privacy policy

Last Updated: November 1, 2026

Elephant (“Elephant,” “we,” “our,” or “us”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains what information we collect, how we use it, when it may be shared, how we protect it, and the rights and choices available to you.

This Privacy Policy is intended to apply to Elephant users worldwide. Additional rights or requirements may apply depending on where you live, including in the European Economic Area (EEA), the United Kingdom, Switzerland, and California.

1. Information We Collect

Depending on how you use Elephant, we may collect or process:

  • Email address

  • Full name or company name

  • Account and authentication information

  • City and country

  • A unique identifier associated with your Elephant account

  • Your device's current location when you use location-based functionality

  • Profile photos and object photos that you voluntarily provide

  • Information relating to your use of Elephant

  • Technical and security information reasonably necessary to operate and protect the service

  • A Boolean purchase-status value indicating whether a digital purchase was successful or unsuccessful

We aim to collect and process only information reasonably necessary for the purposes described in this Privacy Policy.

2. Account Information and Password Security

When you create an Elephant account, we collect information necessary to create, maintain, and authenticate your account, including your email address and name or company name.

Your password is handled through dedicated third-party authentication infrastructure.

Elephant does not store your password in plain text and does not have access to your password in plain-text form.

Appropriate technical and organizational safeguards are used to protect authentication credentials.

Your password and authentication credentials are not provided to analytics or marketing providers.

2.1 Guest Accounts

Guest accounts do not require you to provide personal details such as your email address, password or full name. We may process basic account identifiers and activity timestamps to operate the app, maintain guest access, and identify inactive accounts. Guest accounts may be deleted after 12 consecutive months of inactivity.

3. Location Information

Elephant uses your device's current location to provide location-based functionality.

When you use location-based features, Elephant may request your current device location through the location capabilities provided by your device's operating system.

Your current location may be used by Elephant's backend, together with geographic services such as Google Maps Platform, to determine which Elephant content is located within your area.

3.1 Location During Registration

During registration, Elephant may request access to your device's current location.

If you grant permission, your current location may be used to determine the city and country associated with your account.

The resulting city and country may be stored as part of your account.

Elephant does not store your precise latitude and longitude as a persistent part of your account profile.

3.2 Location During App Use

When you use location-based features, your current device location may be transmitted to Elephant's backend to provide the requested functionality.

Elephant's backend may use geographic information and third-party geographic services, including Google Maps Platform, to perform location-related calculations and determine which content is located within your area.

Your precise location is used for the relevant functionality and is not intentionally stored by Elephant as a persistent location record.

3.3 No Continuous Location History

Elephant does not intentionally create or maintain a historical record of your movements.

Although your current device location may be accessed when you use location-based functionality, Elephant does not intentionally store a continuously updated sequence of your precise GPS positions.

Granting location permission does not mean that Elephant maintains a continuous history of where you have been.

4. City, Country and Analytics

The city and country determined during registration may be stored as part of your Elephant account.

Elephant may also associate city and country with a unique user identifier for analytics and service-related purposes.

This information may be used to:

  • Understand the geographic distribution of Elephant users

  • Understand how the service is used

  • Improve Elephant and its features

  • Generate internal product and business insights

  • Support marketing planning and analysis

Third-party analytics providers may process this information on behalf of Elephant.

Analytics information may include:

  • Unique user identifier

  • City

  • Country

  • Relevant service or usage information

Elephant does not provide analytics providers with your precise GPS coordinates for these purposes.

We also seek to avoid providing your email address to analytics providers when a unique user identifier is sufficient for the relevant purpose.

5. Camera and Photos

Elephant includes optional functionality allowing you to take or upload a profile photo and photos associated with objects you create.

If you grant the relevant permission, Elephant may access your device's camera for the purpose of capturing a photo.

You may also choose to upload an existing photo from your device.

We do not access your camera without permission.

Profile and object photos are used to display your identity or objects within Elephant.

We do not use your photos for advertising or marketing purposes.

You may delete or change your profile photo through your account settings where this functionality is available.

You can revoke camera permissions through your device settings.

Elephant does not access or collect images unless you choose to take or upload a photo.

6. How We Use Your Information

We may use personal information to:

  • Create and manage your Elephant account

  • Authenticate your account

  • Provide, operate, maintain, and improve Elephant

  • Provide location-based functionality

  • Determine your city and country during registration

  • Identify content within your area

  • Understand service usage and geographic distribution

  • Improve the user experience

  • Generate internal product, business, and marketing insights

  • Communicate with you about your account and important service updates

  • Verify digital purchase status and provide access to purchased digital goods

  • Restore eligible purchases

  • Maintain security and prevent fraud, abuse, or unauthorized activity

  • Diagnose and resolve technical problems

  • Comply with applicable legal obligations

We do not sell your personal information.

7. Third-Party Service Providers

Elephant may use third-party service providers to help operate, maintain, secure, and improve the service.

These providers may support:

  • Account authentication

  • Cloud hosting and infrastructure

  • Data storage

  • Analytics

  • Application monitoring

  • Security and fraud prevention

  • Location and mapping services

  • Geographic and distance-related calculations

  • Technical support

  • Other services necessary to operate Elephant

These providers may process information on behalf of Elephant and receive information reasonably necessary to provide their respective services.

Elephant does not publicly disclose its complete technical infrastructure, internal endpoints, database structure, security architecture, or every individual service provider.

Instead, this Privacy Policy describes the relevant categories and purposes of third-party processing.

Third-party providers are expected to process personal information in accordance with applicable law and appropriate contractual and security safeguards.

8. Digital Purchases

Elephant offers digital goods and features that may be purchased through one-time purchases and subscriptions within the mobile application. A registered Elephant account is required to make purchases and access the associated digital goods or features.

8.1 Purchase Information

When you make a digital purchase through Elephant, we process limited information necessary to determine whether the purchase was successful and whether access to the purchased digital goods or features should be granted.

Elephant stores the purchase-status value indicating whether a purchase was successful or unsuccessful.

Elephant does not store payment card details, bank account information, or other payment credentials through these in-app purchase systems.

The purchase-status value is associated with your Elephant account so that we can determine whether you are entitled to access the relevant digital goods or features.

We use this information to verify purchase status, provide access to purchased digital goods, support purchase restoration, and maintain the functionality and security of the application.

8.2 Payment Processing Through Apple and Google

Payments for digital purchases are processed by Apple through the Apple App Store or by Google through Google Play, depending on the platform through which you make your purchase.

Your payment information is handled by Apple or Google in accordance with their respective privacy policies and terms. Elephant does not directly collect or store your payment card details or other payment credentials through these in-app purchase systems.

Apple or Google handle the payment transaction and may provide information or verification results that enable Elephant to determine whether a purchase was successful.

Elephant stores only the purchase-status value indicating whether the purchase was successful or unsuccessful. Apple and Google may independently retain payment and transaction information in accordance with their own policies and practices.

For more information about how these platforms process personal information, please refer to:

8.3 Subscriptions and Payment Information

Elephant offers optional monthly subscriptions that allow businesses to create and share multiple static objects on the platform.

Payment Processing

Subscriptions and one-time purchases are processed through the applicable payment provider, Apple App Store or Google Play, depending on the device and platform used.

Elephant uses IAPHUB to help manage, validate and monitor in-app purchases and subscription status.

Information We Process

To manage purchases and provide access to paid features, we may process information such as:

  • Purchase and transaction identifiers.

  • Subscription type and status.

  • Subscription start and expiration dates.

  • Renewal and cancellation status.

  • Refund and purchase validation information.

This information helps us verify purchases, manage subscriptions, restore access, provide customer support and prevent fraudulent transactions.

Third-Party Services

Apple, Google and IAPHUB may process information in connection with purchases and subscription management, in accordance with their respective privacy policies and applicable data protection requirements.

Payment Information

Payments made through Apple App Store or Google Play are handled by the respective payment provider. Elephant does not directly collect or store your full payment card details through these in-app payment systems.

Data Retention

Purchase and subscription-related information may be retained for as long as necessary to manage your purchases, provide our services, resolve disputes and meet applicable legal, accounting and regulatory obligations.

8.4 Restore Purchases

Elephant may provide a Restore Purchases feature that allows users to restore eligible previously purchased digital goods or features.

To restore a purchase, you must have a registered Elephant account. When you use the Restore Purchases feature, Elephant may request verification through Apple App Store or Google Play to determine whether a previous purchase is valid and eligible for restoration.

The application may retrieve relevant purchase information from the applicable platform to verify the original purchase and determine which digital goods or features should be made available to you.

Elephant stores only the purchase-status value indicating whether a purchase was successful or unsuccessful. Elephant does not store payment card details or other payment credentials as part of this process.

Where applicable, the verified purchase entitlement is associated with your registered Elephant account so that the application can provide access to eligible purchased digital goods or features.

The availability of restored purchases may depend on the original purchase, the platform account used to make it, the type of digital good purchased, and the applicable platform rules.

8.5 Refund Policy

Payments for digital purchases are processed through Apple App Store or Google Play, depending on the platform through which the purchase was made.

Elephant does not directly process or issue refunds for purchases made through Apple App Store or Google Play. If you wish to request a refund, you must submit your request through the relevant platform, which will determine whether a refund is available under its policies and applicable law.

Nothing in this policy limits any refund rights or other consumer rights that may apply under applicable law.

8.6 Account Association and Access to Purchases

A registered Elephant account is required to purchase and access digital goods through the application.

The purchase-status value is associated with your Elephant account so that Elephant can determine whether you are entitled to access the relevant digital goods or features.

If you delete your Elephant account, access to digital goods associated with that account may be affected. You may need to use the Restore Purchases feature, where available, to restore eligible purchases, subject to the applicable platform rules and account requirements.

Deleting your Elephant account does not necessarily entitle you to a refund for previous purchases. Any refund requests are subject to the relevant platform's refund policies and applicable law.

8.7 Retention of Purchase Information

Elephant retains the purchase-status value associated with your account for as long as reasonably necessary to provide access to purchased digital goods, support purchase restoration, operate the application, maintain security, and comply with applicable legal obligations.

If you delete your Elephant account, the associated purchase-status value will be deleted or handled in accordance with the account deletion and data retention practices described in this Privacy Policy, except where information must be retained for legal or other legitimate purposes.

Apple and Google may separately retain payment, transaction, and purchase information in accordance with their own policies and retention practices.

9. Google Maps Platform

Elephant may use Google Maps Platform services for location-based functionality, including mapping, geolocation-related functionality, and geographic or distance-related calculations.

When required to provide these features, information relating to your current device location may be processed through Google Maps Platform.

Google may independently process information associated with requests made to its services in accordance with Google's applicable Privacy Policy, terms, technical documentation, and data practices.

Elephant does not control Google's independent processing of information within Google's services.

Elephant does not intentionally store your precise latitude and longitude as a persistent location record in your account database.

Where Google Maps content requires attribution, Elephant will provide the required attribution.

For more information, please review Google's applicable Privacy Policy and Google Maps Platform terms.

10. Sharing of Information

We may disclose personal information where reasonably necessary to:

  • Provide and operate Elephant

  • Provide authentication, hosting, infrastructure, analytics, security, location, or other technical services

  • Improve and maintain our services

  • Understand service usage and business performance

  • Verify digital purchase status and provide purchased digital goods

  • Support the restoration of eligible purchases

  • Comply with applicable laws, regulations, legal processes, or governmental requests

  • Protect the rights, safety, security, or property of Elephant, our users, or others

  • Detect, investigate, or prevent fraud, abuse, or security incidents

  • Carry out a merger, acquisition, restructuring, financing, sale of assets, or similar business transaction

  • Fulfill a purpose disclosed to you when information is collected

  • Obtain your consent where required

Apple and Google may process purchase and payment information independently when you make purchases through their respective platforms.

We do not sell personal information.

11. International Data Transfers

Elephant is intended to be available internationally. Your personal information may therefore be processed or stored in countries other than the country in which you live.

Where applicable law requires safeguards for international transfers, Elephant will use an appropriate legally recognized transfer mechanism.

Depending on the circumstances, this may include adequacy decisions, standard contractual clauses, contractual protections, or other legally recognized safeguards.

12. Data Security

Elephant takes reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, disclosure, or destruction.

These measures may include:

  • Secure authentication mechanisms

  • Access controls

  • Encryption and secure communications

  • Restrictions on access to personal information

  • Security monitoring

  • Technical security measures

  • Appropriate safeguards for third-party service providers

Passwords are handled through dedicated authentication infrastructure and are not stored by Elephant in plain text.

Elephant stores a Boolean purchase-status value indicating whether a digital purchase was successful or unsuccessful, rather than payment card details or other payment credentials.

However, no online service, application, network, or method of electronic storage or transmission can be guaranteed to be completely secure.

13. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing Elephant, maintaining security, resolving disputes, enforcing agreements, and complying with legal obligations.

Account information may be retained while your account remains active.

If you delete your account, we will delete or anonymize your personal information within a reasonable period, except where information must be retained for legal, security, fraud-prevention, dispute-resolution, or other legitimate purposes.

Precise location information used for location-based functionality is not intended to be retained by Elephant as a persistent location history.

Elephant does not intentionally store a historical sequence of your precise GPS positions in your account database.

City and country information may remain associated with your account for as long as reasonably necessary for the purposes described in this Privacy Policy.

Purchase-status information may be retained for as long as reasonably necessary to provide access to purchased digital goods, support purchase restoration, maintain security, and comply with applicable legal obligations.

Information processed by third-party services, including Google Maps Platform, Apple, and Google Play, may be subject to those providers' own retention and logging practices.

14. Your Privacy Rights

Depending on where you live and which privacy laws apply to you, you may have rights regarding your personal information.

These may include the right to:

  • Request access to your personal information

  • Request correction of inaccurate information

  • Request deletion of your personal information

  • Request a copy of your personal information

  • Object to certain processing

  • Request restriction of certain processing

  • Withdraw consent where processing is based on consent

  • Opt out of certain marketing, advertising, sale, or sharing activities where applicable

  • Exercise other rights provided by applicable law

To exercise your rights, contact:

contact@elephant-app.com

We may need to verify your identity before completing certain requests.

15. European Economic Area, United Kingdom and Switzerland

If you are located in the European Economic Area, the United Kingdom, or Switzerland, additional data protection rights and requirements may apply.

15.1 Legal Bases for Processing

Where the GDPR, UK GDPR, or equivalent legislation applies, Elephant relies on an appropriate legal basis depending on the processing activity.

Providing the Service and Managing Your Account

We process information necessary to create, maintain, authenticate, and operate your Elephant account because this processing is necessary to provide the service you request.

Digital Purchases

We process purchase-status information to verify whether a digital purchase was successful and to provide access to the digital goods or features you have purchased. Where applicable, this processing is necessary to perform our agreement with you or is based on another appropriate legal basis permitted by applicable law.

Location-Based Functionality

Where applicable law requires consent to access your device's location, we will request the relevant permission before accessing your location.

You may withdraw location permission through your device settings where supported.

Location information is used to provide functionality such as identifying content within approximately 5 kilometers of your current position.

Security and Service Operation

We may process information where necessary for the security, integrity, fraud prevention, and reliable operation of Elephant, based on our legitimate interests where permitted by applicable law.

Analytics and Business Insights

We may process limited information such as a unique user identifier, city, country, and relevant usage information to understand how Elephant is used, improve the service, and understand the geographic distribution of our users.

Where permitted by applicable law, this processing may be based on our legitimate interests.

Where consent is required, we will obtain consent before carrying out the relevant processing.

Legal Obligations

We may process information where necessary to comply with applicable legal obligations.

15.2 Your Rights

Subject to applicable law, you may have the right to:

  • Access your personal information

  • Correct inaccurate or incomplete information

  • Request deletion of your personal information

  • Request restriction of processing

  • Object to certain processing

  • Receive certain personal information in a portable format

  • Withdraw consent where applicable

  • Lodge a complaint with a competent data protection authority

You may exercise these rights by contacting:

contact@elephant-app.com

16. California Privacy Information

This section applies to California residents to the extent the California Consumer Privacy Act, as amended (“CCPA”), applies to Elephant.

California law provides applicable consumers with certain rights concerning personal information, including rights to know, delete, correct, and, in certain circumstances, opt out of the sale or sharing of personal information.

16.1 Categories of Personal Information

Depending on how you use Elephant, we may collect categories including:

  • Identifiers: such as email address and account identifiers

  • Personal information: such as name or company name

  • Geolocation information: including current device location used for location-based functionality and city and country associated with your account

  • Internet or electronic network information: such as information necessary to operate and secure the service

  • User-generated content: such as profile photos and object photos

  • Usage information: information relating to your interaction with Elephant

  • Purchase information: a Boolean purchase-status value indicating whether a digital purchase was successful or unsuccessful

16.2 Purposes of Collection and Use

We may use these categories of information to:

  • Provide and maintain Elephant

  • Create and authenticate accounts

  • Provide location-based functionality

  • Verify digital purchase status and provide purchased digital goods

  • Support the restoration of eligible purchases

  • Maintain security and prevent fraud

  • Communicate with users

  • Perform analytics

  • Understand geographic distribution

  • Generate business and marketing insights

  • Improve the service

  • Comply with legal obligations

16.3 Sale and Sharing of Personal Information

Elephant does not sell personal information for monetary consideration.

If applicable law defines certain disclosures to third parties as “sharing” for cross-context behavioral advertising or similar purposes, you may have the right to opt out of such sharing.

If Elephant engages in processing subject to a legally required opt-out right, Elephant will provide the applicable opt-out mechanism.

16.4 California Privacy Requests

California residents may, subject to applicable exceptions and verification requirements, have rights to:

  • Know what personal information we collect, use, disclose, or otherwise process

  • Request access to personal information

  • Request deletion of personal information

  • Request correction of inaccurate personal information

  • Opt out of certain sales or sharing

  • Limit certain uses or disclosures of sensitive personal information where applicable

  • Receive equal treatment for exercising applicable privacy rights

To submit a California privacy request, contact:

contact@elephant-app.com

We will not discriminate against you for exercising privacy rights granted by applicable law.

17. Children's Privacy

Elephant is not intended for children under the age of 13, or the minimum age required in your jurisdiction.

We do not knowingly collect personal information from children below the applicable minimum age.

If you believe that a child has provided personal information to Elephant in violation of applicable law, please contact us so that we can take appropriate action.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, data practices, legal requirements, or other circumstances.

If we make material changes, we may notify you through the App, by email, or by another appropriate method where required by applicable law.

We will update the “Last Updated” date at the beginning of this Privacy Policy when changes are made.

19. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the way Elephant processes personal information, please contact us at:

contact@elephant-app.com

20. Google Privacy Policy and Terms

For additional information regarding Google's processing of information and applicable Google Maps Platform terms, please refer to:

Google Privacy Policy

https://www.google.com/policies/privacy

Google Maps Platform Terms of Service

https://cloud.google.com/maps-platform/terms

Google Maps Platform Documentation

https://developers.google.com/maps/documentation