marno.

Privacy Policy

Last updated: 29 June 2026

This Privacy Policy explains what information Marno collects, how we use it, and the choices you have. We follow the Australian Privacy Principles (APPs) set out in the Privacy Act 1988 (Cth).

What we collect

  • Account info. Your email address, name (if you provide one via Google sign-in), and an authentication credential (passkey or one-time codes).
  • Your activity. Restaurants you save, lists you create, notes and tags you add, and your conversations with the concierge.
  • Operational data. Limited request logs (timestamp, IP, path) for security and rate-limiting.

What we don’t collect

  • Your payment information (we don’t charge yet).
  • Tracking pixels, ad IDs, or cross-site behavioural data.
  • Microphone audio — voice transcription is performed in your browser via the Web Speech API; the audio never leaves your device.

How we use it

To run the product: signing you in, persisting your saves and chats, powering AI suggestions, and improving the experience. We use third parties strictly as service providers:

  • Google Maps Platform for restaurant data and tile imagery, in accordance with the Google Maps Platform terms.
  • xAI for the concierge LLM. Your chat input is sent to xAI for inference. xAI states that API content is not used for model training.
  • MongoDB Atlas for storage (when deployed).

Sharing

We don’t sell your data. We don’t share your saves or chats with anyone unless you choose to publish a list (in which case the list’s contents are reachable via its public URL).

Your choices

  • Delete individual saves, lists, or chat history at any time from the app.
  • Email us to request export or deletion of all your data (see Contact).

Cookies

We use a single essential cookie to keep you signed in (better-auth.session-token). We also run product analytics via PostHog in two stages:

  • Before you acknowledge the cookie notice.Analytics run in anonymous mode — no cookie is set, nothing is stored on your device, and no personal profile is created. Events are grouped only by an anonymous, in-session identifier that resets each visit, and your IP address is discarded on collection.
  • After you acknowledge the notice. Full cookie-based analytics are enabled. PostHog may set a cookie to persist your anonymous identity across sessions, allowing us to understand how the product is used and improve it. No ads, no cross-site tracking, and we never sell your data.

We use PostHog as our product-analytics provider. PostHog hosts this data in the United States, so using Marno involves disclosing the information above to an overseas recipient. We take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles, including a data-processing agreement with PostHog, and we remain accountable for that information under the Privacy Act 1988 (Cth).

Children

Marno is not directed at children under 13. If you believe we’ve inadvertently collected information from a child, contact us so we can delete it.

Changes

We’ll update the “Last updated” date at the top when this policy changes. Material changes will also be flagged in the app.