# Privacy

Marrow keeps what you send it in a record of your own, shares it only with the service providers that run the service, never sells it, never uses it for advertising, and deletes it when you delete your account.

Effective date: 10 October 2026. This page says what Marrow collects, why, who processes it, how long it is kept and what you can ask us to do. If anything is unclear, write to hello@usemarrow.com.

## The promise, in plain words

We never sell your data. We never give a third party access to it for their own purposes. It is shared only with the service providers that run Marrow, each acting on our instructions and only for the one job described below, and with anyone the law requires us to share it with. We do not use your data to train AI models, and training on data sent through our AI providers' APIs is switched off.

## Who we are

Marrow is operated by usemarrow.com (the operator, "we"). We are the controller of the personal data described on this page. You reach us at hello@usemarrow.com. The Marrow app on the App Store and Google Play is published by the same operator.

## What we collect

Your email address: in the app it identifies your account and you sign in with a six digit code we email you; on the checkout page of our website you confirm it with the same kind of code, and the subscription you buy applies to the account of that address; on Telegram it is asked when you start, is optional, and is kept as a way back into your account and for receipts. The app keeps a sign in token in your phone's secure keychain. On Telegram, your Telegram id, your username and the first and last name and language Telegram passes to the bot identify your account instead; we never receive your Telegram password or your Telegram contact list. If you use both, you can link them so they are one account and one conversation.

Your phone number, optional. On Telegram it is asked when you start and offered again a few times while it is missing, comes in through Telegram's own share button and nothing else, and is skippable; in the app, adding a phone number is switched off for now. It confirms that the account is yours. It is checked against other accounts only so that one number gets one trial; it is not used to find you, to show you to other users or to contact you for marketing.

The content you send: text, voice notes, photos, screenshots and contact files, and what Marrow derives from them: contacts, organisations, interactions, notes, follow ups, deals and life events. Voice notes are kept as transcripts. Photos and screenshots are kept as the fields read from them and, so that the app can show your conversation, as a cleaned copy with no location or camera data, shown in the app for 30 days and deleted the next time you send a photo after that, or with your account. The section on your responsibilities in the Terms applies to this content.

Your phone's contacts, only if you use the app and choose to. The app reads them when you tap Import and allow access, and, while "Marrow writes new people to this phone" is on, each time it adds or updates someone, to see by phone number who is already there. Only Import sends the names, numbers, emails, companies and roles to your own record; the writer sends back only which of your Marrow people it found on the phone, added or updated. The app writes to your phone's contacts only if you switch on "Marrow writes new people to this phone". It then adds the people Marrow creates, with each number and email and its label, and keeps the people it knows are on your phone current: when a number, an email, a link, a title or a company changes in Marrow, it adds what the phone lacks, after asking you unless you chose automatic, and changes a title or a company only where the phone's field is empty or still holds what Marrow wrote before. It never removes a value from a contact and never deletes a contact on your phone, and an import never deletes anyone in Marrow.

Your phone's calendar, only if you use the app and switch it on. The app then writes your follow ups and meetings into a calendar called Marrow that it makes on your phone, changes only that calendar, and never reads the events in your other calendars. Switching it off removes that calendar from your phone.

For each phone the app is signed in on: the platform (iOS or Android), a label such as the phone's name, and a push token, so that your brief and reminders can reach that phone if you choose. A push token is cleared when you sign out of that phone or delete your account; when Expo's push service tells us a phone no longer takes notifications, that phone is marked so it is never pushed again, and its record goes with your account.

Teams. If you buy a Teams subscription, we keep the team: its plan, its number of seats, the invite links and which accounts joined. A member's email address is shown to the buyer on the team page, and nothing else of the member's account; the buyer's details are not shown to members. Each member's record stays in that member's own account.

Shared lists. A list of people Marrow keeps for you stays in your account unless you tap Share list. Sharing makes one link with a random token. Anyone who has the link, without signing in, can see the list's title, how many people are on it, and for each person the name, role, company and profile link; never their status on the list, the reasons Marrow gave, your request, or anything about you. The page asks search engines not to index it. Stop sharing turns the link off at once. Whoever you give the link to can pass it on, so share it as you would the list itself.

A list exported as a Google spreadsheet, only if you have connected a Google account to Marrow and choose that export. Marrow then writes a new spreadsheet into your own Google account with the people you chose (name, role, company, location, profile link, status and the day found), through a permission that lets Marrow touch only the files it made. That copy is held by Google under your Google account and Google's own policy, and deleting your Marrow account does not delete it.

Public information about the people and companies in your record: a person only when you ask for a lookup, or when you give Marrow a profile link with one person or a few (a card's QR code, a pasted link, a screenshot), which it reads at once unless you have switched "Read a profile link automatically" off; a company also when you ask what you know about it, who you know there, or for a brief before a meeting, if Marrow holds no brief of it younger than 14 days. It is publicly available professional information, in any form including media (headline, role, location, recent public posts, a public profile photo, company facts and news), attached to that contact or company. Nothing is posted anywhere and nobody is contacted.

Your preferred language, so Marrow and the emails speak to you in it.

Payment data, if you subscribe. A third party payment provider acts as merchant of record: they, not we, receive your card details. What we keep is the state of your subscription, the plan and period, the number of seats of a Teams subscription, the amounts charged and the tax, the payment reference and your Marrow account id. Your bank statement shows the payment provider's name, not Marrow.

Usage and error records: per message, the time, its kind, the model tokens used and their estimated cost; per failure, the kind of error, the first line of the trace, the command in use and your account id. Never message content. The servers also keep operating logs for 30 days, and inside the backups for as long as those are kept; they carry your account id and message ids, and when Marrow fails to read a message a log line can hold a short part of the model's reading of it.

Page counts on this website: a counter on our own host records, without cookies and without a personal identifier, each page viewed, the page you arrived from, the campaign tags on the link you arrived on if there were any, clicks on the store and Telegram links, and the browser and system name, screen size and country the counter derives from the request before discarding it. Visits are told apart for a few hours by a random number made from the request and never stored with anything that identifies you. The app itself counts nothing.

The launch waitlist on this website, only if you use it: the email address you type, the sentence you agreed to ("Keep my address and send me one note when Marrow launches on the stores. Nothing else is sent, and I can ask for it to be removed at any time.") and the time you agreed, the page and the language it came from, the first part of your browser's name, and a salted hash of the network address your request came from. The hash is kept to spot abuse and does not identify you; the network address itself is not stored. Joining the [waitlist](/waitlist) makes no account. One email is sent from the waitlist: the launch note, when Marrow launches on the stores.

Quality review records, unless you have turned this off in your settings: your conversations with Marrow, all or a sample depending on the review setting, each a run of your messages and Marrow's replies until a quiet gap of a couple of hours, with names, companies, contact details, addresses, amounts and account numbers replaced by placeholders before anything is kept, the reviewer's verdict on what went wrong and on which replies, and a scored summary. Your account appears in them only as a salted hash. The switch is in /settings on Telegram and in the web view's Settings, and not yet in the phone app's Settings: if you use the app alone, write to hello@usemarrow.com and we turn it off for you; turning it off deletes the reviewed conversations, the findings, the samples and the undecided or rejected proposals kept from your conversations. A proposal already approved into Marrow's permanent test set stays: it is a synthetic case in which names, companies, contact details and amounts were replaced before it was kept, and it no longer points at your account.

Reports of Marrow's replies, only when you make one: in the app you hold a reply or tap the dots under it, and on Telegram you reply to it with /report. A report keeps the reason you chose (offensive, wrong, unsafe or something else), your note if you write one (up to 500 characters), the first 300 characters of the reply, the message you sent before it (up to 300 characters), which model wrote the reply, and when. The operator reads every report in the admin view and uses them to improve how Marrow answers. Your reports are kept until you delete your account.

## How we use it

To run Marrow for you: to answer your messages, keep your record, brief you and remind you. To run the account: the subscription, receipts, a few account messages, support when you write to us. To keep the service healthy and secure and to improve it, from usage counts, in total and for each account, and, where you report a problem, the record you point us to. To find and fix faults in how Marrow understands messages: your conversations, all or a sample depending on the review setting, are reviewed with personal details replaced by placeholders, unless you have turned this off in your settings. Never for advertising.

## Who processes it

Nobody at Marrow reads your record in the course of normal operation. What the founder sees of your conversations is limited to the quality review described above: reviewed conversations with personal details replaced and the reviewer's verdict on them, never your record, and only unless you have turned the review off in your settings. The operator's own admin view shows account details such as your name, email address, phone number, sign up date, the channels you use, plan and usage counts. It never shows your messages or your record, except what a report of a reply you make carries (described above), and conversations are seen only as the redacted samples of the quality review described above. We look at an individual record only when you ask us to, to fix a problem you have reported, or when the law requires it. A small number of service providers process data on our behalf, each for one purpose and on our instructions alone:

Hosting and backup: the servers Marrow runs on, and the off site backup copies, which are encrypted before they leave the server.

AI language processing: the language model that reads your messages, transcripts and images with the parts of your record they concern, writes the replies, runs the web searches of a company lookup, and, for the quality review, reads the reviewed conversations to replace personal details and then reads the redacted conversations.

Voice transcription: your voice notes, returned as text.

Public profile lookups: the searches you request, with the name, company and location you gave, the profile links you give Marrow to read, and the company lookup that a question about a company or a request for a meeting brief triggers when Marrow holds no recent brief of that company; a company lookup also searches the open web through our AI provider's web search and reads the company's own site.

Email delivery: the emails we send you, sign in codes and the waitlist's launch note included, and the messages you send us with /support.

Push notifications: Apple Push Notification service and Google Firebase Cloud Messaging deliver the app's notifications, through Expo's push service; they receive the push token and the notification's text, nothing else from your record.

Payment processing: a third party payment provider that acts as merchant of record and is shown at checkout. They receive your payment details, your email address and name for the receipt, the plan and period, and your Marrow account id; we receive the state of your subscription from them.

Page counting: a privacy friendly counter run by us; no third party receives the counts.

The waitlist: the address is kept in our own database on the hosting and backup servers described above. When the launch note is sent, the address and the note go to our email delivery provider for that one email; no other provider receives the address.

The Marrow app talks to our servers directly and what you send in the app is not sent to Telegram; if "Where Marrow reaches you" is set to On Telegram or Both, your briefs, reminders, Marrow's questions and lookup results reach you through Telegram. Telegram is the messenger you reach Marrow through when you use the Telegram channel and is not our processor; Telegram's own privacy policy applies to your use of Telegram.

## How long we keep it

Your record is kept for as long as your account exists. When you delete your account in the app or the web view, your record is removed at once; when you ask us, it is removed within 30 days of your confirmation; the copies in backups fall out as the backups rotate, within 30 days. The conversation log Marrow keeps so that it can follow what you said a few messages ago is kept for 30 days. Device records are kept until you delete your account, including for phones you have signed out of; the push token is cleared when you sign out of that phone. Quality review records, with personal details replaced, are kept for 90 days; they are deleted at once when you turn the review off or delete your account; a proposal already approved into the permanent test set, with the same details replaced, stays. Error records are kept for at most 90 days, payment records for as long as tax and accounting rules require, and aggregated usage numbers, which contain no content, to understand the service over time. We may delete accounts inactive for more than 24 months after writing to you first.

A waitlist address is kept until the launch note has been sent or until you ask for it to be removed, whichever comes first, and the hash of your network address goes with it. The list is deleted after the launch note has been sent. To ask, write to hello@usemarrow.com; the address is removed from the list at once and from backups as they rotate, within 30 days.

## Your rights

You can access everything Marrow holds about you at any time: tap Export everything in the app's Settings, send /export on Telegram or open Export in the web view for everything as a file, or ask in the Telegram chat for a contacts file; you can also write to hello@usemarrow.com and we send you the file. You can correct anything by telling Marrow or editing it in the app, and delete everything in one step from the app's Settings ("Delete my account") or by writing to us; the [account deletion page](/account-deletion) has the steps. You can object to the account emails and nudges with the link in any of them; the verification code and receipts still send because they are part of running your account. Depending on where you live you may have further rights, such as restriction or portability. Write to hello@usemarrow.com to exercise any of them; you may also complain to a data protection authority.

## Security

Traffic between you, our servers and our providers is encrypted in transit, the off site backup copies are encrypted before they leave the server, and access to the servers is by SSH key only. No system is perfectly secure; if we learn of a breach affecting your data we will tell you without undue delay.

## Cookies and browser storage

This website sets no cookies, stores nothing in your browser beyond your light or dark choice if you make one and, for the length of your visit, the campaign tag of the link you arrived by, and loads no third party script. Page views and link clicks are counted by a counter on our own host, without cookies and without a personal identifier, and not at all when your browser sends Do Not Track. The campaign tags on a link you arrived on are kept in your browser's session storage for the visit, so that a store link carries them onward; nothing is sent to us about who you are.

The Marrow app stores on your phone your sign in token, in the phone's secure keychain, the id of the Marrow calendar it made if you switched that on, your interface language, and which permission explanations it has shown you. It sets no cookie and has no advertising or analytics code.

The web view of Marrow (the Telegram Mini App) sets one cookie, named marrow_session, when you sign in. It holds a random session token, keeps you signed in for 30 days, is sent only to our own servers and is removed when you sign out or delete your account. It is not used for tracking or advertising and is needed for the web view to work, so it needs no consent. Inside Telegram the web view signs you in with the data Telegram passes it and sets the same cookie for the same reason. It loads one script from Telegram, the one every Telegram Mini App needs to talk to the Telegram client, under Telegram's own policy, and, unless your browser sends Do Not Track, the same cookieless counter as this website, which counts the screens opened with record ids removed; it stores nothing else in your browser.

The checkout and billing pages belong to the payment provider and may set their own cookies under their own policy, which is shown there.

## Children

Marrow is for adults. You must be 18 or older to use it. We do not knowingly collect data from anyone younger, and we delete such accounts when we learn of them.

## International transfers

Our service providers may process data in countries other than your own. Where that happens, we rely on the safeguards the law requires.

## Changes and notice

We may change this page when the service or the law changes. Material changes take effect at least 14 days after they are published on this page, with the new effective date at the top of this page.

## Contact

hello@usemarrow.com, or /support on Telegram, which reaches the same inbox. See also the [Terms](/terms), [Security and data](/security) and [Support](/support) pages.

Last updated 15 October 2026. Canonical: https://usemarrow.com/privacy