Last updated August 8, 2026
Marlow holds what a family needs to get somebody to an appointment: names, an address, times, and who is driving. It has no analytics, no trackers, and no advertising of any kind, and it sells nothing to anybody. What you enter is visible to the people in your circle and to nobody else.
Your email address, which is how you sign in. The name you go by in the circle, and a phone number if you add one. Which circles you belong to and whether you organize them.
Their name. Their home address, and the map coordinates for it, so a driver can be given directions. A phone number if you add one. Their language, time zone, text size, and how far ahead their phone shows the schedule. They do not have an email address or a password with Marlow — their phone is paired to the circle instead.
The title of an appointment, any note you write on it, when it starts and ends, where it is, where the pickup is, whether it needs a driver, who claimed it, and the times a driver confirmed, set off and arrived. Marlow also keeps a record inside each circle of who changed what and when, so a disagreement about the schedule has an answer.
If you turn on notifications, Marlow stores a push token for each of your devices, which platform it is, and when it was last used — enough to send you a notification and nothing more. It is not an advertising identifier and cannot be used as one.
Marlow does not track location. It never records where you or the person you care for actually are — only the addresses somebody typed in. It has no analytics SDK, no crash reporter, and no third-party trackers, so nothing about how you use the app is measured or sent anywhere. It reads no contacts, no photos, and no calendar.
Everyone in your circle can see the schedule, the addresses, and who is driving — that is the point of a circle. Only the organizer can add or remove people. The paired phone shows only that one person their own day. The database enforces this in its own right, row by row, rather than trusting the app to ask the right question.
Supabase stores the data and handles sign-in; the database is in Canada (ca-central-1). Resend sends invite emails, and receives only the address you are inviting and your name. Apple delivers notifications, and the text of a notification passes through Apple to reach your phone. When you search for an address, what you type goes to Apple Maps to be turned into a place. Marlow shares data with no one else, and sells it to no one at all.
Until it is deleted. Deleting a circle deletes its appointments, rides, members and record of changes with it.
Settings → Delete my account. It erases your name, your email and your sign-in, and it is immediate — there is no waiting period and no way to undo it. A circle you organize is not destroyed along with you if anybody else is in it: the longest-standing member becomes the organizer, and the app tells you who by name before you confirm. A circle with nobody left but the person you care for is deleted outright, appointments and addresses with it, because a paired phone alone cannot administer or erase anything.
Marlow is not built for or directed at children, and accounts are for adults coordinating care.
If this policy changes in a way that affects what is collected or who sees it, the app will say so rather than quietly changing the date at the top.