Privacy Policy
draft · pending legal reviewIn short
Merriweather is a Mac app from Plausible Industries LLC. The app runs on your Mac. It has no account, and it sends us nothing: not your recordings, transcripts, notes, calendar, contacts, or usage. We never receive that data, so we cannot see, sell, or lose it.
The website is a plain marketing and download site. Our host processes your IP address to deliver pages and the installer. Analytics runs only if you accept it. If you email us, we keep your message to reply. We do not sell your information or share it for advertising.
1. Who we are
The website and the app are provided by Plausible Industries LLC, a California limited liability company ("Plausible Industries," "we," "us," or "our"). For the website, we are the controller of the personal data described in Part A under the EU and UK General Data Protection Regulation ("GDPR").
Plausible Industries LLC, Attn: Privacy, [company mailing address]. Email: [privacy@plausibleindustries.com]
Part A: The website
2. What we collect
2.1 Request data (hosting and downloads)
The site and the installer (a signed disk image) are served by [Amazon Web Services, Inc. through Amazon S3 and CloudFront] ("our host"). To deliver a page or a download, our host receives your IP address, the page or file requested, date and time, browser user-agent and referring page.
[We have not enabled access logging, so we keep no record of these requests ourselves.] Our host may keep limited operational and security logs under its own terms. If we enable access logs (for example, to count downloads or investigate abuse), we will keep them no longer than 90 days and use them only for those purposes.
Downloading the app does not require a name, an email address, or an account.
2.2 Fonts
The site's typefaces are served from our own host. Your browser does not contact a third-party font service. [If this changes to Google Fonts, replace with the Google Fonts paragraph from the Venkel policy.]
2.3 Analytics (only with your consent)
Only if you choose Accept all, or switch Analytics on under Customize, do we load [Google Analytics 4 ("GA4")]. It then sets cookies and records pages viewed, downloads started, time on page, referring site, device and browser type, and approximate location (city or region) derived from your IP address. Our configuration:
- IP anonymisation requested. Google states that GA4 does not log or store IP addresses
- Google signals disabled: no linking to signed-in Google accounts or cross-device tracking
- Ad personalisation signals disabled: GA4 data is not used for advertising
- Data retention set to [14] months for user- and event-level data
Analytics does not load if you do nothing, choose Reject non-essential, or your browser sends a Global Privacy Control ("GPC") signal. [If the site ships with no analytics, delete this section and say so in Section 2.5.]
2.4 Email you send us
If you email us (for support, feedback, or to ask about the beta), we receive your name, email address, message, attachments and anything in your signature. Please do not send us recordings, transcripts, or other data from the app. We do not need them to help you, and they usually contain other people's words. If you choose to send a diagnostics file, it is described in Section 9.
2.5 What the site does not do
No accounts, sign-up, newsletters, web forms, payments or uploads. No advertising cookies, social media pixels, session recording or fingerprinting.
3. Purposes and legal bases
| Data | Purpose | Legal basis (GDPR / UK GDPR) |
|---|---|---|
| Request data | Deliver the site and installer; keep them secure | Legitimate interests in operating a secure website (Art. 6(1)(f)) |
cookie_consent cookie |
Remember your cookie choice | Strictly necessary; legal obligation to record consent and legitimate interests (Art. 6(1)(c), (f)) |
| Analytics data | Understand which pages are useful and how many people download | Your consent (Art. 6(1)(a)), as also required for non-essential cookies under ePrivacy rules and UK PECR |
| Reply to you; support; keep business records | Steps at your request (Art. 6(1)(b)); legitimate interests (Art. 6(1)(f)) | |
| Any of the above | Comply with law; establish or defend legal claims | Legal obligation (Art. 6(1)(c)); legitimate interests (Art. 6(1)(f)) |
You may withdraw analytics consent at any time (Section 5) without affecting earlier processing. We make no automated decisions with legal or similarly significant effects.
4. Who receives your information
| Recipient | Role | Data |
|---|---|---|
| [Amazon Web Services, Inc.] | Hosting, content delivery, downloads | Request data |
| [Google LLC] | Analytics (consent only) | Analytics data |
| [Our email provider] | Business email | Messages you send us |
We may also disclose information to a counterparty in a merger, acquisition, financing or asset sale (who must honour this Policy), or where we believe in good faith that law requires it or it is needed to protect the rights, property or safety of Plausible Industries or others.
We do not sell your personal information or "share" it for cross-context behavioural advertising, as those terms are defined in the California Consumer Privacy Act ("CCPA").
5. Cookies and Global Privacy Control
A banner on your first visit offers Accept all, Reject
non-essential (the default) and Customize. Your choice is stored in
a first-party cookie_consent cookie for one year; change it any time
with the "Manage cookie preferences" footer link. If your browser
sends GPC, analytics does not load, the banner is not shown, and GPC
is treated as an opt-out of sale and sharing. See the
Cookie Policy.
6. Retention
| Data | Retention |
|---|---|
| Request data | Not retained by us; up to 90 days if access logging is enabled |
cookie_consent cookie |
1 year on your device |
| Analytics user- and event-level data | [14] months; aggregated reports may be kept longer |
Analytics cookies (_ga, _ga_<id>) |
Up to 2 years from your last visit, unless cleared or consent withdrawn |
| Until your request is dealt with, then up to 24 months after our last exchange, unless law requires longer |
7. International transfers
Plausible Industries is in the United States, and so is our host's origin. If you visit from the European Economic Area, the United Kingdom or Switzerland, your personal data will be transferred to the United States. [Amazon Web Services, Inc. and Google LLC] participate in the EU-U.S. Data Privacy Framework, its UK Extension and the Swiss-U.S. framework; where that does not apply, transfers rely on Standard Contractual Clauses (with the UK Addendum) in their data processing terms.
Part B: The app
8. What the app does with your data
The app is software you install and run on your own Mac. It observes your work so it can remember it for you: which app is in front and its window title, idle and lock state, your calendar and reminders if you allow it, contacts if you allow it, and meetings it records and transcribes. All of that is stored and processed on your Mac, in your macOS user account, using models that run on the device (including Apple's on-device Foundation Models and a bundled speech model). There is no Merriweather account, no Merriweather server, and no cloud fallback.
We receive none of it. The app contains no analytics, advertising, crash-reporting or telemetry service, and it does not send your content to us or to anyone else on our behalf. Because we never receive it, we are not the controller or processor of the data the app keeps, and we cannot access, export, correct or delete it for you. You can, and Section 11 explains how.
The app does not record keystrokes and does not take continuous screenshots.
9. When the app uses the network
The app connects to the internet only to do things you ask it to do:
- Pages and documents you add. When you give it a web address, it fetches that page and its images, as you, using any sign-in you have made in the app's sign-in window. The site you fetch from sees an ordinary request from your Mac.
- Company marks. When you save a website for a partner or your own company, the app asks that site for its icon.
- Directory lookups. If you sign in to your organisation's directory in the app, it looks up names for meeting invitees there, one address at a time.
- Apple services. macOS may download or update on-device model assets from Apple, under Apple's terms.
None of these requests go to us. [The app does not check for updates; you download new versions from the website. If an update check is added, describe it here before release.]
Diagnostics. The app writes a diagnostics file on your Mac. It stays there. If you choose to send it to us for support, we use it only to fix the problem and delete it within [90] days. It records events such as which host a page was fetched from, not page contents or recordings.
10. Recordings, voices and other people
The app can record meetings (your microphone and the sound of the call from your Mac) and transcribe them on your Mac. It can recognise recurring voices across meetings so that a transcript can say who spoke, by keeping a numerical description of each voice on your Mac (a "voice profile").
Recordings, transcripts and voice profiles are about other people as well as you. You decide whether to record, and you are responsible for telling the people in your meetings and getting any consent the law requires (see the App Terms of Use). Some laws treat voice profiles as biometric information; the app lets you turn voice recognition off and delete any person's voice profile at any time.
Retention of voice profiles. Voice profiles are kept on your Mac until you delete them, delete the engagement they belong to, or remove the app's data, and in any case should be deleted when they are no longer needed for the purpose you kept them for. [Engineering: once a default expiry exists, state it here, e.g. deleted automatically [3 years] after the person was last heard, matching 740 ILCS 14/15(a).] Plausible Industries never receives them.
11. Your control over app data
Everything the app keeps is in your macOS user account:
~/Library/Application Support/Merriweather/ [and the meetings folder
shown in Settings]. You can delete a single meeting, a person's voice
profile, or an engagement from inside the app, or remove all app data by
quitting the app and deleting that folder. Reminders the app created
stay in the Reminders list you chose until you delete them. Removing the
app from Applications does not, by itself, delete this data.
Part C: Everyone
12. Your rights
Depending on where you live, you may have the right to access, correct or delete your personal data; to restrict or object to processing; to data portability; to withdraw consent; and to complain to a data protection authority. These rights apply to the website data in Part A. For data in the app, you hold it, so you can exercise them directly (Section 11). If you are someone who was recorded by another person using the app, we do not hold that recording; please contact the person who recorded you.
To exercise a right, email [privacy@plausibleindustries.com] with the subject "Privacy Request." We may verify your identity, usually by replying to the same address. We respond within one month (GDPR) or 45 days (U.S. state laws), extendable where the law allows.
13. California and other U.S. state privacy rights
- Categories collected in the last 12 months (website only): identifiers (IP address; name and email if you email us); internet or network activity (pages viewed, downloads, referrer, browser and device data); approximate geolocation (analytics, consent only); anything you include in an email
- Sources: you and your browser. Purposes: Section 3. Disclosed for a business purpose to: Section 4. Retention: Section 6
- Sensitive personal information: none collected by us. The app's data, including recordings and voice profiles, stays on your Mac and is not collected by us
- Your rights: to know, access, correct and delete; to opt out of sale or sharing; and to non-discrimination for exercising any right
Do Not Sell or Share My Personal Information. We do neither. We honour GPC as a valid opt-out for your browser.
14. Children
Merriweather is a professional tool. The website and the app are not directed to children under 16, and we do not knowingly collect personal information from them.
15. Security
The site is served only over HTTPS. The app is signed with our Apple Developer ID and notarized by Apple. Access to our hosting, analytics and email accounts is limited to people who need it and protected by multi-factor authentication. App data on your Mac is protected by your macOS account and FileVault if you use it. No system is completely secure.
16. Changes
We will post any update here and change the "Last updated" date. If the app ever starts sending any data off your Mac to us or to a service provider, we will say so here and in the app before that version is released, and we will ask for your consent where the law requires it.
17. Contact
Plausible Industries LLC Attn: Privacy [company mailing address] [privacy@plausibleindustries.com]
End of Merriweather Privacy Policy.