Data protection
Privacy Policy
Who we are
Marly is operated by Marly Asset Management ApS ("Marly", "we", "us"), CVR 46572181, Denmark. We provide a yacht operations platform for boat owners and fleet managers through our website and mobile apps.
For privacy questions, contact us at hello@marlymarine.com.
What we collect and why
Account information
When you sign in with Microsoft authentication, we receive your name, email address, and a unique identifier from Microsoft's identity platform. We use this to create and manage your account and to keep your session secure.
Vessel and operational data
Everything you enter into Marly — vessel details, systems, components, parts, maintenance records, inspection findings, skipper logs, work plans, and related operational notes — is stored so we can provide the service to you. We do not analyse or mine this data for advertising or unrelated profiling.
Uploaded files
Photos, PDFs, and other attachments you upload are stored in Microsoft Azure Blob Storage and are accessible only to you and users you have explicitly granted access to.
On mobile, Marly may request access to your camera or photo library so you can attach images to parts, work items, skipper-log entries, and receipts. You can deny these permissions and continue using other parts of the app.
Smee (AI assistant)
If your account includes Smee, you can ask questions about your vessel and receive AI-generated responses.
When you use Smee, we process:
- the text you send, including typed messages and text produced from voice input
- the selected vessel and relevant operational context from your account — such as systems, components, parts, work records, and inspection information — needed to answer your question
- conversation thread identifiers so your chat can continue across sessions
Smee responses are generated using Anthropic's Claude models, which we engage as a sub-processor. Anthropic processes your prompts and the vessel context we supply only to generate the requested response on our instructions. Your data is not used to train Anthropic's models.
Smee conversation history is stored in Marly while your account is active. You can clear a conversation at any time. When you delete your account, your Smee conversations are deleted along with your other account data.
Smee is designed to help with operational understanding. It does not replace qualified marine inspection, maintenance, safety, or purchasing advice.
Voice input on mobile
On supported mobile devices, you may dictate messages to Smee using your device's microphone and speech-recognition capability.
- Marly requests microphone and speech-recognition permission only when you choose voice input.
- Speech is converted into text on your device or through your device's operating-system speech service before any text is sent to Marly.
- Marly does not receive or store raw audio recordings.
- If you deny microphone or speech permission, you can still type messages to Smee.
Vessel location on mobile
The mobile app can set a vessel's position from your device's location so you do not have to enter coordinates by hand.
- Location is requested only when you choose to set a vessel position, and only while the app is open. Marly does not track your location in the background.
- The resulting position is stored as vessel data on your account, not as a record of your personal movements.
- If you deny location permission, you can still set a vessel position manually.
Notifications on mobile
Marly can schedule reminders on your device for maintenance and other operational items. These notifications are generated locally by the app; Marly does not operate a remote push service and does not collect a push token for your device.
You can disable notifications at any time in your device settings.
Diagnostics and error reporting
To keep Marly reliable, we may collect limited technical diagnostic information when the app encounters an unexpected error in production, such as:
- app version and platform
- error type and stack trace
- coarse environment information needed to debug the issue
Production mobile builds may send this information to Sentry, our crash-reporting provider. We configure Sentry to avoid sending account identifiers, authentication tokens, request bodies, chat content, vessel records, or other personal content with crash reports.
We do not use third-party advertising trackers.
Service notifications and support
We may process your contact details and account information to send service-related communications, respond to support requests, and operate account features such as deletion requests.
How we use your data
We use personal data to:
- provide, maintain, and improve the Marly website and mobile apps
- authenticate you and keep your account secure
- store and display your vessel and operational records
- operate Smee and related AI-assisted features where enabled for your account
- diagnose and fix technical problems
- respond to support requests and legal obligations
We do not sell your personal data. We do not use your data for advertising.
Legal basis for processing (GDPR)
- Performance of a contract (Article 6(1)(b)): processing your account, vessel, and operational data is necessary to provide the service you signed up for.
- Legitimate interests (Article 6(1)(f)): limited technical logging and crash diagnostics to keep the service secure and operational.
- Consent (Article 6(1)(a)): only where required for optional device permissions or other features that rely on consent under applicable law.
We do not rely on consent as the sole basis for processing data that is necessary to provide the core service.
Data sharing and sub-processors
We use a small number of trusted sub-processors to operate the service. These providers process data only as necessary to provide their services to us:
- Microsoft Azure (EU region) — Hosting and file storage
- Microsoft Entra External ID (CIAM) — Authentication
- Anthropic — Smee AI processing (prompts and the vessel context needed to answer them)
- Google Maps (Android) — Map display in the mobile app
- Sentry — Production crash diagnostics for mobile apps
We do not share your personal data with other third parties except where required by law or where you explicitly direct us to (for example, opening an external supplier link from a Smee recommendation in your browser).
Tide (social features): if you use Tide, posts you mark as visible will be shown to your accepted mates. You control who you connect with.
Data retention
We keep your data for as long as your account is active and as needed to provide the service.
- Smee conversations: retained while your account is active; deleted when you clear a conversation or delete your account.
- Vessel positions: retained as part of your vessel records until you change or delete them, or delete your account.
- Uploaded files: deleted from storage when you delete them or when your account is deleted, subject to backup and legal retention limits.
- Diagnostics: retained only as long as needed to investigate and resolve technical issues, according to our crash-reporting provider's retention settings.
If you delete your account, we permanently delete your personal data, vessel records, attachments, and related operational data, except where retention is required by law or needed to resolve an outstanding support, billing, or security matter. Backups containing deleted data are purged on their normal rotation cycle.
Security
All data is transmitted over HTTPS. Files are stored in Azure Blob Storage in the EU with access controlled via short-lived signed URLs. Authentication is handled by Microsoft's identity platform.
No system is perfectly secure. We will notify you if we become aware of a breach that affects your personal data, where required by law.
Your rights (GDPR)
You have the right to access, correct, or delete your personal data; to restrict or object to processing in certain circumstances; and to data portability where applicable.
To exercise any of these rights, contact us at hello@marlymarine.com. We will respond within 30 days.
You may also lodge a complaint with Datatilsynet (datatilsynet.dk), the Danish data protection authority.
International transfers
Your account, vessel, and operational data — including uploaded files — is hosted in Microsoft Azure in the European Union.
Some sub-processors (including Anthropic, Sentry, and Google for map display) may process limited data outside the EEA. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission or equivalent protections.
Automated decision-making
Smee uses automated processing to generate suggestions and explanations based on the information available in your account. These outputs are assistive only and do not produce legal or similarly significant effects on you.
Children's privacy
Marly is intended for adults managing yacht operations. We do not knowingly collect personal data from children.
Changes to this policy
We may update this policy as the service evolves, including when we add or change mobile features such as Smee, voice input, or diagnostics. We will notify you of material changes via email or an in-app notice. The date at the top of this page shows when it was last updated.
Contact
For any privacy questions: hello@marlymarine.com.