Privacy

Data controller and contact

ELYIO is operated by QRepublik, Inc., the data controller for the service. Postal address: 651 N Broad St, Suite 206, Middletown, Delaware 19709, USA. Privacy requests: support@qrepublik.com.

For general contact, email ceo@qrepublik.com.

Camera and recognition

When you scan, the selected artwork image is sent to the ELYIO recognition backend for candidate matching and visual verification. Recognition attempts and outcomes are recorded for operational reliability and product analytics. The repository does not establish a blanket deletion period for every attempt, so no fixed deletion promise is made here.

Museum and location

ELYIO may request browser geolocation to suggest a nearby museum. You can deny it and choose a museum manually. The selected museum and visit state may be kept in browser storage for the visit.

Analytics and storage

Consent-gated first-party events, Google Analytics and PostHog integrations are present in the application. Anonymous/session identifiers, consent state and visit progress may be stored in localStorage or sessionStorage. ELYIO does not cache recognition API responses, camera data or visitor images in its service worker.

Service providers

The implemented integrations include Supabase, the ELYIO backend hosting environment, OpenAI model endpoints for recognition, Google Analytics and PostHog. Data handling by those providers is governed by their own terms and privacy notices.

Your choices

You may deny analytics consent, deny camera or location permissions, choose a museum manually, clear browser storage, or stop using the service. For access, deletion or other privacy or data-rights requests, contact support@qrepublik.com.