Threestrand Privacy Policy

Last Updated: October 8, 2026 (Version 2.1)

Threestrand was previously named Anchor. This document applies to the app under either name.

Your privacy matters. This policy explains what data Threestrand collects, why we collect it, and how you can control it.

Summary

• We collect only what's needed to make Threestrand work
• Your accountability partner sees whether your protection is set up and holding, and the requests you send them. They do not see your app usage in current versions of Threestrand
• We don't sell your data or show you ads
• You can delete all your data at any time
• Adults can disconnect from a partner or leave a family at any time
• Teens 13 to 17 use Threestrand only inside a family with their parent or guardian, and Threestrand is not for children under 13 (see Teens and Families)

Information We Collect

Account Information

When you set up Threestrand, we collect:

• Display name: So your partner knows who you are
• Pairing code: A unique 8-character code to connect with your partner
• Email address and password (accountability partner mode only): If you connect with a partner, you create an account using an email address and password. This keeps your partnership securely tied to you and working across devices. Solo use does not require an account. Authentication is handled by Google Firebase; we never store your password in readable form. You can delete your account and all associated data at any time (see Your Rights).

App Usage Data (Stays on Your Phone)

If you grant usage stats permission on Android, Threestrand reads which apps you use and for how long to show you My Usage and to enforce the time limits you set. This stays on your phone. Current versions of Threestrand do not upload which apps you use, for how long, or which blocked apps you tried to open, and partners cannot read that data from our servers. (Earlier versions did upload it; see Data Retention for how that data is being removed.) What we do keep on the server is what you choose to share: your self-imposed time limits and schedules, and the requests you send.

Device Information

We collect basic device information to make Threestrand work:

• FCM token: To send you push notifications
• Accessibility service status: Whether app blocking is enabled
• Launcher status: Whether Threestrand is your home screen

Diagnostic Data

When you submit a bug report through the app, we collect:

• Your description of the issue
• Device model and Android version
• App version and mode (solo/partner)
• Recent app events (last 100 events, for debugging)
• A random 8-character reference ID

This diagnostic data is used solely to identify and fix issues. It is not shared with your accountability partner or any third parties.

Anonymous Statistics

We automatically collect minimal anonymous data daily to understand how many people use Threestrand:

• A random identifier (not linked to your account)
• App mode (solo or partner)
• Whether blocking is enabled
• App version
• Date

This data is completely anonymous and cannot be used to identify you.

Product & Usage Analytics

To understand how Threestrand is used, to improve it, and to help us reproduce and fix problems you report, we record certain events linked to your account identifier. Examples include: daily active use, onboarding progress, which screens you visit within the Threestrand app, when you block or request access to an app, partner requests and approvals, when Threestrand notifications arrive and what you do with them (open, approve, deny), settings changes such as turning blocking on or off, and whether a sign-in attempt succeeded or failed. These are behavioral events about your use of Threestrand itself, not the content of your other apps, messages, or screen. We keep them to analyze trends over time and to support you when something goes wrong. When you delete your account, we irreversibly anonymize these events by stripping your identifiers so they can no longer be tied to you, while retaining only aggregate, non-identifying data.

You can turn this off. On Android, Settings > Advanced > Share Anonymous Usage Data. On iPhone, that switch arrives in an upcoming release; until then, email support@anchorph.one and we will switch it off for your account. Turning analytics off does not change how blocking, limits, or partner approvals work.

How We Use Your Information

We use your data to:

• Provide the service: Connect you with your partner, sync your settings, send notifications
• Enable accountability: Share relevant data with your partner (see below)
• Improve Threestrand: Fix bugs and analyze how Threestrand is used to improve it (see Product & Usage Analytics above)
• Communicate: Send push notifications about partner requests and alerts

We do NOT:

• Sell your data to anyone
• Share your data with advertisers
• Use your data for targeted advertising
• Read the content on your screen

Accountability Partner Data Sharing

What You Share With Your Partner

By entering a partner's pairing code and completing the connection, you explicitly consent to share the following with your partner in real-time:

Threestrand's partner view is built around accountability, not surveillance. Your partner sees the state of your setup and what you choose to ask them. They do not see which apps you use, for how long, or which blocked apps you tried to open.

Transition note: versions of Threestrand before July 2026 showed partners your app usage, and versions before [release, autumn 2026] still uploaded it. As of that release, usage is no longer uploaded, our servers no longer let a partner read what older versions uploaded, and the previously uploaded usage data has been deleted.

What Your Partner CANNOT See

• The content of your messages or apps
• Your location
• Your contacts
• Your photos
• Anything you type

Disconnecting

You may disconnect from your partner at any time through Settings. Disconnecting:

• Immediately stops all data sharing
• Removes your partner's access to your usage data
• Does not require your partner's permission
• Allows both of you to continue using Threestrand independently

The Accessibility Service

What It Does

Threestrand's accessibility service detects when you open an app and checks if that app is allowed. If not, it redirects you back to your home screen.

What It Does NOT Do

• Read any text on your screen
• Access your messages, emails, or personal content
• Record what you type
• Take screenshots
• Access your passwords or private information

Technical Details

The accessibility service only receives these events:

• TYPE_WINDOW_STATE_CHANGED: Detects which app opened
• Package name: The technical identifier of the app (e.g., "com.instagram.android")

We set canRetrieveWindowContent to false, which means we technically cannot access screen content even if we wanted to.

On iPhone: Apple Screen Time

On iOS, Threestrand does not use an accessibility service. Blocking is built on Apple's Screen Time framework, which is designed so that apps like Threestrand never learn which apps you selected.

• When you choose apps to block or keep open, Apple gives Threestrand opaque tokens, not app names. Threestrand cannot read, store, or transmit the names of the apps you selected.
• The only time we know an app's name on iOS is when you type it yourself, for example when naming an app in a request so your partner knows what they are approving.
• Per-app usage numbers on iOS are rendered inside an Apple-sandboxed report on your device and are not readable, stored, or synced by Threestrand.
• You can revoke Threestrand's Screen Time access at any time in iOS Settings.

Data Retention

We keep your data only as long as needed:

When you delete your account, all personally identifiable data is removed within 30 days.

Data Storage and Security

Where Your Data Is Stored

Your data is stored on Firebase (Google Cloud) servers in the United States. Firebase provides:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest
• SOC 1, SOC 2, and SOC 3 compliance
• ISO 27001 certification

International Data Transfers

For users in the European Economic Area (EEA), United Kingdom, or Switzerland: your data is transferred to the United States. This transfer is protected by:

• Google's Standard Contractual Clauses
• Firebase's compliance with applicable data protection frameworks

Legal Basis for Processing (EEA Users)

If you're in the European Economic Area, we process your data based on:

• Contract performance: To provide the Threestrand service you requested when you created an account
• Consent: For optional analytics. You can decline during setup on Android, and withdraw at any time (see Withdraw consent under Your Rights for how, on each platform)
• Legitimate interest: For service security, fraud prevention, and improving Threestrand

Your Rights

You have the right to:

• Access: See what data we have about you
• Deletion: Delete your account and all associated data (Settings > Advanced > Delete My Account). See the account deletion instructions.
• Portability: Request your data in a machine-readable format
• Correction: Update your display name anytime
• Withdraw consent: Turn off analytics in Settings > Advanced on Android. On iPhone this switch arrives in an upcoming release; until then, email support@anchorph.one from your account email and we will switch analytics off for your account within a few days. Either route stops collection entirely, and blocking works exactly the same with analytics off.
• Disconnect: Leave your accountability partnership instantly
• Restriction: Request we limit how we process your data
• Object: Object to processing based on legitimate interest

To exercise these rights, use the in-app options or contact us at the address below.

Teens and Families

Who can use Threestrand

• Adults (18 and older) can use Threestrand on their own, with partners, or in a family.
• Teens (13 to 17) can use Threestrand only as a member of a family that includes their parent or legal guardian, who agrees to our Terms for them.
• Threestrand is not for children under 13. We ask for age when you set up Threestrand, we do not knowingly collect personal information from anyone under 13, and if we learn we have, we delete it.

What we collect about a teen

The same things we collect about any user (see Information We Collect), and nothing extra. We do not collect a teen's location, contacts, photos, messages, or anything they type into other apps. We never show a teen ads, and we never sell or share a teen's information for advertising.

Analytics are off for teens. The product and usage analytics described above are not collected for a teen account.

What a parent can see about their teen

A parent sees the same things any accountability partner sees (see What You Share With Your Partner):

• Whether the teen's protection is set up and holding
• The requests the teen sends, including any reason they type, and how those were answered
• The teen's app time limits and schedules
• When family time (Phones away) is running, and whether the teen used an emergency pass during it

A parent does not see the content of the teen's messages or apps, their location, their contacts, or which apps they use and for how long.

Parents' rights

A parent or guardian can ask to review their teen's information, have it deleted, or stop further collection, by emailing support@anchorph.one from the parent's account email. A teen can also delete their own account at any time (Settings > Advanced > Delete My Account); their parents are told when that happens.

Third-Party Services

Threestrand uses these third-party services:

We do not use any advertising SDKs or sell data to third parties.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes:

• We'll update the "Last Updated" date at the top
• For major changes, we'll notify you in the app

Continued use of Threestrand after changes constitutes acceptance of the updated policy.

Contact Us

Questions about this Privacy Policy?

• GitHub: github.com/hrweaver/anchor-legal
• Email: support@anchorph.one

Summary of Recent Changes

Version 2.1 (October 8, 2026)

• Renamed the app from Anchor to Threestrand. No change to what is collected or shared. Version 2.0 (September 25, 2026)
• Teens 13 to 17 can use Threestrand inside a family with their parent or guardian. Threestrand is not for children under 13.
• Added Teens and Families: what we collect about a teen (nothing extra, no analytics, no ads), what a parent can see, and parents' rights to review or delete their teen's information.
• App usage now stays on your phone: current versions no longer upload which apps you use or which blocked apps you tried to open, partners can no longer read that data, and the data uploaded by earlier versions is scheduled for deletion in October 2026.

Version 1.9 (August 2, 2026)

• Made the analytics opt-out accurate per platform. The switch has always existed on Android (Settings > Advanced); on iPhone it arrives in an upcoming release. Until it does, emailing support turns analytics off for your account, and we honor that immediately on our servers rather than waiting for an app update. Blocking, limits, and partner approvals are unaffected either way.

Version 1.8 (July 26, 2026)

• Redesigned partner sharing: partners now see your setup status, your requests, and your commitments. Current versions of Threestrand no longer show partners your app usage or blocked-app attempts. Added a transition note covering older app versions while usage syncing is wound down.

Version 1.7 (July 26, 2026)

• Expanded the Product & Usage Analytics examples to name the event types we record: screens visited within Threestrand, notification delivery and responses, settings changes, and sign-in attempt outcomes. Same rule as before: events about your use of Threestrand, never the content of your other apps.
• Added an iPhone section: iOS blocking uses Apple's Screen Time framework, which by design keeps the names of your selected apps hidden from Threestrand.

Version 1.6 (July 16, 2026)

• Disclosed product & usage analytics (behavioral events linked to your account, used to improve Threestrand)
• Clarified that analytics events are retained for trend analysis and irreversibly anonymized on account deletion

Version 1.4 (January 20, 2025)

• Added explicit partner consent disclosure
• Added data retention periods
• Added GDPR legal basis section
• Added international data transfer disclosure
• Added bug report data collection disclosure
• Added children's privacy section
• Clarified accessibility service limitations