Legal

Privacy Policy

Application: Parley  ·  Website: getparley.app  ·  Contact: support@getparley.app  ·  Effective: 17 May 2026  ·  Version 1.0

The short version. Your audio recordings, transcripts and AI summaries live on your Mac only. We don't run servers that store them, and we can't access them. The only things we ever touch are crash diagnostics (scrubbed of content), your device licence ID, and any email you send us.

Overview — What This Policy Covers

This Privacy Policy explains how Troy Maxwell Tompkins, an Australian sole trader (ABN 76 078 692 390) (‘Parley’, ‘we’, ‘us’, ‘our’), collects, uses, discloses and safeguards personal information in connection with the Parley macOS desktop application (‘App’) and the website at getparley.app (‘Site’). It also describes the rights available to you under applicable privacy laws, including the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (‘APPs’), and, where applicable, the EU/UK General Data Protection Regulation (‘GDPR’) and the California Consumer Privacy Act/California Privacy Rights Act (‘CCPA/CPRA’).

By downloading, installing or using the App, you acknowledge that you have read and understood this policy.

1. Who We Are (Controller / APP Entity)

Troy Maxwell Tompkins (ABN 76 078 692 390) is the data controller (GDPR, where applicable) and APP entity (Australian Privacy Act) responsible for personal information collected through the App and Site.

Privacy contact: support@getparley.app (subject: ‘Privacy Request’).

2. Local-First Architecture — What Stays on Your Device

Parley is designed to keep your sensitive content on your device:

  • Audio recordings are captured using your Mac's microphone and stored exclusively in the App's local data folder on your computer.
  • Transcripts are generated entirely on-device using a local Whisper model. No audio file is uploaded to any server — not ours, not anyone else's — for the purpose of transcription.
  • AI summaries are stored locally after generation (see Section 4.1 for the summary-generation process).
  • Local data is stored unencrypted in the App's data folder. You are responsible for the physical security and access controls of your own computer, including macOS account passwords and full-disk encryption (FileVault).

Because we do not operate servers that store your audio or transcript content, we cannot provide, restore, access, or delete that content on your behalf. Uninstalling the App and deleting the App's local data folder (see Section 10) removes all locally stored content.

3. What We Collect and How

3.1 Data We Collect or Process Directly

We do not operate user accounts or login servers. The only data Parley (as a company) handles directly is:

  • Device identifier (UUID): A random UUID is generated locally by the App and stored on your device. It is sent to Lemon Squeezy solely to activate your licence and enforce the three-device limit. We do not link this UUID to your identity.
  • Crash and error diagnostics: Sentry collects anonymised crash reports when the App encounters an error. These reports are scrubbed to exclude audio content, transcript text, file paths, API keys and email addresses before transmission. See Section 4.3.
  • Enquiry / support communications: If you contact us by email, we collect your email address and the content of your message to respond to you.

3.2 Data We Do NOT Collect

To be unambiguous, we do not collect or store:

  • Your audio recordings.
  • Your transcripts or AI summaries.
  • Payment card numbers, bank account details or billing history (handled exclusively by Lemon Squeezy — see Section 4.2).
  • Your name, email address or other account information on our servers (your email is held by Lemon Squeezy for receipt and licence delivery).
  • Behavioural analytics, usage telemetry, advertising identifiers or tracking cookies.

We do not sell, rent or trade personal information to any third party for marketing or advertising purposes. There is no advertising in the App.

4. Third-Party Sub-Processors

4.1 Anthropic (AI Summary Feature)

Service: Claude API, operated by Anthropic, PBC, a company incorporated in the United States.

What is sent: When you choose to generate an AI summary, the text of your transcript (and only the text — not the audio file) is transmitted over HTTPS to Anthropic's API for processing. Anthropic returns the generated summary, which is then stored locally on your device.

Why: To power the AI summarisation feature. Transcript text never leaves your device for any other purpose.

Anthropic's privacy policy and data-use terms are available at anthropic.com/legal/privacy and anthropic.com/legal/aup. You should review Anthropic's current API data-retention and usage policies before using the summary feature, particularly if your recordings contain sensitive or regulated information.

4.2 Lemon Squeezy (Payments, Billing & Licence Activation)

Service: Lemon Squeezy is the Merchant of Record for Parley subscriptions. Lemon Squeezy LLC is incorporated in the United States.

What is sent / processed by Lemon Squeezy:

  • Your payment card or other payment instrument details (we never see or store these).
  • Your email address (for receipt and licence key delivery).
  • The device UUID described in Section 3.1 (for licence activation and device-limit enforcement).
  • Billing address and other information required for payment processing and tax compliance.

Why: Lemon Squeezy acts as the seller of record and handles all payment processing, sales tax calculation, and remittance on our behalf. We receive only confirmation that a subscription is active or inactive.

Lemon Squeezy's privacy policy is available at lemonsqueezy.com/privacy. Lemon Squeezy's terms govern the payment transaction between you and Lemon Squeezy as merchant.

4.3 Sentry (Crash & Error Diagnostics)

Service: Sentry, operated by Functional Software, Inc. (Sentry.io), incorporated in the United States.

What is sent: Anonymised crash reports and application error logs. Before any data is sent to Sentry, the App scrubs reports to remove audio content, transcript text, file paths, API keys and email addresses. Reports contain technical diagnostic information such as stack traces, App version, macOS version, and device hardware class.

Why: To identify and fix software defects.

Sentry's privacy policy is available at sentry.io/privacy.

5. International Data Transfers

Anthropic, Lemon Squeezy and Sentry are based in the United States. Data transferred to them may be processed in the US or other countries outside Australia, the EEA/UK or California.

  • Australian users: Transfer of personal information outside Australia is regulated by APP 8. We take reasonable steps to ensure our sub-processors provide a comparable level of privacy protection to the APPs. By using the App, you consent to such transfer to the extent required.
  • EU/UK users (where applicable): Transfers to Anthropic, Lemon Squeezy and Sentry are made pursuant to Standard Contractual Clauses (SCCs) or equivalent transfer mechanisms approved under GDPR and UK GDPR, as published by each sub-processor in its data processing terms.
  • California users: Data is not ‘sold’ or ‘shared’ for cross-context behavioural advertising within the meaning of CCPA/CPRA.

Where EU GDPR or UK GDPR applies, we rely on the following legal bases:

  • Contract performance (Article 6(1)(b)): Processing of the device UUID and coordination with Lemon Squeezy necessary to deliver your subscription and enforce licence terms.
  • Legitimate interests (Article 6(1)(f)): Sentry crash diagnostics to maintain software quality and security. We have balanced this against your interests and consider the risk minimal given the scrubbing measures described in Section 4.3.
  • Consent (Article 6(1)(a)): Transmission of transcript text to Anthropic for AI summaries. You provide consent each time you choose to generate a summary. You may decline this feature without affecting your ability to use transcription.
  • Legal obligation (Article 6(1)(c)): Where processing is required by applicable law.

7. Your Privacy Rights

7.1 Rights Available to All Users

  • Access: You may request a summary of any personal information we hold about you directly (i.e., support correspondence).
  • Correction: You may ask us to correct inaccurate personal information we hold.
  • Deletion: You may ask us to delete personal information we hold directly. For data held by sub-processors on your behalf, see Section 10.

7.2 Additional Rights — EU/UK GDPR

Where GDPR or UK GDPR applies, you additionally have the right to:

  • Data portability (Article 20): Receive personal data we hold in a structured, machine-readable format (applicable to data processed on the basis of consent or contract).
  • Restriction of processing (Article 18): Request that we restrict processing in certain circumstances.
  • Object (Article 21): Object to processing based on legitimate interests.
  • Withdraw consent: Where processing is based on consent (AI summary feature), you may withdraw at any time by simply not using that feature. This does not affect the lawfulness of processing before withdrawal.
  • Lodge a complaint: With your local supervisory authority (e.g., the Office of the Australian Information Commissioner (OAIC), the UK Information Commissioner's Office (ICO), or your EU Member State supervisory authority).

7.3 California (CCPA/CPRA) Rights

California residents have the right to:

  • Know: What personal information we collect, use, disclose and sell (we do not sell personal information).
  • Delete: Request deletion of personal information we hold.
  • Correct: Request correction of inaccurate personal information.
  • Opt out of ‘sale’ or ‘sharing’: We do not sell or share personal information for cross-context behavioural advertising.
  • Non-discrimination: We will not discriminate against you for exercising CCPA/CPRA rights.

To submit a verifiable consumer request, email us at support@getparley.app with subject ‘CCPA Privacy Request’.

7.4 Australian Privacy Act Rights

Under the Australian Privacy Act 1988 and the APPs, you have the right to:

  • Access personal information we hold about you (APP 12).
  • Correct personal information that is inaccurate, out of date, incomplete or misleading (APP 13).
  • Make a complaint to us, and if unresolved, to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

To exercise any right, contact us at support@getparley.app with subject ‘Privacy Request’. We will respond within 30 days.

8. Children's Privacy

Parley is intended for use by professionals and is not directed to individuals under the age of 18. We do not knowingly collect personal information from persons under 18. If you believe we have inadvertently collected such information, please contact us immediately at support@getparley.app and we will delete it promptly.

9. Data Retention

Local data (audio, transcripts, summaries): Retained on your device until you delete it or uninstall the App. We have no ability to access or delete this data.

Anthropic (transcript text for AI summary): Anthropic processes transcript text to return the summary and retains data in accordance with its current API data-use policy. At the time of writing, Anthropic does not use API content to train its models by default. Please review Anthropic's current policy at anthropic.com/legal/privacy.

Lemon Squeezy (payment & licence data): Retained by Lemon Squeezy in accordance with its privacy policy and applicable financial record-keeping laws. We receive confirmation of subscription status only; we do not retain payment card details.

Sentry (crash reports): Retained for 90 days before automatic deletion.

Support correspondence: We retain emails and support communications for 2 years after resolution, unless a longer retention is required by law.

Device UUID: Retained locally until you uninstall the App. Lemon Squeezy retains the UUID for licence management purposes in accordance with its policy.

10. Deleting Your Data and Uninstalling

To remove all locally stored content:

  • Cancel your subscription via Lemon Squeezy (see Section 7 of the Terms of Service).
  • Quit the App.
  • Delete the App from your Applications folder.
  • Delete the App's data folder, located at: ~/Library/Application Support/Parley/

Deleting the App and its data folder removes all locally stored audio, transcripts and summaries permanently. This action cannot be undone.

To request deletion of data held by sub-processors:

11. Security

We implement reasonable technical and organisational measures to protect any personal information we hold or process. For data processed by sub-processors, we rely on those sub-processors' own security measures (see Sections 4.1–4.3).

Local data on your Mac is stored unencrypted in the App's data folder. We strongly recommend:

  • Enabling macOS FileVault full-disk encryption.
  • Using a strong macOS account password and enabling automatic screen lock.
  • Ensuring your Mac is physically secure and not accessible to unauthorised persons.

No security measure is foolproof. We cannot guarantee the absolute security of any data transmitted over the internet or stored on your device.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Posting the updated policy on getparley.app with a revised effective date; and
  • Displaying an in-App notification at first launch after the change; and/or
  • Sending an email to the address on record with Lemon Squeezy, where we are able to do so.

Your continued use of the App after the effective date of a revised policy constitutes your acceptance of the changes. If you do not agree to the changes, you must cease using the App and cancel your subscription.

13. Contact Us

Privacy enquiries: support@getparley.app (subject: ‘Privacy Request’).

Website: getparley.app.

↑ Back to top