can think about adding it. Only then does anything go to us, and only that word, which list you typed it in, your list's country and the app version. Your notes, your readings and everything else you've logged stay on your phone.

What we don't do

• We don't sell your information, or share it with advertisers.
• We don't show ads.
• We don't use your health information to train anything.
• We don't track you across other apps or websites.

Your choices

You can delete your account and its encrypted backup at any time from within the app — this removes your online account and the stored copy for good. Your notes on your own device remain until you clear them. You can also turn backup off whenever you like and return to a fully on-device experience.

The AI readings

Threshold's readings are generated by Anthropic's Claude. A short summary of your recent entries is sent to Anthropic only to produce the reading you see — it isn't used to identify you or build a profile. Under Anthropic's commercial API terms, this data is not used to train their models, and it isn't retained beyond what's needed to return your reading. You can read Anthropic's privacy policy for the full detail.

If you ask Threshold to read a report or result you have photographed, or the PDF of one, the photos or PDF go to Anthropic in the same way, only to type out the lines of the report so you can check them and keep them as a result. They aren't used to train anything and aren't kept. Nothing is saved until you press Save, and a report of several pages goes together in one request.

Where your information goes

Threshold is made and supplied from Australia, but a few of the services it relies on are not in Australia. Being specific about that is part of being honest about it:

• Your readings — the short summary described above goes to Anthropic, in the United States.
• The encrypted backup, if you turn it on — stored with Cloudflare. It is encrypted before it leaves your phone, so what is held is unreadable ciphertext.
• Error reports — Sentry, hosted in the European Union.
• Report photos or PDFs, if you use Read my page — sent to Anthropic, in the United States, to be typed out.
• A clinic search, if you use one — the words typed in that box go to Apple (on an iPhone) or Google (on Android) to find matching places.
• Email: a sign-in or PIN reset code we send you, a message you send with Tell us, and a word you send with Let us know all go through Resend, an email delivery service, to be delivered.

Your notes themselves are never sent anywhere as readable text, other than the short summary you ask for when you request a reading, and the photos or PDFs of a report if you ask Threshold to read one.

Payment

If you subscribe, payment is handled by the app store you bought it from. We never see your card details — the store tells us only that a subscription is active. The terms of use explain how billing, renewal and refunds work.

Who Threshold is for

Threshold is intended for adults, and you need to be at least 16 to use it. We don't knowingly collect information from children.

Your rights

Because your record lives on your device, you already hold it: you can read it, change it, export it and delete it whenever you like, without asking us.

For the small amount we do hold — your email address if you set up a backup, the encrypted backup itself, and error reports — you can ask us what there is, ask us to correct it, or ask us to delete it. Email hello@thresholdapp.com.au and we'll respond within 30 days.

Threshold is supplied from Australia, so this policy is written to meet the Australian Privacy Principles. If you believe we have mishandled your information, please raise it with us first — and if you aren't satisfied with our answer, you can take it to the Office of the Australian Information Commissioner at oaic.gov.au.

Threshold is not a medical service

Threshold records what you tell it and helps you notice patterns in it. It does not diagnose, it does not prescribe, and it never tells you what to take. Nothing in the app is medical advice, and no one at Threshold reads your notes to form a clinical view — we can't, and we don't want to. What you do with what you notice is a conversation for you and your GP or health practitioner.

Changes to this policy

If we change how any of this works, we'll update this page and change the date at the top. If a change is significant, we'll say so in the app rather than hoping you re-read a web page.

Getting in touch

Questions about your privacy are always welcome. Email us at hello@thresholdapp.com.au.