Privacy
What leaves the phone.
The calendar stays. The assistant sends only what you hand it, and only when you ask.
Last updated October 21, 2026.
Who this is
Marginal is made by Neurolance LLC. The app does not ask you to create an account. This policy covers the app and this website. The website does not set analytics cookies and does not ask you to sign in.
Stays on the phone
This data is not uploaded:
- The calendar, tasks, alarms, and settings.
- App-blocking data: which apps are used and blocked.
- Widget data.
- Backups. A backup is a file you save yourself.
On iPhone, the apps a Focus group closes are chosen in Apple’s picker and kept by Screen Time. Marginal sees a count, not the list.
What leaves the phone
Something leaves only when you use the assistant, Describe. What leaves is:
- The text, photo, or PDF you give it.
- The next two weeks of calendar context: titles and times.
- Your repeating series.
It goes to Marginal’s proxy, hosted on Cloudflare, and from there to Google’s Gemini API, on the paid tier. It is not stored or logged by Marginal. Logs record counts, timings, and failures — not the words, the image, or the calendar. On the paid tier, Google does not use those requests to train its models.
Identifiers
Install id. A random id made on the phone, used only to count daily allowances. The proxy keeps daily counts against it. It is not an advertising id. The RevenueCat customer id is this same install id, so a purchase can be checked without an account.
Network address. Never stored. The proxy keeps a keyed hash of it that changes daily, and uses that for limits. The hash cannot be followed from one day to the next.
Third parties
- Google (Gemini). Processes assistant requests, on the paid API tier. Those requests are not used to train Google’s models.
- Cloudflare. Hosts the proxy.
- RevenueCat. Purchase status, keyed on the install id. Apple and Google handle the payment itself. Marginal does not see your card or your store account.
- Firebase App Check, with Apple App Attest or DeviceCheck and Google Play Integrity. Confirms the app is genuine, on a real device. No personal data is involved.
Dictation
Dictation uses the phone’s own speech recognizer. Apple’s or Google’s may process the audio on their servers, under their policies. Marginal never receives the audio. What reaches Describe is the text the recognizer returns, and that text stays in the field until you choose Propose.
Not collected
- Accounts or email addresses.
- Contacts or location.
- Advertising ids.
- Analytics or tracking SDKs.
- Selling or sharing for ads. We don’t do either.
Children
Marginal is not directed at children under 13. We don’t knowingly collect personal information from them.
Deletion
Delete the app. That removes the calendar, the settings, and the install id from the phone. The only server-side data is the daily usage counts, kept about a week, and RevenueCat’s purchase record. A new install gets a new id. Restore purchases asks the store for the receipt and moves Pro onto that new id.
To ask about the RevenueCat record, write to contact@neurolance.ai.
The same list, for the stores
The App Store privacy label and Google Play’s Data safety form should be filled from this list, not from a second one. Nothing here is used to track you across apps and websites.
| Data | What happens | Stored? |
|---|---|---|
| Calendar, tasks, alarms, settings | Stays on the phone | On the phone only |
| App-blocking data, widgets, backups | Stays on the phone. A backup is a file you save. | On the phone, or in a file you keep |
| Text, photo, or PDF given to Describe | Sent to the proxy, then Gemini, when you ask | Not by Marginal, and not used to train Google’s models. |
| Next two weeks, and repeating series | Sent with that same request. Titles and times. | Not by Marginal, and not used to train Google’s models. |
| Install id | Daily allowance counts. Also the RevenueCat customer id. | Counts kept about a week. Purchase record at RevenueCat. |
| Network address | A keyed hash that changes daily, for limits | The address itself is never stored |
| Purchase status | RevenueCat, keyed on the install id. The store takes payment. | Yes, at RevenueCat |
| App Check token | Shows the app is genuine. No personal data. | Not a profile. Checked per request once it ships. |
| Dictation audio | The phone’s recognizer. Apple or Google may process it. | Marginal never receives it |
| Counts, timings, failures | Proxy logs | Yes. Not the contents of a request. |
App Store privacy label
Data used to track you: none. Then, from the table:
- Identifiers — User ID. The install id. Used for app functionality. Linked to the daily counts and the purchase record. Not an advertising device id. Do not declare Device ID for ads.
- Purchases. Purchase status, via RevenueCat, for app functionality.
- User content (other user content, photos, and files) andcalendar data you include in a Describe request. Purpose is app functionality. Declare them as collected, and as not retained: Marginal does not log them, and the paid Gemini tier does not use them to train models.
- Diagnostics. Counts, timings, and failures. Not crash logs. We don’t ship a crash reporter.
- Audio. Marginal does not receive it. The recognizer is the phone’s. If the form asks about that framework, the audio is Apple’s or Google’s, under their policies.
Do not declare contact info, health, location, contacts, browsing history, or search history.
Google Play Data safety
- Data is encrypted in transit.
- Data is not sold.
- Users delete what is on the phone by deleting the app. Daily counts expire in about a week. The purchase record is the one retained item, and they can write to contact@neurolance.ai about it.
- Collected and stored: User IDs (the install id), purchase history, and app diagnostics (counts, timings, failures).
- Processed for a request: photos, files, and calendar data sent to Describe, plus the text of the request. Play can treat data held only in memory to answer one request as ephemeral, and then it is not “collected.” That fits here: Marginal does not log the contents, and the paid Gemini tier does not keep them to train models. Declare them as shared with Google for app functionality, and not sold.
- The network address is not collected. The daily hash is an anti-abuse key, not the address.
- Audio files: not collected by Marginal. Same note as the App Store.
- Shared with service providers for app functionality: Google, Cloudflare, RevenueCat, and Firebase App Check. Not shared for advertising.
Changes
If this policy changes, the date at the top changes with it. The store listings should point at this page.
Contact
Neurolance LLC
contact@neurolance.ai