Privacy Policy

Discover Anyone operates the Service and is the controller of the personal data described here. You can reach us at privacy@discoveranyone.com for any privacy question, request, or complaint.

Read this section carefully if you upload a photo.

• A photo you upload is transmitted over an encrypted connection, held in temporary memory only for as long as the search takes, sent to the face-search providers listed in section 7 so they can look for public matches, and then discarded.
• We do not store your uploaded photo after the search completes, do not add it to any gallery or dataset, and do not make it available to other users.
• We do not create, extract, store, or sell face templates, faceprints, face geometry, or any other biometric identifier. Any face comparison is performed transiently by our third-party search providers under their own policies; we do not receive or keep a biometric template.
• We do not use your photo, your searches, or your results to train, fine-tune, or evaluate any machine-learning or facial-recognition model, and we do not permit our providers to do so on our behalf.
• By uploading a photo you confirm that you are the person in the photo or that you otherwise have the legal right and any required consent to submit it. Uploading a photo of another person without a lawful basis is prohibited by our Terms of Service.
• Illinois BIPA and similar laws. To the extent any biometric identifier or biometric information is created in the course of a search, it is used solely to run that search, is never sold, leased, traded, or otherwise profited from, and is destroyed immediately once the search completes, and in all cases no later than the earlier of the purpose being satisfied or one year from your last interaction with us. This paragraph is our written retention and destruction schedule for the purposes of the Illinois Biometric Information Privacy Act and comparable state biometric laws (including Texas CUBI and Washington HB 1493).
• Illinois and Texas are not served. Face search and paid plans are blocked for requests we detect as coming from Illinois or Texas, and you must attest before every search that neither you nor the person in the photo is located in or a resident of those states. If you are an Illinois or Texas resident, do not use the face search feature.

• Account data: email address, authentication identifiers, display name if you set one, and referral code.
• Search inputs: the photo or name you submit, and any optional filters you select. Photos are handled as described in section 2.
• Search history: the report we generated for you, including links, match scores, and AI summaries, so you can revisit it in your history.
• Billing data: plan, credits, invoices, and subscription status. Card numbers are handled by our payment processor and never reach our servers.
• Usage and device data: pages viewed, features used, approximate location derived from IP, browser and device type, and error logs.
• Support and abuse reports: messages you send us and reports others submit about content or misuse.

• To run searches and deliver results - performance of our contract with you.
• To create and secure your account and process payments - contract and legal obligation.
• To prevent fraud, abuse, stalking, and misuse, including rate limiting and account limits per IP - legitimate interests and legal obligation.
• To measure and improve reliability, accuracy, and conversion - legitimate interests.
• To send service and billing emails - contract. Marketing emails, where used, are sent with consent and can be unsubscribed at any time.
• To process a face photo for a search - consent, which you give at the upload consent gate and which you may withdraw at any time by not submitting further photos.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Results and match scores are produced by automated matching and AI summarization. They can be incomplete, outdated, or wrong, and they are not a background check, not a consumer report, and must not be used for decisions covered by the Fair Credit Reporting Act. If a result about you is inaccurate, contact us and we will correct or remove it from our systems.

These limits are enforced by an automated nightly deletion job, not just by policy.

• Uploaded photos and any faceprint: not retained after the search completes. Staging copies used for reverse-image lookup are deleted inline, and anything orphaned is removed within one hour.
• Cached result sets (keyed by an image hash, not the image): deleted after 30 days.
• Search history shown in your account: deleted after 180 days, or sooner if you delete it or your account.
• Search reliability telemetry (timings, error codes, no photos): deleted after 90 days.
• Rate-limit counters: deleted after 7 days.
• Account data: kept while your account is active, then deleted within 30 days of account deletion.
• Billing records: kept up to 7 years where tax and accounting law requires it.
• Removal and abuse requests: kept up to 24 months so we can prove we honored them.
• Backups: purged on a rolling cycle no longer than 35 days.

We use a limited set of providers, each contractually restricted to the data needed to perform their function:

• Cloud hosting, database, authentication, and storage infrastructure.
• Reverse image and face search providers, which receive the uploaded photo transiently to perform matching.
• Web and people search data providers, which receive the name or query text.
• AI model providers, which receive result text to generate summaries. They do not use it to train models.
• Payment processing, which receives your email and billing details directly.
• Transactional email delivery.
• Product analytics and error monitoring.

We may also disclose data when required by law, to enforce our Terms, or in connection with a merger or acquisition, in which case this policy continues to apply to the transferred data.

We operate from the United States and our providers may process data in the US and other countries. Where personal data is transferred out of the EEA or UK, we rely on the European Commission's Standard Contractual Clauses and the UK Addendum, together with additional technical safeguards such as encryption in transit.

We use strictly necessary cookies and local storage to keep you signed in and remember your settings, and first-party analytics to understand how the app is used. We do not use advertising cookies and we do not track you across other websites. Your browser's Global Privacy Control signal is honored as a valid opt-out request where applicable.

Depending on where you live, you may have the right to access, correct, delete, port, restrict, or object to the processing of your personal data, to withdraw consent, to opt out of sale or sharing (we do neither), and to appeal a decision we make on your request.

• EEA and UK (GDPR): the rights above, plus the right to lodge a complaint with your supervisory authority.
• California (CCPA/CPRA): the right to know, delete, correct, and limit use of sensitive personal information, and the right not to be discriminated against for exercising a right. We do not sell or share personal information.
• Other US states (including Virginia, Colorado, Connecticut, Utah, and Texas): equivalent rights, including a right to appeal, which you may exercise at the same address below.

You can access, edit, and delete most data yourself from the Account page. For anything else, email privacy@discoveranyone.com. We verify requests through your account email, respond within 45 days, and may extend once where the law allows. Authorized agents may submit requests with written proof of authorization. Exercising your rights is free.

You do not need an account, and you do not need to be a customer. Anyone can be removed from our results. Submit the link or a description on our removal and opt-out page — links you submit are suppressed immediately on receipt, before a human reviews the request — or email privacy@discoveranyone.com. Once suppressed, that result is filtered out of every future search on our Service, including results already sitting in our cache.

Being a searched subject also gives you rights over how you are handled: you can ask us what we hold about you, ask us to delete it, and object to the processing, whether or not your state or country has a privacy statute. We do not require you to identify yourself beyond what is needed to locate the result. We cannot remove content from websites we do not operate; those requests must go to the site or search engine hosting the page, and we will tell you where to send them.

The Service is for adults 18 and over. We do not knowingly collect personal data from anyone under 18, and we do not knowingly permit searches intended to identify a minor. If you believe a minor has used the Service or that a photo of a minor was submitted, email legal@discoveranyone.com and we will delete the account and associated data promptly.

We use encryption in transit, encrypted storage, row-level access controls, least-privilege service credentials, rate limiting, and audit logging. No system is perfectly secure. If we become aware of a breach affecting your personal data, we will notify you and any required regulator within the timeframes the law sets.

We are committed to keeping this policy and the Service usable by everyone. See our Accessibility Statement for how to request an accessible alternative or report a barrier.

We may update this policy as the Service changes. If a change is material, we will notify you by email or in the app before it takes effect. The effective date at the top of this page always reflects the current version.

Privacy questions and rights requests: privacy@discoveranyone.com. Legal notices: legal@discoveranyone.com. Accessibility: accessibility@discoveranyone.com.