Skip to content
TR Türkçe EN English
Download

Privacy Policy

Last updated: October 21, 2026

1. Introduction

MarsFlow (“we,” “our,” or “us”) operates the MarsFlow mobile application (the “App”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App. By accessing or using MarsFlow, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not use the App.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address
  • Password (stored securely via hashing; we never store plain-text passwords)
  • Your name, if you add it to your profile

If you sign in with Apple or Google, we receive basic profile information from that provider: your email address and, if available, your name (and, for Google, a link to your profile picture). If you sign in with Apple, we also store a token issued by Apple so that we can revoke the App’s access to your Apple ID when you delete your account.

2.2 User-Generated Content

In the course of using the App, you may create and store the following types of data:

  • Meetings and meeting notes
  • Tasks and to-do items
  • Follow-up reminders
  • Contacts and contact details, including contacts you choose to add from your device’s address book. With your permission, the App shows your address book on your device and saves only the contact you select; your address book is not uploaded.
  • Relationship details you add to a contact, such as a birthday, how often you want to stay in touch, and when you last contacted them
  • Companies and company information
  • Notes, including transcripts of voice notes you dictate (see Section 2.6)

If you allow it (Settings › Contacts), contacts you add in MarsFlow are also saved to your device’s address book. To avoid duplicates, the App compares phone numbers and email addresses with your address book on your device; your address book is not uploaded.

This content is created and managed entirely by you. We do not access, analyze, or use your content for any purpose other than providing and maintaining the App’s functionality.

2.3 Purchase Information

If you subscribe to MarsFlow Pro, your purchase is processed entirely by the Apple App Store or Google Play Store. We do not collect or store your payment card details, billing address, or other financial information. We receive only a transaction confirmation and subscription status from the respective platform.

2.4 Device and Usage Data

Starting with version 1.0.4, the App collects limited usage and error data so that we can improve it and fix errors. No third-party analytics, tracking, or advertising tools (SDKs) are used for this: the data is stored only in MarsFlow’s own Supabase infrastructure in the European Union (Ireland).

  • Usage events: Records of which features are used (for example, creating a record, running a search, or opening the subscription screen). Each event contains the event name; non-content fields such as the record type (task, note, contact, etc.), the source, the selected subscription package, or a result code; the platform (iOS or Android); the app version; the app language; and the time. The content of your notes, contacts, tasks, and other records (titles, names, text, email addresses, etc.) is not sent.
  • Error logs: When an error occurs in the App: the error message, the stack trace (where in the code the error occurred), the context of the error, the platform, the app version, and the operating system version. Error logs are not designed to collect your content; however, an error message may, in exceptional cases, include a value that was being processed when the error occurred.
  • Installation ID: On first launch, the App generates a random installation ID on your device and sends it with events and error logs. No advertising identifier (IDFA/AAID) or hardware device identifier is used. IP addresses are not stored in usage events or error logs.
  • Link to your account: If you are signed in when an event or error log is sent, it is linked to your account. Records sent before you sign in carry only the installation ID.

Purpose and legal basis: We use this data only to understand how the App is used, to improve features such as sign-up and subscription, and to find and fix errors. Our legal basis is our legitimate interest in improving the App and keeping it reliable, provided that this does not harm your fundamental rights and freedoms (GDPR Art. 6(1)(f); Turkish Personal Data Protection Law No. 6698 (KVKK) Art. 5(2)(f)). This data is not used for advertising, is not sold, and is not used to track you across other companies’ apps or websites.

Turning it off: Sharing usage data is on by default. You can turn it off at any time in the App under Settings › Privacy & security › Share usage data. When you turn it off, any events still waiting on your device are sent together with one final event recording that you turned it off; after that, no usage events or error logs are sent. Events that occur while you are offline are kept on your device and sent when you are back online.

Retention and deletion: Usage events and error logs linked to your account are deleted together with your other data when you delete your account (see Section 10.2). Records sent before you signed in carry only the installation ID and are not linked to your account, so they are not deleted when you delete your account.

2.5 Information Processed Only on Your Device

  • Business card scanning: When you scan a business card, the text is recognized on your device (Apple Vision on iOS, Google ML Kit on Android). The photo is not uploaded; only the details you review and save become a contact. The App uses your camera or photo library only when you start a scan.
  • Phone calendar: If you connect your calendar, the App reads your calendar events on your device to show them on the Today screen. Events are not uploaded unless you turn one into a meeting, which then becomes a meeting in your account. You can turn this off at any time in Settings › Calendar.
  • Follow-up messages: When you choose to send a follow-up by WhatsApp or email, the App opens that app with a draft message. You send the message yourself, through that app and under its terms; MarsFlow does not send messages on your behalf.

2.6 Voice Notes and Dictation

When you use a voice note or dictate into a notes field, the App records audio with your microphone, only while you are recording. When you finish, the recording is sent over an encrypted connection, through our server, to Soniox, a speech-to-text provider, and is transcribed in Soniox’s European Union region. The transcript is added to your note and stored like your other content.

  • We do not keep the recording. We delete the audio and the transcript from Soniox as soon as the transcription is complete, and the temporary file on your device is deleted once the transcript is ready or when you discard the recording.
  • Soniox does not use your audio or transcripts to train or improve its models.
  • Before your first voice note, the App asks for your consent. You can withdraw it at any time in Settings › Voice notes; after that, no audio is sent until you agree again.

Legal basis: your explicit consent (GDPR Art. 6(1)(a); KVKK Art. 5(1)).

3. How We Use Your Information

We use the information we collect solely for the following purposes:

  • Providing the Service: To create and maintain your account, store your data, and deliver the App’s core features.
  • Authentication: To verify your identity when you sign in.
  • Notifications: If you allow them, to show the meeting, task, follow-up, and birthday reminders and the morning briefing you have set up in the App.
  • Voice Notes: To turn recordings you make into text (see Section 2.6).
  • Subscription Management: To verify your subscription status and grant access to premium features.
  • Improving the App and Fixing Errors: To understand which features are used and to find and fix errors, using the usage events and error logs described in Section 2.4. We do not use your User-Generated Content for this.
  • Customer Support: To respond to your inquiries and resolve issues.

4. Data Storage and Security

Your data is stored securely on cloud infrastructure powered by Supabase. Supabase provides enterprise-grade security, including:

  • Encryption of data in transit (TLS/SSL)
  • Encryption of data at rest
  • Row-level security policies ensuring that only you can access your own data
  • Secure authentication via Supabase Auth

While we implement commercially reasonable measures to protect your information, no method of electronic storage or transmission over the Internet is 100% secure. We cannot guarantee absolute security.

5. Offline Data Caching

The App may cache the most recently loaded data on your device to allow limited offline access. This cached data is stored locally on your device and is not transmitted to any third party. The cached data is automatically updated when you reconnect to the Internet.

6. Third-Party Services

6.1 Supabase

We use Supabase as our backend infrastructure provider for data storage and authentication. Your account information, your User-Generated Content, and the usage events and error logs described in Section 2.4 are stored on Supabase servers in the European Union (Ireland). Supabase processes your data on our behalf and in accordance with its privacy policy. Like any infrastructure provider, Supabase processes technical data such as IP addresses in its request and sign-in logs to deliver and secure the service. For more information, visit supabase.com/privacy.

6.2 RevenueCat

We use RevenueCat to manage in-app subscriptions across the Apple App Store and Google Play. RevenueCat receives limited information necessary to validate and manage your subscription status. For more information, visit revenuecat.com/privacy.

6.3 Apple App Store and Google Play

Purchases are processed through Apple’s or Google’s payment systems. Their respective privacy policies govern how they handle your payment information. If you have allowed your device to share diagnostics with app developers, Apple or Google may also provide us with crash reports and performance data for the App through App Store Connect or Google Play Console.

6.4 Our Website

This website (marsflow.app) is hosted by Vercel. Like any web host, Vercel processes technical data such as IP addresses to deliver and secure the site. We use Vercel Web Analytics to count page visits; it does not use cookies and reports only aggregated statistics. The website does not use advertising or tracking cookies.

6.5 Soniox

We use Soniox to transcribe voice notes (see Section 2.6). Recordings are processed in Soniox’s European Union region on our behalf and deleted after transcription. For more information, visit soniox.com/policies/privacy-policy.

6.6 Sign in with Apple and Google

If you choose to sign in with Apple or Google, the sign-in is handled by Apple or Google under their own privacy policies, and we receive only the information described in Section 2.1.

7. Data Sharing

We do not sell, rent, trade, or otherwise share your personal information with third parties for marketing, advertising, or any other purpose. Your data is only shared with the service providers listed in Section 6, strictly for the purpose of operating the App. Usage events and error logs are kept only in our own Supabase infrastructure and are not shared with analytics or advertising companies.

8. Advertising

MarsFlow does not display any advertisements. We do not share your data with advertising networks or data brokers.

9. Notifications

You may allow MarsFlow to show reminders for meetings, tasks, follow-ups, and your contacts’ birthdays, and a morning briefing of your day, as you set them up in the App. Notifications are shown by your device and are entirely optional. You can enable or disable them at any time through your device settings or within the App.

10. Your Rights and Choices

10.1 Access and Correction

You can access, edit, and update all of your data directly within the App at any time.

10.2 Account Deletion

You may delete your account and all associated data directly from within the App (Settings › Delete Account). Upon account deletion, all of your data — including meetings, tasks, follow-ups, contacts, companies, and notes, as well as the usage events and error logs linked to your account — will be permanently removed from our servers. If you signed in with Apple, we also revoke the App’s access to your Apple ID. This action is irreversible. If you cannot access the App, see how to request deletion by email. Deleting your account does not cancel a subscription purchased through the App Store or Google Play.

10.3 Data Portability

You can export your contacts, meetings, tasks, and follow-ups as CSV files from Settings › Export Data in the App. For any other export request, contact us at support@marsflow.app.

10.4 Usage Data

You can object to the processing of usage data at any time by turning off Settings › Privacy & security › Share usage data in the App (see Section 2.4). To request access to, or deletion of, the usage events and error logs linked to your account, contact us at support@marsflow.app.

11. Children’s Privacy

MarsFlow is not intended for use by children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to promptly delete that information.

12. International Data Transfers

Your account data and content are stored in the European Union (Ireland), and voice notes are transcribed in the European Union. Some service providers, such as RevenueCat, Apple, and Google, may process limited information in other countries. Your information may therefore be transferred to and processed in countries other than your country of residence, which may have data protection laws that differ from the laws of your jurisdiction. By using the App, you consent to the transfer of your information to such countries.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last updated” date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the App after any changes constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: