Lace

1. Information We Collect

1.1 Information You Provide

• Threads Account Data: When you log in via Threads OAuth, we receive your Threads user ID, username, display name, profile picture URL, and account verification status.
• Content You Create: Posts, replies, and messages you publish through Lace.
• Saved Content: Posts you mark as favourites within the app.

1.2 Information Collected Automatically

• Usage Data: App interactions, screens visited, features used, and session duration.
• Device Information: Device type, operating system version, and unique device identifiers.
• Log Data: IP address, access times, app version, and crash reports.

1.3 Information from Meta / Threads API

Lace uses the Threads API to access and display publicly available content. This includes:

• Public posts matching relationship and social connection topics
• Public replies and engagement metrics (likes, reply counts)
• Public profile information of post authors (username, profile picture, verification status)

We only access data you have made publicly available on Threads. We do not access private messages, private accounts, or any data you have not explicitly made public on the Threads platform.

2. How We Use Your Information

We use the information we collect to:

• Authenticate you and maintain your session in the app
• Display a personalised feed of relevant public Threads content
• Enable you to save posts to your Favourites
• Enable you to publish posts and replies to Threads on your behalf
• Enable in-app messaging between Lace users
• Improve app performance, fix bugs, and develop new features
• Comply with legal obligations and Meta Platform Policies
• Detect and prevent fraud, abuse, and violations of our Terms of Service

We do not sell your personal data to third parties. We do not use your data for targeted advertising. We do not build individual profiles for advertising purposes.

3. Threads API and Meta Platform Policy

Lace is built on top of the Threads API provided by Meta Platforms, Inc. Our use of Threads API data complies with the Meta Platform Terms and the Meta Developer Policies.

Specifically:

• We only request permissions necessary for the features described in this policy.
• We use the following Threads API permissions: threads_basic, threads_content_publish, threads_keyword_search, threads_read_replies, threads_manage_replies, threads_profile_discovery, threads_delete, threads_manage_mentions.
• We display public Threads content as-is, without extracting or repackaging personal attributes.
• We do not use Threads data to build competing products or to circumvent Meta's systems.
• Access tokens received from Threads OAuth are encrypted and stored securely.

4. Data Storage and Security

Your data is stored on secure servers. We implement industry-standard security measures including:

• AES encryption for access tokens using Fernet symmetric encryption
• JWT (JSON Web Tokens) for session authentication
• HTTPS/TLS encryption for all data in transit
• Rate limiting to prevent abuse
• Regular security reviews

Locally on your device, we store your favourites and message history using encrypted device storage (SharedPreferences). We do not store sensitive financial or government ID information.

5. Data Sharing

We do not sell, rent, or share your personal data with third parties, except in the following circumstances:

• Meta / Threads: When you publish content through Lace, that content is transmitted to Threads via the Threads API.
• Service Providers: We may use trusted third-party service providers (e.g., hosting, analytics) who process data on our behalf under strict confidentiality agreements.
• Legal Requirements: We may disclose data if required by law, court order, or governmental authority.
• Business Transfer: In the event of a merger or acquisition, user data may be transferred as part of the business assets.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your personal data (see Section 7).
• Portability: Request your data in a machine-readable format.
• Objection: Object to certain types of data processing.
• Withdrawal of Consent: Withdraw consent at any time by deleting your account.

To exercise any of these rights, please contact us at paul.klimov.pro@gmail.com. We will respond within 30 days.

7. Data Deletion

You have the right to request complete deletion of your data from Lace at any time. To delete your data:

• Email us at paul.klimov.pro@gmail.com with subject line "Data Deletion Request"

Upon receiving your request, we will delete all personal data associated with your account within 30 days. This includes your profile data, favourites, and message history. Note that content you have published to Threads must be deleted separately through the Threads app or via the Lace "Delete Post" feature.

8. Children's Privacy

Lace is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal information, we will delete it immediately. If you believe a minor has used our service, please contact us at paul.klimov.pro@gmail.com.

9. Cookies and Tracking

The Lace mobile application does not use cookies. We may use anonymised analytics to understand general usage patterns and improve the app. These analytics do not identify you personally.

10. Third-Party Links and Content

Lace displays public content from Threads, which may include links to third-party websites. We are not responsible for the privacy practices or content of those external sites. We encourage you to review the privacy policies of any third-party sites you visit.

11. International Data Transfers

If you are located outside the country where our servers operate, your information may be transferred to and processed in other countries. We ensure appropriate safeguards are in place in accordance with applicable data protection laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you through the app or via email. The "Last updated" date at the top of this page reflects the most recent revision. Your continued use of Lace after changes are posted constitutes your acceptance of the updated policy.

13. Governing Law

This Privacy Policy is governed by applicable data protection laws. For users in the European Economic Area, we comply with the General Data Protection Regulation (GDPR). For users in California, we comply with the California Consumer Privacy Act (CCPA).