Privacy Policy for Threader Pro

Last updated: 1 October 2026

1. Overview

Threader Pro is a Threads analytics service available as a web application and an iOS app. When you connect your Threads account, Threader Pro reads data that the official Threads API makes available for your account and uses it to build saved analytics reports, charts, rankings, exports and related interface features.

This Privacy Policy explains what data Threader Pro processes, why it is processed, how long it is kept, and what choices you have.

2. Data Threader Pro processes

2.1 Data received from the official Threads API

Depending on the permissions granted and the data available from Threads, Threader Pro may process:

• your Threads user ID and username;
• display name and profile image URL when available from the API;
• your own posts and replies, including text, timestamps, permalinks and thread context;
• post and reply metrics exposed by the API, such as views, likes, replies, reposts, quotes or shares;
• audience/account insights when available, such as follower totals, profile views and country-level audience estimates;
• relationship and interaction context needed to build communications and activity reports.

Threader Pro uses the official Threads API only. It does not scrape Threads web pages as a product feature.

2.2 Data created inside Threader Pro

To provide the service, Threader Pro also stores and processes:

• saved report snapshots;
• raw cached API payloads reused across scans;
• analysis job state, progress, error messages and profiling data when profiling is enabled for a user;
• account settings stored on the server, such as UI locale, gender preference and role flags;
• on-demand content export archives generated from saved snapshots.

Export archives are generated on request from existing saved data and are not kept as separate long-term files by default.

2.3 Browser storage and cookies

When using the Threader Pro web application, Threader Pro uses:

• a necessary authenticated session cookie, threader_session;
• browser storage for interface preferences and related convenience features.

At the moment:

• language and theme are stored only when you explicitly change them;
• optional preference storage can remember the last selected saved report on the current device if enabled;
• the web application can use Meta Pixel for advertising measurement when a Pixel ID is configured, but the Pixel script is not loaded until you explicitly enable the Marketing category in Cookie settings;
• when enabled, Meta Pixel may process the current page URL and title, referrer, browser/device and network information, and Meta cookies or identifiers made available to the Pixel. Threader Pro does not deliberately send report content, post or reply text, OAuth/session tokens, email addresses, usernames or raw Threads identifiers to Meta Pixel;
• you can withdraw Marketing consent at any time in Cookie settings. Threader Pro then revokes Pixel consent, stops future Pixel events and removes the Meta first-party cookies it can access.

2.4 iOS application data

When using the Threader Pro iOS application, additional data is stored and processed:

• On your device: a reusable session token is stored in the iOS Keychain to restore your authenticated session without requiring repeated OAuth authorization. This token is signed server-side and has a 90-day validity period. Profile data and app preferences are cached locally in device storage for display while the app loads.
• On the server: if you grant notification permission, your APNs device token is stored server-side to deliver push notifications (for example, when a scan completes). You can withdraw notification permission at any time through iOS system settings.
• App Store purchases: if you subscribe to Threader Pro through the iOS app, Threader Pro stores the Apple transaction identifier received from StoreKit to activate and verify your subscription status. This identifier is used solely to confirm entitlement with Apple's servers and is not shared with third parties beyond that verification step.
• Product analytics and diagnostics: the iOS app uses Google Analytics for Firebase to collect product analytics events, screen views and funnel metrics, and Firebase Crashlytics to collect crash and non-fatal diagnostic reports. These tools help us understand whether core app flows work correctly, detect stability problems and decide which features need improvement. Event parameters and diagnostic metadata do not include post text, OAuth tokens, session tokens, email addresses, usernames or raw Threads identifiers.

The iOS app does not use advertising identifiers (IDFA), does not use analytics data for advertising, and does not perform cross-app tracking.

2.5 Optional Telegram connection

If you connect the Telegram bot, Threader Pro stores:

• your Telegram chat ID;
• Telegram username when available from Telegram;
• notification preference state and basic notification history.

If you contact support through the Help section, Threader Pro stores the message you submit and, for unauthenticated users, the email address you provide so we can reply manually. You can also contact us at hello@threader.pro.

If you use the same connected bot chat for support or feedback, Threader Pro may also store:

• text messages you send to the bot as feedback;
• text replies sent back to you by the operator through Telegram;
• technical message mapping needed to route operator replies back to the correct Threader Pro user.

Telegram support is an optional channel. Replies linked to your authenticated Threader Pro account may also be shown in the Help section.

2.6 Technical and operational logs

Threader Pro keeps limited technical logs and job history for reliability, debugging, abuse prevention and service administration. These records may include:

• timestamps;
• user references;
• analysis keys, periods and status changes;
• error messages returned by Threads or internal components.

Threader Pro does not deliberately write your OAuth access token into application logs.

2.7 Automatic report updates and author cards

The primary service domain is https://threaderpro.com. When automatic updates are enabled in your account settings, Threader Pro periodically checks whether saved reports can be refreshed and requests fresh data through the official Threads API. You can turn automatic updates off in the service. Update status and notification history are stored to avoid duplicate work and messages.

Author cards reuse saved reports, audience insights and existing personality results. Opening a card does not start a new scan or a new AI analysis. Cards may display your profile and interaction partners' public usernames, profile images and report excerpts. In the iOS app, exported images and videos are rendered on your device and handed to the system share sheet when you choose to share them. The destination you select receives the exported content; Threader Pro does not publish it automatically.

2.8 AI-assisted analysis

To generate personality analysis, the service sends selected saved post and reply text to the configured text-model provider (OpenAI or Anthropic). The returned analysis is stored with your report. If you use an available AI avatar-generation feature on the web, your source avatar and a generation prompt are sent to the configured image provider (OpenAI, Google Gemini or Replicate). These features require processing by the selected provider; viewing an existing author card reuses stored results.

3. Why Threader Pro uses this data

Threader Pro processes data to:

1. authenticate you and maintain your session across web and iOS;
2. run scans you request and automatic report refreshes while that setting is enabled;
3. build saved reports, summary cards, rankings and visualizations;
4. generate on-demand exports of your own posts and replies;
5. reduce repeated load on the Threads API through cache and snapshot reuse;
6. deliver push notifications about scan completion if you have granted permission (iOS);
7. activate and verify Threader Pro subscription status purchased through the App Store (iOS);
8. send optional Telegram notifications if you connected the bot;
9. receive, route and answer optional Telegram feedback linked to your Threader Pro account;
10. measure iOS product usage, diagnose crashes and improve core app flows using Firebase Analytics and Crashlytics;
11. measure consented web visits and advertising attribution through Meta Pixel;
12. secure, troubleshoot and improve the service.

Threader Pro does not sell personal data and does not use your Threads data for advertising.

4. Legal bases

Depending on the situation, Threader Pro relies on:

1. Performance of a service requested by you — to log you in, run scans, build reports and provide exports.
2. Consent / authorization you grant through Threads OAuth — to access Threads API data tied to your account.
3. Consent — to send push notifications (iOS) and, separately, to load Meta Pixel for web marketing measurement. You may withdraw these choices at any time via iOS system settings or the web Cookie settings, respectively.
4. Performance of a purchase contract — to activate and verify App Store subscriptions.
5. Legitimate interests — to keep the service secure, prevent abuse, diagnose failures and maintain reliability.
6. Legal compliance — where retention or disclosure is required by applicable law.

5. Sharing and disclosure

Threader Pro does not sell your personal data.

Data may be shared only in limited situations:

• with infrastructure or service providers that help operate Threader Pro;
• with Meta / Threads as part of the normal operation of the official Threads API;
• with Meta through Meta Pixel, only after web Marketing consent, to measure page visits and advertising attribution;
• with Apple, to verify App Store subscription transactions via the App Store Server API;
• with Google/Firebase, to process iOS product analytics and crash diagnostics for Threader Pro;
• with Telegram, if you explicitly connect the Telegram bot for notifications or account-linked feedback;
• where disclosure is legally required or necessary to protect legal rights or service security.

6. Retention and deletion

Threader Pro keeps different categories of data for different periods:

• saved reports, stored Threads profile data and stored OAuth connection data are kept until you use the "Delete all data" function (available in the web interface and in iOS app Settings) or ask for account-level deletion;
• iOS Keychain session token and local device cache are removed when you sign out or delete your account from the iOS app;
• APNs device token is removed from the server when your account is deleted;
• App Store transaction identifiers are kept for the duration of the subscription and for up to 90 days after it ends, for dispute and verification purposes;
• short-lived OAuth state and Telegram connect codes are kept for up to 15 minutes;
• API cache entries are kept for up to 24 hours depending on cache type;
• temporary scan checkpoints used for resume/recovery are kept for up to 7 days;
• terminal job history records are kept for up to 90 days;
• support message history, including Telegram support history and guest support email snapshots, is kept for up to 180 days;
• profiling artifacts are kept for up to 30 days;
• admin load metrics are kept for up to 48 hours.

The "Delete all data" function deletes the stored Threader Pro data for that account, including saved reports, snapshots, job history, cached scan data, stored Threads profile data, stored OAuth connection data, APNs device token, Telegram link data and account-linked support history, and signs the user out.

Deleting data in Threader Pro does not delete anything from your Threads account itself.

7. Security

Threader Pro uses baseline technical and organizational safeguards, including:

• HTTPS in transit;
• signed authenticated session cookies;
• server-side storage of OAuth tokens, encrypted at rest and separate from the browser session cookie;
• iOS Keychain for on-device session token storage (OS-managed encryption, not backed up to iCloud);
• access controls for authenticated and admin-only functions;
• ongoing hardening and operational monitoring.

No service can promise absolute security.

8. Your rights

Depending on applicable law, you may have rights to:

• access data about you;
• request correction;
• request deletion — the "Delete all data" function in the service is the primary mechanism for this;
• object to or restrict certain processing;
• receive a portable copy of data where applicable;
• withdraw consent where processing depends on consent;
• lodge a complaint with a competent supervisory authority.

To exercise these rights, contact hello@threader.pro.

9. International transfers

Threader Pro may use infrastructure or services that involve data processing outside your country. Where required, appropriate safeguards are used for such transfers.

10. Changes

Threader Pro may update this Privacy Policy to reflect product, legal or operational changes. The latest version will be published in the service, together with an updated revision date.

11. Contact

For privacy questions or requests, contact: hello@threader.pro