Discovery Lab
Discovery Lab identifies everyday objects and generates child-friendly exploration content. We minimize data collection. No separate account is required, and we do not proactively collect names, email addresses or other contact details.
Photos and text: a parent must read the disclosure and consent before first using cloud features. Selected images are compressed and re-encoded on the device to remove original photo metadata. When you request recognition, a new concept or a follow-up, processed images, questions and relevant exploration context pass through Cloudflare to DeepSeek for recognition, explanations and input/output safety checks. Images may still show faces or addresses: photograph objects and avoid personal information.
Discovery Journal: photos or previews, dates, generated content, chosen questions and relationships, follow-ups and optional notes stay on this device. There is no account, cloud sync or device sharing. You can delete individual records; clearing all requires confirmation. Reading saved content does not call the model again.
Device and usage: an installation identifier and device attestation key authenticate connections. We verify Apple's signed app-download credential and device-verification value. An app transaction identifier associated with the same App Store account manages free and purchased photo credits and rate limits. Reinstalling or changing devices with that account does not grant another free allowance; registered remaining credits can be checked. The app never reads your Apple Account email or password. The server retains a hashed allowance identity, credit ledger, purchase transaction identifiers and necessary verification records. App-download credentials and device-verification values are not sent to the AI provider. Metering logs contain a random exploration ID, request stage, model, usage and duration, without photos or raw conversations.
Purchases and subscriptions: Apple processes payments. We verify signed transactions to deliver photo credits or existing subscription benefits; unfinished deliveries remain available for retry. Deleting journal records does not delete store transactions or restore spent credits.
We do not collect precise location, contacts, SMS or continuous microphone recordings, and do not sell user data. User research does not collect children's photos, names, schools or raw conversations by default. Cloudflare, DeepSeek and Apple process necessary data under their own terms. Local deletion does not also delete third-party processing records.
Parents can withdraw cloud consent in Settings and still read or delete local discoveries. Generating new content requires renewed parental consent. A parental declaration and device unlock do not establish a verified guardian identity. The app does not provide learning diagnoses or ability ratings. Privacy questions: wangyaominde@live.cn. Updated: 20 September 2026.
The third-party AI recipient is DeepSeek. Only after explicit consent, the selected photo, entered questions, related exploration content and conversation pass through Cloudflare to DeepSeek for recognition, explanations, answers and content safety checks. We do not use these photos or conversations to train models. Apple app-download and purchase credentials are not sent to the AI provider.
Before sharing, a separate in-app screen identifies the recipient, data and purposes and offers Agree and Decline. First use and updated disclosures require a new choice; AI is not called without consent. Review or withdraw consent in Settings. Declining or withdrawing still allows reading and deleting local discoveries.
We remain responsible under this policy for data entrusted to third parties and require processors to provide the same or greater protection and process data only for the functions described above. Requests use encrypted connections; metering logs exclude photos and raw conversations. Necessary third-party security, retention and deletion processing follows their applicable policies. Contact wangyaominde@live.cn for access, correction or deletion requests.
Illustrations load from Wikimedia Commons through Cloudflare. Only the concept name is sent, never your photos, conversations or purchase credentials.