You are being asked to hand over your mother's address.

What is not in the app

Marlow has no analytics SDK. Nothing counts your taps, sessions, funnels or retention. There is no crash reporter, so not even a stack trace leaves your phone. There are no third-party trackers of any kind, no advertising identifiers, and no advertising.

Marlow does not track location. It never records where you or the person you care for actually are. It knows the addresses somebody typed in, because a driver needs directions, and that is the entire extent of it.

Marlow reads no contacts, no photos and no calendar. It does not ask for those permissions because it has no use for them.

This website matches. No cookies, no analytics, no tag manager, no embedded video, no webfont fetched from somebody else's server. The page you are reading made requests to exactly one domain, which is this one.

What Marlow does store

Your email address, because it is how you sign in. The name you go by in the circle and a phone number if you add one. For the person you care for: their name, their home address and its map coordinates, a phone number if you add one, and their language, time zone and text size. They have no email address and no password with Marlow — their phone is paired to the circle instead.

Then the appointments themselves: title, note, times, place, whether a ride is needed, who claimed it, and when a driver set off and arrived. Marlow also keeps a record inside each circle of who changed what and when, so a disagreement about the schedule has an answer.

If you turn on notifications, a push token per device — enough to send you a notification and nothing more. It is not an advertising identifier and cannot be used as one.

Who can see it

The people in your circle. Nobody else, including other Marlow users, and including anyone who has guessed at a web address.

That is enforced at the database rather than in the app. Every table carries the circle it belongs to, and every read and write is checked against your membership by the database itself — so a bug in a screen, or somebody talking to the API directly, still cannot reach another family's data.

And it is tested by attacking it. There is a suite that signs in as four real users across two circles and tries, forty-nine different ways, to read and change data belonging to the other one. Every case is written from the attacker's side and every case has to fail. Several of those tests exist because the first run found real holes, which is rather the point of writing them.

What Marlow will never do

Never sell your data, and never monetize the senior's data. Not aggregated, not anonymized, not "shared with partners." If Marlow ever charges money it will be because a family chose to pay for something, and the thing being paid for will be plainly a feature.

Never use your family's information to train an AI model. Marlow does not currently send anything to a language model at all. If that changes — the first candidate is typing an appointment in plain English instead of filling in a form — it will be announced before it ships, it will run on a server rather than in the app, and it will not be turned on behind your back.

Never make your parent the product. They did not sign up for anything. They were handed a phone by somebody who loves them.

What Marlow can't promise

Notifications are delivered by Apple, not by Marlow, and no one guarantees them. Marlow is a coordination tool between people who already trust each other. It is not a medical device, it is not a care agency, it does not vet or background-check the drivers in your circle, and nothing about somebody's health should rest on a phone buzzing. Who you let into a circle is your judgment, and the app cannot make it for you.

It is also early. A pilot-stage app built by one person is a real thing to weigh, and saying so here is part of what this page is for.

Getting your data back out

Ask and you get it, in a form you can read. Delete a circle and its contents go with it, including the record of who changed what. Low commitment to try, and low commitment to leave — that is deliberate, and it is a much better reason to stay than a lock-in would be.

If something here is wrong

Write to support@getmarlow.app. It reaches a person, and during the pilot that person is Karsten. If something is wrong, or something is missing, say so plainly and expect a real reply.