Privacy policy

Last updated: 25 September 2026

Thimble is made by SwiftLab Ltd (“we”). This policy covers the Thimble apps for iPhone, iPad and Mac and this website. If you have a question about it, email hello@swiftlab.co.uk.

The short version

• Your App Store Connect and Google Play credentials stay on your devices and are only ever sent to Apple and Google.
• Thimble talks to Apple and Google directly from your device. We don’t copy your apps, sales or analytics to our servers.
• We don’t sell your data, and this website sets no cookies.

In the apps

Store credentials. Your App Store Connect API key (and, for Android apps, your Google Play credentials) are stored in your device’s Keychain. They’re used to talk to Apple’s and Google’s APIs directly from your device.

Your app data. Builds, versions, reviews, sales and analytics are fetched from Apple and Google by your device and shown there. Settings can sync between your devices through your own iCloud account.

Notifications. To tell you when a build is ready or App Review makes a decision, your device registers with our notification service (hosted on Google Firebase) using an anonymous identifier. Apple sends the events for your apps to that service, which forwards them to your devices as notifications. It keeps only what it needs to deliver them.

Subscriptions. Purchases are handled by Apple (in the app) or by RevenueCat and Stripe (on this website). RevenueCat keeps an anonymous customer identifier and your subscription status so Thimble can tell whether Pro is active.

Crash reports. If Thimble crashes, a crash report (device model, OS version and what the app was doing) is sent to Bugsnag so we can fix it. It doesn’t include your credentials or your app data.

AI features. If you turn on an AI feature, you add your own provider’s key, and the text you ask it about is sent to that provider under their terms.

On this website

This website sets no cookies. If analytics are enabled, they’re provided by Plausible, which is cookieless and doesn’t collect personal data.

If you subscribe on this website, checkout is provided by RevenueCat and payments are processed by Stripe. They receive your email address and payment details to take payment, send receipts and let you manage your subscription. We never see your card details.

Your rights

You can ask us for a copy of the personal data we hold about you, or ask us to delete it, by emailing hello@swiftlab.co.uk. You also have the right to complain to the UK Information Commissioner’s Office.

Changes

If this policy changes, we’ll update the date at the top of this page.