What we do and don't collect

Parlin is built on one premise: your audio belongs to you. The macOS app captures, transcribes, cleans, and dictates entirely on your device. We do not run any servers that receive your audio, transcripts, or dictation history.

Data controller

The data controller for any personal data described in this policy is DevX Group LLC, a California limited liability company based in San Diego, California, USA. You can reach us at support@devxgroup.io.

Audio and transcripts

Audio capture happens locally on your Mac. Transcription runs on-device through Apple Silicon and WhisperKit. Cleanup runs through a small language model the app downloads once at first launch and stores on your Mac. Nothing from your microphone or your transcripts is sent to us. Ever.

What we do collect

• Name and email address, if you request the direct download, buy a direct license, or include them when you send feedback. We use them to provide the download, deliver your license key, send purchase or refund confirmations, and reply to your feedback.
• Order metadata from Lemon Squeezy when you buy a direct license: order ID, license ID, currency, and amount. We keep this so we can re-issue your license if you lose the email. We do not store card numbers or payment credentials. Lemon Squeezy is the merchant of record and handles payment processing.
• Anonymous web analytics on this site: page views, referrer source, approximate location, device category, browser, and two named actions: buy button clicks and completed download requests. The events contain no name, email, order ID, license key, audio, or transcript content. Vercel Web Analytics uses no cookies and cannot follow a visitor across websites or across days.

What we don't collect

• Audio. Ever.
• Transcripts. Ever.
• Dictation history.
• Files you drop on the app.
• Your custom dictionary entries.
• IP addresses linked to individual users.
• Device identifiers beyond what's in your license key activation.

Network requests the app makes

The Parlin app itself only talks to the network in these situations:

• Model downloads. Whisper speech models, the Parakeet English dictation model, the speaker-diarization model, and the on-device cleanup language model download from Hugging Face's CDN. Parakeet is the default dictation engine, so its download starts on first launch; the rest download when you first use the feature that needs them. These are plain file downloads; your audio and text are never part of them.
• Optional Ollama integration. If you point Parlin at a local Ollama, transcripts go to 127.0.0.1 on your own machine and nowhere else.
• Media URLs you paste. The app fetches the URL you typed (in the standalone build, optionally through a locally installed yt-dlp).
• Software updates (standalone build). A daily Sparkle check against getparlin.com for a new version. No personal data is included.
• License validation (standalone build). Your license key and a device identifier for seat counting are validated with Lemon Squeezy. Never audio or transcripts.
• Support email. The in-app bug report button opens a visible draft in your chosen email app. Parlin does not send it. If you choose to send the draft, your email provider delivers your description and the visible system details to our support inbox. Nothing is attached automatically.

Cookies and tracking

This website does not use cookies for analytics or advertising. Vercel Web Analytics creates a daily rotating hash from each request for aggregate counts, then discards it after 24 hours. We do not run session replay, heatmaps, ad pixels, remarketing, social tracking, GA4, or PostHog. We do not join website activity to your name or email address.

Data retention

• Direct download requests (name, email, source, and browser user agent): kept for up to 3 years after the most recent download unless the record is also needed for a purchase or support request.
• Order data (email, order ID, license ID, amount): kept for 7 years to meet tax and accounting obligations, then deleted.
• Bug reports and support emails: kept in the support inbox for up to 3 years after the last message in the thread, then deleted. You can ask us to delete them sooner.
• No audio, transcript, or dictation data is ever stored on our servers. There is nothing to retain.

Your rights (GDPR and CCPA)

Regardless of where you live, you can contact us to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data ("right to be forgotten").
• Export your data in a portable format.
• Object to how we process your data.
• Opt out of any future marketing emails.

To exercise any of these rights, email support@devxgroup.io. We respond within 7 calendar days.

If you are in the European Economic Area, you also have the right to lodge a complaint with your local data protection authority. If you are in California, you have rights under the California Consumer Privacy Act (CCPA) including the right to know what personal information we collect, the right to delete it, and the right to opt out of any sale of your information. We do not sell personal information.

Data breach notification

If we discover a breach that compromises your personal data, we will notify affected users by email within 72 hours of becoming aware of it, or as soon as practically possible. The notification will describe what happened, what data was involved, what we're doing about it, and what you can do to protect yourself.

Third-party services

We use the following third-party services to operate:

• Lemon Squeezy: payment processing and license key management for direct purchases.
• Resend: transactional email delivery (license keys, purchase confirmations, and refund confirmations).
• Vercel: website hosting.
• Supabase: storage for direct download requests, orders, and license records.

Each of these services has its own privacy policy. We choose services that we believe handle data responsibly, but we are not responsible for their practices.

Children

Parlin is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has submitted personal data to us, contact us and we'll delete it promptly.

Changes to this policy

If we make material changes to this policy, we'll notify existing customers by email before the changes take effect. The "Updated" date at the top of this page always reflects when the policy last changed.

Contact

Questions or requests: support@devxgroup.io. We respond within 7 days.