Privacy

Parlé is run by Beargle Industries. This page says what we hold and what we can read. It is meant to be checkable against how the app actually behaves, not to be impressive.

What we store

Everything you write in a dynamic gets encrypted on your device before it is sent: rules, agreements, limits, signals, notes, names, photos. We store the encrypted blob. We also store your account email, an encrypted copy of your dynamic’s key that only your passphrase or recovery code can open, and, if you turn notifications on, the push subscription your browser hands out.

We do not hold your passphrase or your recovery code, and there is no reset link that recovers your content. If you lose both, the data stays encrypted forever. That is the trade you are making, and it is the honest cost of us not being able to read your dynamic.

What we can see anyway

Encryption hides content, not the fact that content exists. We can see that your account exists, that a record in a named collection was written or changed and when, roughly how much you store, and that a notification was sent. We can see that a safety signal happened. We cannot see which one, or anything you typed with it.

Who else touches it

Supabase stores the encrypted data and runs sign-in. Vercel hosts and serves the app. Mailgun sends our email, so it sees your address and what those messages say: sign-in and confirmation mail, and invite codes. It never sees anything from inside a dynamic. When you enable notifications, delivery goes through whatever push service your browser uses, run by your browser’s vendor. Those notifications carry no content, so the push service learns that Parlé pinged you and nothing else.

There is no analytics package, no advertising, no tracking pixels, and no third party watching how you use the app. There is also no AI anywhere in Parlé. Nothing you write is sent to a model, and none of it trains anything.

Getting your data out, or gone

Settings has an export that decrypts everything on your device and hands you a file you keep. Deleting a dynamic erases its records. Deleting your account removes the account and the encrypted data attached to it.

Beta feedback is the one thing you send us readable, and the form says so where you type it.

How long we keep it

Until you delete it. There is no expiry timer and no archive we quietly hold onto. Delete a dynamic and its records go; delete your account and the account goes with them. Routine encrypted backups at our host roll over on their own schedule, so a deleted record can persist in a backup briefly before it ages out.

Where it lives, and who to ask

The encrypted data is stored in Canada. Beargle Industries operates from Ontario, Canada, and Ontario law governs this policy.

Questions about any of this, or a request to get your data out or delete it, go to privacy@spicerack.guide. It is a one-person company, so that reaches the person who built it.