> What would make someone think that this applies to Audacity, the program, and not Audacity, the website?

Because the first full sentence of the policy at https://www.audacityteam.org/about/desktop-privacy-notice/ specifies that it applies to "our desktop app Audacity".