It only sends the following during the update process, which can be disabled during the software install: Audacity version, OS name and version, country of IP address.
If there is a serious error it will let you generate an error report to help them debug the issue, and will not send anything without the user’s consent. Seems reasonable to me.