What we do and don't collect

Parlin is built on one premise: your audio belongs to you. The macOS app captures, transcribes, cleans, and dictates entirely on your device. We do not run any servers that receive your audio, transcripts, or dictation history.

Data controller

The data controller for any personal data described in this policy is DevX Group LLC, a California limited liability company based in San Diego, California, USA. You can reach us at support@devxgroup.io.

Audio and transcripts

Audio capture happens locally on your Mac. Transcription runs on-device through Apple Silicon and WhisperKit. Cleanup runs through a small language model the app downloads once at first launch and stores on your Mac. Nothing from your microphone or your transcripts is sent to us. Ever.

To tell your lines from the other person's in a meeting, Parlin keeps a small numeric signature of your voice, built on your Mac from your own dictation recordings. It is a file in the app's own folder, it never leaves your Mac, and you can rebuild or delete it from Settings.

Parlin Recorder for iPhone

Parlin Recorder records audio on your iPhone and keeps it in the app's own storage until you delete it. Transcription runs on your iPhone through Apple's on-device speech recognition. The app has no account, no analytics and no advertising code, and it sends nothing to us. A recording leaves your iPhone only when you share it yourself, for example by AirDrop to Parlin on your Mac. The app stores your settings, such as audio quality and whether you have seen the recording reminder, on your iPhone only.

Recording other people

Parlin and Parlin Recorder can record meetings, calls and lectures. In many places the law requires that everyone being recorded agrees first. This includes several US states, such as California, Florida, Illinois, Maryland, Massachusetts, Montana, New Hampshire, Pennsylvania and Washington, and the European Union, where a recorded voice is personal data. You are responsible for telling people and getting their consent where the law requires it. We never receive your recordings, so we cannot do this for you.

What we do collect

• Name and email address, if you request the direct download, buy a direct license, or include them when you send feedback. We use them to provide the download, deliver your license key, send purchase or refund confirmations, and reply to your feedback.
• Order metadata from Lemon Squeezy when you buy a direct license: order ID, license ID, currency, and amount. We keep this so we can re-issue your license if you lose the email. We do not store card numbers or payment credentials. Lemon Squeezy is the merchant of record and handles payment processing.
• Which link brought you here, when you request the direct download or start a checkout: the campaign tags on the address you arrived at (utm_source, utm_medium, utm_campaign, utm_content, utm_term), the page you landed on, and the site that referred you. We store these on the same row as your name and email so we can tell which post or link actually reaches people. They are captured once per visit, held in your browser's session storage until you fill in the download or buy form, and discarded when you close the tab if you never do. Arrive with no campaign tags and these are empty.
• Anonymous web analytics on this site: page views, referrer source, approximate location, device category, browser, and three named actions: buy button clicks, completed download requests, and checkout falling back to our Lemon Squeezy share link. The events contain no name, email, order ID, license key, audio, or transcript content. Vercel Web Analytics uses no cookies and cannot follow a visitor across websites or across days.

What we don't collect

• Audio. Ever.
• Transcripts. Ever.
• Dictation history.
• Files you drop on the app.
• Your custom dictionary entries.
• IP addresses linked to individual users.
• Device identifiers beyond what's in your license key activation.

Network requests the app makes

The Parlin app itself only talks to the network in these situations:

• Model downloads. Whisper speech models, the Parakeet English dictation model, the speaker-diarization model, and the on-device cleanup language model download from Hugging Face's CDN. Parakeet is the default dictation engine, so its download starts on first launch; the rest download when you first use the feature that needs them. These are plain file downloads; your audio and text are never part of them.
• Optional Ollama integration. If you point Parlin at a local Ollama, transcripts go to 127.0.0.1 on your own machine and nowhere else.
• Freeing memory (standalone build). When Parlin is slow because other apps' local AI models fill your Mac's memory, it asks your own Ollama, on 127.0.0.1, which models are loaded and tells idle ones to unload. LM Studio, also on 127.0.0.1, is only asked to unload when you press Free memory. Nothing leaves your machine and no audio or text is sent. You can turn this off in Settings, under Memory.
• Media URLs you paste. The app fetches the URL you typed (in the standalone build, optionally through a locally installed yt-dlp).
• Software updates (standalone build). A daily Sparkle check against getparlin.com for a new version. No personal data is included.
• License validation (standalone build). Your license key and a device identifier for seat counting are validated with Lemon Squeezy. Never audio or transcripts.
• Support email. The in-app bug report button opens a visible draft in your chosen email app. Parlin does not send it. If you choose to send the draft, your email provider delivers your description and the visible system details to our support inbox. Nothing is attached automatically.

Cookies and tracking

This website does not use cookies for analytics or advertising. Vercel Web Analytics creates a daily rotating hash from each request for aggregate counts, then discards it after 24 hours. We do not run session replay, heatmaps, ad pixels, remarketing, social tracking, GA4, or PostHog. We do not join website activity to your name or email address.

Data retention

• Direct download requests (name, email, source, browser user agent, and the campaign tags, landing page, and referrer described above): kept for up to 3 years after the most recent download unless the record is also needed for a purchase or support request.
• Order data (email, order ID, license ID, amount): kept for 7 years to meet tax and accounting obligations, then deleted.
• Bug reports and support emails: kept in the support inbox for up to 3 years after the last message in the thread, then deleted. You can ask us to delete them sooner.
• No audio, transcript, or dictation data is ever stored on our servers. There is nothing to retain.

Why we may use your data (legal bases)

If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases under the GDPR:

• Contract (Art. 6(1)(b)): your name, email and order data, to provide the download, deliver and re-issue your license, and handle refunds.
• Legal obligation (Art. 6(1)(c)): keeping order records for tax and accounting.
• Legitimate interests (Art. 6(1)(f)): anonymous site analytics, knowing which link brought you to a download or checkout, keeping the service secure, and answering your support messages. You can object to this use at any time.

International transfers

DevX Group LLC is based in the United States, and the services listed below may process data in the United States. When personal data moves from the EEA, the UK or Switzerland to the United States, we rely on the EU-US Data Privacy Framework (and its UK and Swiss extensions) where the provider is certified, or on the Standard Contractual Clauses in the provider's data processing terms. Ask us for a copy of the relevant safeguards at privacy@devxgroup.io.

EU and UK representative

Our representative in the European Union and the United Kingdom under Article 27 of the GDPR and the UK GDPR is being appointed. Until it is named here, contact privacy@devxgroup.io.

Your rights (GDPR and CCPA)

Regardless of where you live, you can contact us to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data ("right to be forgotten").
• Export your data in a portable format.
• Object to how we process your data.
• Opt out of any future marketing emails.

To exercise any of these rights, email support@devxgroup.io. We respond within 7 calendar days.

If you are in the European Economic Area, the United Kingdom or Switzerland, you also have the right to lodge a complaint with a data protection authority, in particular where you live or work, or where you believe your rights were infringed. In the UK that is the Information Commissioner's Office (ico.org.uk). If you are in California, you have rights under the California Consumer Privacy Act (CCPA) including the right to know what personal information we collect, the right to delete it, and the right to opt out of any sale of your information. We do not sell personal information.

Data breach notification

If we discover a breach that compromises your personal data, we will notify affected users by email within 72 hours of becoming aware of it, or as soon as practically possible. The notification will describe what happened, what data was involved, what we're doing about it, and what you can do to protect yourself.

Third-party services

We use the following third-party services to operate:

• Lemon Squeezy: payment processing and license key management for direct purchases.
• Resend: transactional email delivery (license keys, purchase confirmations, and refund confirmations).
• Vercel: website hosting.
• Supabase: storage for direct download requests, orders, and license records.

Each of these services has its own privacy policy. We choose services that we believe handle data responsibly, but we are not responsible for their practices.

Children

Parlin is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has submitted personal data to us, contact us and we'll delete it promptly.

Changes to this policy

If we make material changes to this policy, we'll notify existing customers by email before the changes take effect. The "Updated" date at the top of this page always reflects when the policy last changed.

Contact

Questions or requests: support@devxgroup.io. We respond within 7 days.