Third Arm Privacy Policy
Last updated: May 18, 2026
This Privacy Policy explains what information Third Arm collects, how we use it, when we share it, and what choices you have. We try to collect only what is needed to provide account access, sync, subscription handling, and the app features you choose to use.
1. Information we collect
Account information
If you sign in, we collect your email address, display name or profile name, sign-in provider details, and unique user ID.
Authentication is handled by Firebase Authentication. We do not collect or store passwords in plain text.
User content
We collect the entries you create in the app, including quick notes, diary entries, reminders, habits, links, subscriptions, payments, flash cards, and study timers. Images in the Images category are stored locally on your Mac instead of in Firestore.
Plan, settings, and technical data
We may collect your plan tier, renewal-related metadata, limited Apple transaction identifiers used to verify paid plans, app settings such as notification and appearance choices, and technical information such as IP address, access timestamps, and basic diagnostics collected through Firebase and related infrastructure.
We do not collect your payment card details. Apple processes subscription payments.
2. How we use information
- Authenticate your account and keep you signed in.
- Store, retrieve, and sync your content across sessions and devices.
- Verify paid plans, enforce storage limits, and restore purchases.
- Deliver app features such as notifications, due-date views, account management, and support.
- Protect the service, detect abuse, troubleshoot issues, and comply with legal obligations.
Google account information received through Sign in with Google is used only to authenticate you and provide Third Arm features, subject to the Google API Services User Data Policy and Limited Use requirements where applicable.
3. Optional AI Connect on Pro+
Third Arm does not include a built-in AI assistant. Pro+ includes optional AI Connect features for users who want to bring their own external AI tools.
- We may prepare a ready-to-paste prompt or a read-only context snapshot from the content you choose to use.
- We may generate reusable connection tokens for your account so an external AI tool can request read-only context through a dedicated API.
- Your data is shared with a third-party AI provider only when you decide to export or connect to that provider.
External AI providers are independent third parties. Their own privacy policies, terms, and age restrictions apply when you use them. These optional AI Connect features are available only on Pro+.
4. Sharing
Firebase and Google: Used for authentication, data storage, cloud functions, hosting, and related infrastructure. See Firebase Terms and Firebase Privacy.
Apple: Used for subscription billing and transaction verification.
External AI tools you choose: Used only if you intentionally use Pro+ AI Connect features.
Legal or safety reasons: If required by law or reasonably necessary to protect rights, safety, or the integrity of the service.
5. Retention and deletion
We retain account and synced content data while your account is active or as needed to provide the service. If you delete your account, we delete your data promptly, subject to backup retention, fraud prevention, and legal requirements.
Firebase or other infrastructure providers may keep backup copies for a limited period, which may extend up to 180 days. Local images remain on your Mac until you delete them or the app removes them as part of account deletion.
6. Data transfers and security
Your data may be processed in countries where Google, Apple, or other service providers operate, including the United States or other global regions. We rely on those providers' security and compliance measures, including encryption in transit and at rest where offered.
No system is perfectly secure, but we take reasonable steps to protect the information we process.
7. Children and families
Third Arm can be used by children and adults. If a child uses the app in a region where parental permission is required for personal data processing, a parent or legal guardian should review this policy and provide the required consent.
If you believe we collected a child's personal information without the consent required by law, contact us and we will investigate and, where appropriate, delete the information. Optional AI Connect features may involve third-party services that have their own age rules and may not be appropriate for children.
8. Changes to this policy
We may update this Privacy Policy from time to time. Changes will be posted here with a new "Last updated" date. Continued use after changes means acceptance.
9. Contact
Email: tobiasdevc@gmail.com