Last updated: September 28, 2026
Palpable is a product operated by Epode AB, a company registered in Sweden (org. nr. 559486-8780) ("we," "us," or "our"). We are the data controller for your personal data and are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable Swedish data protection laws.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service, including our website, mobile applications, and IoT hardware products.
The data controller responsible for your personal data is:
Epode AB
Organization number: 559486-8780
Email: privacy@palpable.technology
We collect and process the following categories of personal data:
Under GDPR, we process your personal data based on the following legal grounds:
We use the collected information for the following purposes:
There are three ways audio reaches us and they behave differently, so we describe all three.
Voice on Pi (add-on). When the Voice on Pi add-on is active, your device's microphone is open continuously and audio is streamed to our servers, where we listen for the wake word "Hey PAL". Wake-word detection happens on our servers rather than on the device, which means audio leaves your device before the wake word is spoken. Audio that does not contain the wake word is discarded: it is never transcribed, stored, or sent to any other company. Without the add-on the device's microphone is never opened. There is currently no light or other indicator on the device while the microphone is open.
"Hey PAL" in the app (off by default). The app can listen for the wake word while you are using it. This is switched off unless you turn it on in Settings. When it is on, your browser's built-in speech recognition runs continuously; in most browsers, including Chrome and Edge, that means audio is sent to your browser vendor's speech service and is subject to their privacy policy rather than ours. We receive nothing until the wake word fires. Your operating system's microphone indicator shows when this is active.
Voice conversations. When you deliberately start a voice conversation, audio is streamed to Gladia (France) for real-time speech-to-text.
What we keep. We do not store audio. It is held in memory only for as long as transcription takes and is never written to disk or to a database on our systems. Only the resulting text transcript is retained, as part of your conversation history with PAL, subject to the retention periods in section 6. We cannot make commitments on Gladia's behalf about what they do with audio after transcription; their handling is governed by our data processing agreement with them.
PAL's voice. PAL's spoken replies are generated by Microsoft's text-to-speech service from the text of the reply. That audio is not stored.
Before your hardware arrives, you may chat with a preview version of PAL powered by an EU-hosted AI provider (Scaleway, France). These conversations are processed within the EU and are not stored beyond your active session.
We look at how Palpable is used so we can make it better. That means the projects and scripts PAL generates, the hardware you connect, and how you use your credits. We use this to fix what is broken, to decide what to build next, and to make PAL's suggestions more useful to you specifically.
Wherever we can answer a question without knowing who you are, we do — most of this work happens on aggregated data across all accounts, not on any one person's projects.
We do not currently use your content to train AI models. If that changes, we will say so here before we begin, and you will be able to turn it off for your account.
We never sell your personal data, and we never share your projects with other customers.
PAL remembers short facts about you so you do not have to repeat yourself — for example your name, the units you prefer, or that you are building a greenhouse monitor. PAL saves a fact when you tell it something worth keeping, and after a conversation goes quiet it also picks out useful facts and a one-sentence summary. It keeps these facts, not a copy of your conversation.
Memory is off until you switch it on in Settings → PAL's Memory, and we rely on your consent to use it (section 4). You can see every fact PAL remembers, delete any of them, or switch memory off again at any time. While it is off, PAL does not save or use anything it remembered.
PAL is instructed never to remember sensitive details such as your health, religion, political views, sexuality, ethnicity, trade union membership or biometric data, even if you mention them. If something like that is ever saved, delete it in Settings or tell us and we will remove it.
We retain your personal data only for as long as necessary to fulfill the purposes described in this policy:
When you pause your subscription, all data is preserved. When you delete your account, all personal data is purged within 30 days, except where retention is required by law.
We may share your data with the following categories of recipients:
All service providers are bound by data processing agreements and are required to handle your data in accordance with GDPR. We do not sell your personal data to third parties. The full, current list is maintained on our sub-processors page.
If you join or create an organization, the other members can see the projects, devices and scripts shared with it, along with your display name and the email address you signed up with. If you share a view by link, anyone holding that link can see what the view shows. Sharing is your choice and you can undo it: removing a member, or revoking a share link, stops that access immediately.
You can create an API key that lets an outside application connect to one of your projects and read its live sensor readings, variables and events. Anything you connect this way is outside our control and governed by that application's own privacy policy, not ours. Keys are scoped to a single project and can be revoked at any time from the app.
Some of our service providers may process data outside the European Economic Area (EEA). When transferring data internationally, we ensure appropriate safeguards are in place:
As a data subject, you have the following rights:
To exercise any of these rights, please contact us at privacy@palpable.technology. We will respond within 30 days. You can also delete your account and export your data directly from the app settings.
We implement appropriate technical and organizational measures to protect your personal data:
We use essential cookies necessary for the operation of our service. These cookies are required for authentication and security purposes and are exempt under the ePrivacy Directive.
We also use a privacy-friendly analytics tool to understand how the app is used. This analytics cookie is optional and requires your consent. When you first use the web app, you will be asked to accept or reject analytics cookies. You can change your preference at any time using the Cookie Settings link in the footer of this site. No personal data is collected or shared with third parties through analytics.
Our service is not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will take steps to delete such information.
If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with the Swedish Data Protection Authority (IMY):
Integritetsskyddsmyndigheten (IMY)
Website: www.imy.se
Email: imy@imy.se
When you join our waitlist, we collect and process the following data:
We process your waitlist data based on your consent (Art. 6(1)(a) GDPR), which you provide via the consent checkbox when joining the waitlist. You can withdraw consent at any time by unsubscribing or requesting data deletion.
After joining the waitlist, you may receive: a welcome confirmation, follow-up questions about your use case and pricing preferences, and a notification when your access is granted. All emails include an unsubscribe link. You can also reply with "delete my data" to any waitlist email to request removal.
If you reply to our follow-up emails, we use AI (Anthropic Claude) to parse your response into structured categories (e.g., use case, pricing feedback). The original email content is not stored in full — only a brief excerpt and the extracted structured data are retained.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will also notify you via email.
If you have any questions about this Privacy Policy or our data practices, please contact us:
Email: privacy@palpable.technology
General inquiries: hello@palpable.technology