Marlo

Privacy Policy

Effective Date: July 27, 2026 Last Updated: July 27, 2026

Marlo is a voice journal. You speak, and we turn what you said into writing you can keep. That means the most personal thing you can give an app — your own voice, talking honestly — passes through our systems. This policy explains exactly what happens to it, in plain language.

1. Who we are

Marlo is operated by NPH Investment Corporation, a Delaware corporation ("Marlo," "we," "us," "our").

Postal address: 123 S Broad St, Ste 1500, Philadelphia, PA 19109 Privacy contact: privacy@marlojournal.com

2. What this policy covers

How we collect, use, share, and protect personal data when you use Marlo — the web app at https://marlojournal.com, the iOS app, and related services.

3. Information we collect

Information you provide

  • Account information — name, email address, and either a password (stored only as a salted hash, never in readable form) or a Sign in with Apple / Google identifier.
  • Profile and personalization — nickname, chosen companion persona, style preferences, reminder settings.
  • Audio recordings you create.
  • Transcripts, journal entries, goals, and to-dos generated from or written alongside those recordings.
  • Photos you attach to an entry.
  • Location — only if you explicitly enable it for an entry, so entries can appear on your personal map. It is off unless you turn it on, and you can remove it from any entry.
  • Saved recipients — names, email addresses, and phone numbers you add in order to send a memo to someone.
  • Payment information — processed by Stripe (web) or Apple (iOS). We never see or store your full card number.
  • Support communications you send us.

Information collected automatically

  • Device information — model, operating system version, app version, language, timezone.
  • Usage data — which features you use, recording minutes consumed, errors and crashes.
  • Log data — IP address and timestamps, retained for security and abuse prevention.
  • Cookies and similar technologies on the web — see our Cookie Policy.

We do not use third-party advertising trackers, we do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

4. How we use your information

  • Provide, operate, and improve the service
  • Transcribe your audio and refine it into readable entries
  • Generate recaps, reflections, insights, and companion responses
  • Process subscriptions and billing
  • Authenticate you and keep your account secure
  • Send transactional email (verification, billing, security notices)
  • Respond to support requests
  • Detect fraud, abuse, and violations of our Acceptable Use Policy
  • Comply with legal obligations

We do not use the content of your journal entries to train our own models, and we do not read your entries except in the narrow cases described in section 6.

5. AI processing — read this one

This is the part people most want to understand, so we are being specific.

When you record an entry:

  1. The audio is sent to OpenAI (Whisper) to produce a transcript.
  2. The transcript is sent to Anthropic (Claude) to clean it up and, when you ask for them, to produce recaps, insights, and companion replies.

Both providers process this content as data processors acting on our instructions, under commercial agreements that prohibit using your content to train their models. These are not the consumer versions of those products; the API terms are different, and content submitted through them is excluded from model training. If a provider or its terms change in a way that affects you, we will update this policy and tell you before the change takes effect.

What this means practically:

  • Your recordings and entries are not used to train any AI model — ours, OpenAI's, or Anthropic's.
  • Your content is transmitted to those providers only to perform the task you asked for, and is not retained by them for their own purposes.
  • If you delete a recording or an entry, it is removed from our systems as described in section 8.

AI output can be wrong, and the companion is not a therapist. See our AI Disclosure for the limits of what these features are and are not.

6. How we share information

We share personal data only with:

  • Service providers performing work on our behalf, listed individually in our Subprocessors page — currently Supabase (hosting and database), Vercel (application hosting), OpenAI (transcription), Anthropic (AI features), Stripe (payments), Apple (iOS authentication and purchases), and Resend (transactional email).
  • People you choose to send to. If you send a memo or share a link, the recipient receives what you sent them. Share links can be opened by anyone holding the link, so treat them like a key.
  • Legal authorities, when required by valid legal process, or where necessary to protect the rights, property, or safety of a person.
  • A successor entity, in the event of a merger, acquisition, or sale of assets. You will be notified before your data becomes subject to a different privacy policy.

A very small number of our staff can technically access stored content in order to operate the service — for example, to investigate a bug you report or a suspected violation. Such access is limited, logged, and never for curiosity.

7. Legal bases for processing (EU/UK users)

  • Performance of a contract — providing the service you signed up for
  • Legitimate interests — security, abuse prevention, service improvement
  • Consent — optional features such as location tagging and marketing email, which you can withdraw at any time
  • Legal obligation — tax, accounting, and lawful requests

8. Data retention and deletion

  • Account data and your content — retained while your account is active.
  • Deleted items — removed from production systems promptly and purged from encrypted backups within 30 days.
  • Account deletion — available at any time in the app under Profile → Delete account. Deleting your account removes your recordings, transcripts, entries, goals, and profile. It cannot be undone.
  • Billing records — retained as long as tax and accounting law requires (generally seven years), independent of account deletion.
  • Security logs — retained up to 12 months.

9. Your rights

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Delete your data
  • Export your data in a portable format
  • Restrict or object to certain processing
  • Withdraw consent you previously gave
  • Not be discriminated against for exercising these rights
  • Lodge a complaint with your data protection authority

You can exercise the most important of these yourself, immediately, in the app: Profile → Export my data and Profile → Delete account. For anything else, email privacy@marlojournal.com. We respond within 30 days, and we do not charge for reasonable requests.

California (CCPA/CPRA). You have the right to know, delete, correct, and limit the use of sensitive personal information, and to opt out of sale or sharing. We do not sell or share personal information, and we have not done so in the preceding 12 months. Voice recordings and their transcripts may be treated as sensitive personal information; we use them only to provide the service you requested.

EU/UK (GDPR). You may contact us at privacy@marlojournal.com regarding any of the rights above, and you may complain to your national supervisory authority.

10. Security

We protect your data with:

  • TLS encryption in transit for every connection to the service
  • Encryption at rest for the database and stored audio
  • Row-level security in the database, so a query executed on behalf of one user cannot return another user's rows
  • Scoped access controls and audited administrative access
  • Signed, verified webhooks for all payment events
  • Strict transport security, content-type, framing, and referrer policies on the web application

No system is perfectly secure, and we will not claim otherwise. If we discover a breach affecting your personal data, we will notify affected users and regulators as required by law.

11. International transfers

We operate from the United States, and your data is processed there. For users in the EU, UK, and Switzerland, transfers rely on Standard Contractual Clauses or an equivalent lawful transfer mechanism with each subprocessor.

12. Children's privacy

Marlo is not intended for anyone under 17, and we do not knowingly collect personal data from children. If you believe a child has provided us data, email privacy@marlojournal.com and we will delete it promptly.

13. Third-party sign-in

If you sign in with Apple or Google, that provider confirms your identity to us and shares a limited profile (typically name and email, or a private relay address if you choose to hide it). We never receive your password for those accounts.

14. Changes to this policy

We may update this policy. If a change materially affects your rights or how we use your content, we will notify you by email or in-app notice before it takes effect. The "Last Updated" date above always reflects the current version.

15. Contact

NPH Investment Corporation 123 S Broad St, Ste 1500, Philadelphia, PA 19109

Privacy: privacy@marlojournal.com Support: support@marlojournal.com