You're being asked to hand over your mother's address.

What isn't in the app

Marlow has no analytics SDK. Nothing counts your taps, sessions, funnels or retention. There's no crash reporter, so not even a stack trace leaves your phone. There are no third-party trackers of any kind, no advertising identifiers, and no advertising.

Marlow doesn't track location. It never records where you or the person you care for actually are. It knows the addresses somebody typed in, because a driver needs directions, and that's the entire extent of it.

Marlow reads no contacts. It doesn't ask for that permission because it has no use for it.

It never browses your photos. When you use Read it from a photo to fill in an appointment, the system hands Marlow that one picture and nothing else, it's read on your phone. The text recognition runs on the device, so the image is never uploaded to us or to anybody else, and it's not kept afterward.

Your calendar Marlow can read only if you switch that on, and only on your own phone. It's used for two things: writing a ride you have claimed into your own calendar, and warning you when a new appointment clashes with something already there. What it reads stays on the device. It's never stored, never sent to us, and never shown to anybody else in the circle.

This website matches. No cookies, no analytics, no tag manager, no embedded video, no webfont fetched from somebody else's server. The page you're reading made requests to exactly one domain, which is this one.

What Marlow does store

Your email address, because it's how you sign in. The name you go by in the circle and a phone number if you add one. For the person you care for: their name, their home address and its map coordinates, a phone number if you add one, and their language, time zone and text size. They have no email address and no password with Marlow. Their phone is paired to the circle instead.

Then the appointments themselves: title, note, times, place, whether a ride is needed, who claimed it, and when a driver set off and arrived. Marlow also keeps a record inside each circle of who changed what and when, so a disagreement about the schedule has an answer.

If you turn on notifications, a push token per device, enough to send you a notification and nothing more. It's not an advertising identifier and can't be used as one.

Who can see it

The people in your circle. Nobody else, including other Marlow users, and including anyone who has guessed at a web address.

That's enforced at the database rather than in the app. Every table carries the circle it belongs to, and every read and write is checked against your membership by the database itself, so a bug in a screen, or somebody talking to the API directly, still can't reach another family's data.

And it's tested by attacking it. There's a suite that signs in as four real users across two circles and tries, forty-nine different ways, to read and change data belonging to the other one. Every case is written from the attacker's side and every case has to fail. Several of those tests exist because the first run found real holes, which is rather the point of writing them.

What Marlow will never do

Never sell your data, and never monetize the senior's data. Not aggregated, not anonymized, not "shared with partners." If Marlow ever charges money it'll be because a family chose to pay for something, and the thing being paid for will be plainly a feature.

Never use your family's information to train an AI model. Marlow doesn't currently send anything to a language model at all. If that changes (the first candidate is typing an appointment in plain English instead of filling in a form), it'll be announced before it ships, it'll run on a server rather than in the app, and it won't be turned on behind your back.

Never make your parent the product. They didn't sign up for anything. They were handed a phone by somebody who loves them.

What Marlow can't promise

Notifications are delivered by Apple, not by Marlow, and no one guarantees them. Marlow is a coordination tool between people who already trust each other. It's not a medical device, it isn't a care agency, it doesn't vet or background-check the drivers in your circle, and nothing about somebody's health should rest on a phone buzzing. Who you let into a circle is your judgment, and the app can't make it for you.

It's also early. A new app built by one person is a real thing to weigh, and saying so here is part of what this page is for.

Getting your data back out

Ask and you get it, in a form you can read. Delete a circle and its contents go with it, including the record of who changed what. Low commitment to try, and low commitment to leave. That's deliberate, and it's a much better reason to stay than a lock-in would be.

If something here is wrong

Write to support@getmarlow.app. It reaches a person, and that person is Karsten. If something is wrong, or something is missing, say so plainly and expect a real reply.