Privacy Policy

The short version: LymeScribe transcribes your voice on your own hardware. We never receive, store, or have any ability to access your audio recordings or transcripts. There are no analytics and no telemetry in the app. The little data we do handle exists only to sell and support licenses.

Who we are

The party responsible for the personal data described here is Interapp Development, Inc. ("LymeStack", "we"), 5616 Belle Aire Rd, East New Market, MD 21631, USA. For any privacy question or to exercise your rights, contact webinquiry@iadev.net. LymeScribe is offered for sale in the United States only.

What never leaves your device

• Audio. Recordings are processed by speech models running locally on your Mac (or on a LymeScribe server you or your organization operate on your own network). Audio is never sent to LymeStack or any third party.
• Transcripts and history. Stored as local files on your device. We cannot read them.
• Corrections dictionary and settings. Stored locally on your device.
• Diarization token. If you enable speaker diarization, the HuggingFace access token you supply is stored locally in the macOS Keychain and is never transmitted to us.

Data we process, and why

Here is every category of personal data we process, the purpose, and the basis on which we rely. We have kept this list to the minimum the product actually needs.

• Purchases. Payments are processed by Paddle.com, our merchant of record. Paddle collects the billing information needed to complete your order (name, email, payment method, country) under Paddle's privacy policy. We never see your payment card details. Legal basis: performance of our contract with you, and our and Paddle's legal obligations (tax).
• Licensing. When you buy or activate a license, our licensing server stores: your name and email address; your license key and the related payment-processor reference IDs (so a refund can be matched to a key); activation records — the device name and app version your Mac reports at activation, plus a non-reversible device identifier used to enforce the activation limit; trial registration dates; and an internal log of license events (activations, deactivations, refunds). This is the minimum needed to issue, validate, and support licenses. Legal basis: performance of our contract with you; for fraud prevention and the event log, our legitimate interests in protecting against license abuse and keeping accurate records; for records we must keep, our legal obligations.
• Email. We send transactional email only — your license key after purchase, and replies to messages you send us — using our own email service. No marketing list, no newsletter by default. Legal basis: performance of our contract with you, and our legitimate interest in responding to your enquiries.
• Update checks. The app checks our server for new versions (standard Sparkle update requests, which include the app version and macOS version). Update checks contain no personal data, audio, or transcripts. Legal basis: our legitimate interest in delivering security and feature updates.
• IP address. When your app contacts the licensing server, your IP address is used transiently to rate-limit abuse. It is not stored alongside your license record. Legal basis: our legitimate interest in protecting the service from abuse.

Who we share it with

We do not sell or rent your personal data. We share it only with the providers needed to run the service, each acting under contract and only for these purposes:

• Paddle.com — our merchant of record, which handles checkout, payment, tax, and refunds (see Paddle's privacy policy, linked above).
• Our own infrastructure — the licensing server and transactional email service are operated by us on servers located in the United States.
• Bunny Fonts — serves the fonts on this website (a privacy-first CDN that does not log personal data); it is not used inside the app.

Where your data is held

LymeScribe is sold to customers in the United States, and our infrastructure — the licensing server and transactional email service — is located in the United States. Paddle handles its own data processing under its privacy policy.

This website

transcribe.lymestack.com sets no cookies and runs no analytics or trackers. Fonts are served by Bunny Fonts, a privacy-first CDN that does not log personal data.

What we don't do

• No selling, renting, or sharing of personal data with third parties for their own purposes.
• No advertising identifiers, no tracking pixels, no behavioral profiling.
• No training of AI models on your data — we don't have your data.
• No automated decision-making that produces legal or similarly significant effects about you.

Health data and HIPAA

LymeScribe processes audio and transcripts entirely on your hardware and never transmits them to us. Because of this, we do not receive, store, or have access to any protected health information (PHI) you may handle with the software, and LymeStack is not a HIPAA business associate. The only personal data we hold is the account and licensing data described above (such as your name and email), which is not PHI. If you use LymeScribe in a clinical setting, you remain solely responsible for safeguarding PHI and for your own regulatory compliance (HIPAA and otherwise).

How long we keep it

• License and account records (name, email, key, activations) — for as long as your license is active, then 24 months after it ends, so we can support reinstatement and resends.
• Financial and tax records — for the period required by law (typically 7 years).
• License event log — retained for fraud prevention and accounting; entries are not deleted on request where we have a legitimate interest or legal obligation to keep them, but are minimized to what those purposes require.

Your rights

Subject to applicable law, you may ask us to access, correct, or delete the personal data we hold about you, and we honor these requests regardless of where you live. To exercise any of these, email webinquiry@iadev.net and we will respond promptly. Note that deleting your license records will revoke the associated license, and that we may retain certain records where we have a legal obligation or overriding legitimate interest to do so (see above). We do not sell your personal data or share it for cross-context behavioral advertising.

Contact

Interapp Development, Inc. · 5616 Belle Aire Rd, East New Market, MD 21631, USA · webinquiry@iadev.net

If this policy changes, the date above will be updated. Material changes will be noted on this page.