The App
Audio is processed entirely on your device using Apple's Neural Engine. Your recordings and transcripts are never sent to our servers.
On-Device Processing
ParrotScribe uses WhisperKit for on-device transcription, optimized for Apple Silicon. Your audio never leaves your device for transcription purposes.
Local Storage
The app-managed library is stored locally on your Mac in ~/Library/Application Support/Parrot Scribe. Session files are stored in its sessions subdirectory. Export destinations are chosen separately.
Storage Note: ParrotScribe stores session data in your local Application Support directory. This is a local macOS app data location, not a public Documents folder. See Apple's Privacy Policy for details.
License Key Storage
Your license key is stored in the macOS Keychain and protected by the operating system.
Telemetry
The app does not run a separate analytics or telemetry service. When you activate a license, and each time the app validates it, the app sends your license key, a hashed device identifier, and the device details listed under License & Activation Data. Without a license key, the app does not make these activation or validation requests. These requests can generate server-side analytics events as described below.
License & Activation Data
No license or account is needed for free personal use. Activated licenses require periodic online validation. We store the following data to manage purchases and activated licenses:
| Data | Purpose | Protection |
|---|---|---|
| Email address | License recovery, purchase confirmation | AES-256 encrypted |
| License key | Verify your license is valid | Bcrypt hashed |
| Device identifiers | License enforcement, device management, and pseudonymous license-service analytics | SHA-256 hashed |
| Device name | License management: identifies each activated Mac in your device list | Standard |
| Mac model, macOS version, app version | Compatibility and support | Standard |
| Activation timestamps | License management | Standard |
| Device count | Enforce device limit per license tier | Standard |
The device name is your Mac's model name, such as “MacBook Pro”, and not the computer name set in macOS. Each successful validation replaces the stored device name, Mac model, macOS version, and app version with the current values.
This data is stored on Supabase servers in the European Union (Frankfurt, Germany).
Payment Processing
Payments are processed by Paddle.com (Paddle.com Market Limited, UK), who acts as the Merchant of Record for all purchases.
What Paddle Collects
Paddle collects and processes:
We do not have access to your full payment details. We only receive confirmation of successful purchases and your email address to issue your license. See Paddle's Privacy Policy for full details.
Website
Hosting
This website is hosted on Cloudflare Pages. Cloudflare may collect standard web server logs including IP addresses, browser type, and pages visited. See Cloudflare's Privacy Policy.
Cookies
We use local storage for:
We do not use any tracking or advertising cookies.
Analytics
We use Umami Analytics to understand website traffic. Our website records events such as downloads and checkout activity. Our license service can also record the events described below.
All analytics data is self-hosted on infrastructure in Frankfurt, Germany (EU), and is fully owned by us.
The app does not send separate analytics events. When server-side analytics is enabled, our license service sends validation and device-management events to Umami. These events can include the hashed device identifier used for licensing, along with request outcomes and error categories. Where available, these analytics requests also carry IP-address and browser or app information from request headers. These license-service events are pseudonymous, not anonymous.
Data Security
We implement multiple layers of security to protect your data:
Encryption at Rest
All data stored in our database is encrypted using AES-256 encryption. Sensitive fields (email, license key, device ID) have additional application-level encryption or hashing.
Encryption in Transit
All data transmitted between your device and our servers uses TLS (Transport Layer Security) encryption.
Hashing
License keys and device identifiers are hashed using industry-standard algorithms (bcrypt, SHA-256). Even if our database were compromised, these values cannot be reversed.
Infrastructure
Our license backend runs on Supabase, which maintains SOC 2 Type 2 certification and undergoes regular security audits.
International Data Transfers
Johan Thorén operates from the Philippines. Your data may be processed in the following locations:
| Service | Data | Location | Safeguards |
|---|---|---|---|
| Supabase | License data | EU (Frankfurt) | GDPR compliant |
| Paddle | Payment data | United Kingdom | UK GDPR, EU adequacy |
| Umami (self-hosted) | Website analytics and pseudonymous license-service events | EU (Frankfurt) | GDPR compliant, self-hosted |
| Cloudflare | Website logs | Global CDN (US company) | EU-U.S. DPF, SCCs |
For transfers from the EU/UK, our service providers rely on Standard Contractual Clauses (SCCs) and/or the EU-U.S. Data Privacy Framework where applicable.
Your Rights
Under the Philippine Data Privacy Act and GDPR (for EU residents), you have the following rights:
Access
Request a copy of the personal data we hold about you.
Rectification
Request correction of inaccurate personal data.
Erasure
Request deletion of your personal data (subject to legal retention requirements).
Portability
Request your data in a structured, machine-readable format.
Objection
Object to processing of your personal data for certain purposes.
Restriction
Request that we limit how we use your data.
To exercise any of these rights, contact us at support@parrotscribe.com. We will respond within 30 days.
Data Retention
Contact & Supervisory Authorities
Contact Us
For privacy-related questions or to exercise your rights, contact: support@parrotscribe.com
Supervisory Authorities
If you believe your privacy rights have been violated, you have the right to lodge a complaint with a supervisory authority:
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website. The “Version” date at the top indicates when this policy was last updated.