Skip to content
๐Ÿ’ฌ

Thicket Commons

Halcyon Works

4.83 ยท 3.4M installsSmall circles only

Thicket Commons gives small groups a private space with no feed, no algorithm, and no public profile, so a conversation stays with the people in it.

Installs
3.4M+
Version
1.3.0
Size
32.7 MB
Updated
Jun 17, 2026
Get from Google Play
Signing certificate on record

Preview

Written descriptions of each screen โ€” we do not host screenshot images for this listing.

๐Ÿ’ฌ
A circle timeline in plain chronological order
๐Ÿ’ฌ
Invite screen with no public discovery
๐Ÿ’ฌ
Archived circle exported as a single file
๐Ÿ’ฌ
Photo sharing through the system media picker

About this app

Thicket Commons is a social app for groups that already know each other. A circle holds up to fifty people, invitations are the only way in, and posts appear in the order they were written โ€” there is no ranking model, no recommendation, and nothing to discover. There is no public profile, no follower count, and no way to search for a person you do not already share a circle with, which forecloses most of the behaviours that make larger social apps exhausting. Circles can be archived and exported as a plain file, so a group that winds down keeps its own history.

It is built for the group that is currently limping along in a messaging thread: a family, a book club, a band, a street. It is genuinely bad at anything else โ€” you cannot build an audience, promote a thing, or reach strangers, and Halcyon treats that as the specification rather than a limitation. If you want reach, this is the wrong app, and the cooperative will tell you so on the store listing.

Halcyon Works distributes through Google Play and F-Droid. The cooperative's APKBrowse publisher verification is still in progress, so this listing is maintained from its public release feed and checked against published checksums rather than an attestation given to us directly โ€” that is what the New Uploader label records, and it says nothing about the quality of the app. Halcyon has made no statement authorizing mirrors of Thicket Commons, so APKBrowse serves no direct download; the mirror below is unavailable and listed for identification only.

Before installing, note the permissions and the storage model. Camera and media access exist for sharing photos into a circle, both are optional, and images are uploaded only when you choose one โ€” the app has no gallery scanner and never indexes your library in the background. Version 1.3.0 requires Android 8.0 or newer. Circle history is held on Halcyon's servers so that new members can read back, which is a real difference from the cooperative's other apps and worth knowing if server-side storage is a dealbreaker for you; the export function exists partly as an answer to that. The F-Droid build is signed with the F-Droid key rather than Halcyon's, so it cannot update over the Play build in either direction. Rolling back to 1.1.0 works on the same key but loses the media picker rewrite that fixed most of the app's photo-sharing complaints.

Community ReviewedNew Uploader

What's New in v1.3.0

Mirror flagged unavailable after review; the cooperative confirmed it authorizes no mirrors of this app.

  • Media picker rewritten to use the system photo picker
  • Circle export produces a single readable archive
  • Scoped media permissions replacing broad storage access
  • Fixed invite links expiring an hour early

Version history

v1.3.0Latest
Signature continuous

Jun 17, 2026 ยท 32.7 MB ยท Android API 26โ€“35 ยท code 130

Mirror flagged unavailable after review; the cooperative confirmed it authorizes no mirrors of this app.

  • Media picker rewritten to use the system photo picker
  • Circle export produces a single readable archive
  • Scoped media permissions replacing broad storage access
  • Fixed invite links expiring an hour early
INTERNETPOST_NOTIFICATIONSREAD_MEDIA_IMAGESCAMERA

SHA-256 3dacd6d5d797fedf1a2c5204c0df5161aa9b7803805a0bfbc14514b1f78440cc

v1.1.0
Signature continuous

Feb 5, 2026 ยท 30.4 MB ยท Android API 24โ€“34 ยท code 110

Last build using broad storage access; predates the media picker rewrite.

  • Added circle archiving for groups that wind down
  • Chronological timeline hardened against clock skew
INTERNETPOST_NOTIFICATIONSREAD_EXTERNAL_STORAGE

SHA-256 7313de0a19a856c2543382fa6f835b64f83bbcd172672f7ed238a8705876b7b9

Will it run on your device?

CompatibilityVery likely to run

98%

  • Runs on a broad range of modern Android versions.
  • Multiple CPU architectures are covered.
  • Optimized for more than one screen class.
  • Aligned with the latest Android target SDK expectations.
What changed in this release
Size delta
+2.3 MB
Added permissions
READ_MEDIA_IMAGES, CAMERA
Removed permissions
READ_EXTERNAL_STORAGE

Thicket Commons questions, answered

Is it safe to install Thicket Commons from an APK?

Halcyon has not authorized any mirror of this app, so a direct download you find elsewhere is unofficial and unverified. Use Google Play or F-Droid, which are the only two channels the cooperative publishes to.

Why is this listed as a New Uploader?

Halcyon Works has not finished publisher verification with APKBrowse, so we maintain this listing from the cooperative's public release feed rather than from a signed attestation. The label describes the state of our confirmation process, not a concern about the app.

Will Thicket Commons work on my Android version?

Version 1.3.0 requires Android 8.0 (API 26) or newer and ships arm64-v8a and armeabi-v7a binaries, covering phones and tablets. Version 1.1.0 supported Android 7.0 and is still listed, though it predates the media picker rewrite and no longer receives fixes.

Where does my circle's history actually live?

On Halcyon's servers, so that someone invited later can read back through the conversation. That is a genuine difference from the cooperative's offline-first apps, and the export function exists so a group can take its history and leave at any point.

Can I switch between the Play build and the F-Droid build?

Not by updating over the top โ€” F-Droid builds from source and signs with its own key, so Android sees a different signer and blocks the update. You would need to uninstall one and install the other, then sign back in; your circles are on the server, so nothing is lost.

Installation Guide

1

Open Settings on your Android device

2

Go to Security โ†’ Unknown sources (or Install unknown apps)

3

Enable "Allow from this source" for your browser or file manager

4

Open the downloaded APK file from your Downloads folder

5

Tap "Install" and wait for installation to complete

6

Launch the app from your home screen

Make sure to re-enable Unknown Sources restrictions after installation for security.

How to install this safely

How to verify the file you downloaded

Before you install anything, confirm the file is the one described here. On a computer, run shasum -a 256 your-download.apk (macOS or Linux) or certutil -hashfile your-download.apk SHA256 (Windows), then compare the output character-for-character with the SHA-256 on this page. If a single character differs, the file is not the build we recorded โ€” delete it.

What the signing certificate proves

Every Android app is signed with a private key that only its developer holds. The fingerprint on this page is a hash of the matching public certificate, and it proves continuity rather than identity: it tells you a build came from whoever signed the earlier ones. Android enforces this at install time โ€” if a package claiming to be com.halcyonworks.thicket is signed with a different key, the system will refuse to install it over your existing copy. A fingerprint that changes between releases is worth pausing on, because a repackaged app that has been modified by someone else cannot keep the original signature.

How to roll back to an earlier version

If the current release misbehaves, 1.1.0 is the last build before it. Android will not install an older version code over a newer one, so you must uninstall Thicket Commons first โ€” which clears its local data unless you have a backup. Reinstall the older APK only if its signing fingerprint matches the build you already trust, and check the API range: an older release may target an Android version your device has moved past.

Why we list sources instead of hosting everything

The official store channel is almost always the right choice: it updates automatically and carries the publisher's own distribution guarantees. A direct APK is useful when a device has no store access, when a rollout has not reached your region, or when you need a specific version โ€” and only when the publisher has authorized that copy. APKBrowse does not list pirated, cracked, or unauthorized rebuilds of Thicket Commons, and a listing is removed when the evidence for it stops holding up.

Get Thicket Commons

Every source we list for com.halcyonworks.thicket is legality-reviewed. Pirated or cracked builds are never offered.

Other sources

F-Droid listing

official

Built from source by F-Droid and signed with the F-Droid key, so fingerprints differ from the Play build.

Community mirror page

community mirror
Unavailable

Unavailable and never authorized by the cooperative; listed for identification only.

We check legality and signature continuity, but device behaviour still varies. Install at your own discretion.

App Information

Developer
Halcyon Works
Category
Social
Android
8.0+
Architectures
arm64-v8a, armeabi-v7a
Version
1.3.0 (code 130)
Size
32.7 MB
Updated
Jun 17, 2026
Package name
com.halcyonworks.thicket

Security Verification

File integrity
SHA-256 recorded
Signing certificate
Fingerprint on record
Official source
Google Play

We record provenance; we do not run malware scans. Verify the hash yourself before installing.

SHA-256 Hash

3dacd6d5d797fedf1a2c5204c0df5161aa9b7803805a0bfbc14514b1f78440cc

Signing certificate

97:82:AE:DB:6B:A3:37:AB:1B:02:74:41:7E:5E:B6:9A:AF:A4:D7:CB

Permissions Required

INTERNET
POST_NOTIFICATIONS
READ_MEDIA_IMAGES
CAMERA

Previous Versions

Signature verified

The signing certificate fingerprint for this release is on record, so a build that does not match it did not come from this publisher.

Report a problem with this listing

A listing is only as good as its corrections. If a source is broken, a signature looks wrong, or this app should not be here, tell the moderation team.

Report a problem