Legal
Privacy Policy
Last updated: 3 July 2026
MARROW ("MARROW", "we", "us") operates marrowprotocol.com and a coaching membership for people using GLP-1 medications who want to keep muscle and bone. This policy explains what we collect, why, and the choices you have. We keep data collection minimal by design.
Information we collect
- Contact details you give us. Your email address when you join the waitlist, and the responses you submit if you apply to a cohort (for example whether you are on a GLP-1 medication and your commitment to the program).
- Health-related information you choose to share. If you become a member, you may share bloodwork and body-composition data (for example DEXA results) that you obtain yourself. You control what you send us.
- Usage data. Basic, privacy-first analytics about page visits, collected through Cloudflare Web Analytics, which does not use cookies or fingerprinting and does not track you across sites.
How we use it
- To operate the waitlist and email you about MARROW.
- To review cohort applications and select members.
- To build and adjust your protocol if you are a member.
- To understand, in aggregate, how the site is used so we can improve it.
We do not sell your personal information, and we do not use it for third-party advertising.
Service providers
We share data only with providers that help us run the service, under their own terms:
- Beehiiv stores our email list and sends our newsletters.
- Cloudflare hosts the site and provides privacy-first analytics.
- If you pursue the protocol, you may independently use Function Health (bloodwork) and BodySpec (DEXA). You contract with them directly; we do not receive data from them unless you send it to us.
Social media publishing
MARROW publishes its own marketing content to social accounts that MARROW owns and controls (including Instagram, Threads, TikTok, YouTube, and Bluesky). Where we use a platform's API, we act only to publish our own posts to our own connected accounts. We do not collect, request, or process the personal data of other users of those platforms through these integrations, and we do not access your social accounts.
Data retention
We keep contact and application data for as long as needed to run the waitlist and the program, or until you ask us to delete it. Aggregate analytics are retained in a form that does not identify you.
Your choices and rights
You can unsubscribe from emails at any time using the link in any newsletter. You may request access to, correction of, or deletion of your personal data by emailing [email protected]. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA; contact us and we will honor them.
Children
MARROW is intended for adults aged 18 and over. It is not directed to children, and we do not knowingly collect personal information from anyone under 18.
Security and international transfer
We use reputable providers and reasonable safeguards to protect your data. Our providers may process data in the United States and other countries; by using the site you understand your data may be transferred and processed there.
Changes
We may update this policy. Material changes will be reflected by the "last updated" date above.
Contact
Questions about this policy: [email protected].