Discover Privacy Policy

The short version

• Where you've been, your routes, your photos and your health data are kept on your iPhone.
• Something leaves your iPhone only when you choose to share it: a bubble, a story, a message or an invitation, with the friends you pick.
• We never sell your data, never use it for ads, and never track you across other companies' apps or websites.
• You can delete your account, and everything we hold for it, at any time.

What stays on your iPhone

Where you've been. With your permission, Discover uses your iPhone's location to notice the places you visit and how you travel between them, and keeps them as bubbles in a database on your iPhone.

Your photos' places. If you allow access to your photos (all of them, or only the ones you pick), Discover reads when and where each photo was taken to put it in the right bubble. Your photos are not copied to our servers.

Your workouts. If you allow it in Apple Health, Discover reads your workouts and their routes (hikes, runs, walks and rides) to turn them into bubbles and stories. Discover does not write anything to Apple Health.

Your Google Maps history. If you choose to import your own Google Maps Timeline export, the file is read on your iPhone. It is not uploaded.

How you moved. With Motion & Fitness permission, Discover uses your iPhone's own activity reading (walking, running, cycling or in a vehicle) to tell how you got somewhere.

Elo. When you plan an adventure with Elo, the places and the route come from Apple Maps (see who helps us run Discover, below), and Apple's on-device model adds to the plan where your iPhone supports it. What you ask Elo is not sent to our servers.

What leaves your iPhone, and only when you choose

Your account. You sign in with Apple. Apple gives us a stable identifier for your account and, only if you let it, your name and email address; Apple can hide your real address behind a relay address. We use them to run your account and to let friends find you by the name you choose.

Friends. When you and someone become friends, we store that, so each of you can see what the other shares.

What you share. When you share a bubble, a story or an adventure, or send an invitation, it is sealed on your iPhone first and then kept on our servers so the friends you chose can receive it: our servers cannot read it. Friends see only what you share with them. Until you share something, they see nothing. How messages between friends are kept will be written here when messages arrive in Discover.

Invitations. An invitation link carries a random code, not your name and not a place. The page it opens on discover.eloai.io shows neither. The person you invite sees who invited them, and to where, only inside Discover.

Movies of your stories. If Discover lets you save a story as a movie, it is made on your iPhone and goes only where you send it. It carries the Discover mark, and your home is not shown unless you choose to show it.

Where you are right now. If Discover ever lets you share your live location, it will be off until you turn it on for a person you choose, and one tap will stop it.

Safety. You will be able to block anyone, and to report anything you receive. Plans and the places you share are sealed on your iPhone before they leave it, so our servers cannot read them, and Discover checks the words on your iPhone before anything is sealed; a report sends us the item you reported, so that we can act on it. Before Discover is available to anyone outside our team, this section will say how what people send each other is checked, who reads reports, and how quickly we answer.

Location

Discover asks for location While Using first. It asks for Always only when you turn on automatic bubbles, and it explains why before iOS asks you. You can change this at any time in Settings, Privacy & Security, Location Services, Discover, and Discover keeps working with what you allow.

Apple Health

Health data read from Apple Health is used only to make your bubbles and stories. It is never stored in iCloud, never used for advertising or marketing, never sold and never given to anyone else. A workout's route leaves your iPhone only if you share that adventure with friends you choose.

What we never do

• We don't sell or rent your data.
• We don't show ads, and we don't use your data for advertising or marketing.
• We don't track you across other companies' apps and websites. Discover contains no third-party advertising or analytics code.
• We don't use your places, photos or messages to train AI models.

Who helps us run Discover

• Cloudflare, Inc. runs the servers and the database that carry what you share, and serves this website.
• Apple provides Sign in with Apple, notifications and the App Store, and Apple Maps, which answers the places and routes you search for and draws the map. Apple's privacy policy covers what Apple Maps receives.

Each handles data only to provide its service to us, under terms that protect it at least as well as this policy.

To know whether invitations work, we count on our own servers how many are sent, opened in the app and accepted. These counts use no advertising identifier and no third-party tools.

Keeping and deleting

• On your iPhone, your data stays until you delete it, or delete Discover.
• On our servers, what you shared stays until you delete it or your account.
• You can delete your account in Discover's preferences. That deletes everything we hold for it from our servers. Copies can remain in our database provider's point-in-time backups for up to 30 days, and are then gone.
• You can turn off Discover's access to your location, photos, motion and Apple Health in your iPhone's Settings at any time.

You can also write to privacy@eloai.io for a copy of what we hold, a correction or a deletion. We answer within 30 days, or sooner where the law says so, and never charge for it.

Children

Discover is for people 13 or older. We do not knowingly collect personal information from anyone under 13. If you believe a child has given us personal information, write to privacy@eloai.io and we will delete it.

Your rights

Everyone. You can ask what we hold about you, and have it corrected, exported or deleted.

EU, UK and Switzerland. You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to your data protection authority.

Israel. You have the right to review the information held about you and to ask for it to be corrected or deleted, under the Protection of Privacy Law.

California and other US states. You have the right to know, correct and delete. We do not sell or share personal information, and we will not treat you differently for using any of these rights.

This website

discover.eloai.io sets no cookies, runs no analytics and loads nothing from other companies. Cloudflare, which serves it, processes your IP address and the pages you ask for in order to deliver them and to protect the site.

Who we are

Discover is made by ELO SI in Israel. Questions about this policy and requests about your data go to privacy@eloai.io; anything else to hello@eloai.io.

Changes

If we change this policy we will update the date at the top, and before a change that matters takes effect, Discover will tell you in the app.