Privacy Policy
Built By Discipline

PRIVACY POLICY

Built By Discipline

Effective date: August 15, 2026

How BeyondNorth Labs collects, uses, stores, and protects your information when you use Built By Discipline on iPhone and Android.

1. WHO WE ARE

Built By Discipline is operated by BeyondNorth Labs ("we," "us," "our"). This policy describes how we handle information when you use the Built By Discipline mobile app (the "App") on iOS or Android, and this website. By using the App you agree to this policy. If you do not agree, please stop using the App.

2. INFORMATION YOU PROVIDE

When you register we collect your display name, your email address, your birthdate (used solely to verify you are 18 or older), and optionally your sex (used to tailor guidance; you can leave it blank).

You also create program content: your goal and path, your why-it-matters, non-negotiables, daily check-ins, scores, journal and vent-session text, checklist items, tracked metrics, and chat messages. All of this is treated as your private content. We do not sell it, and we do not use it for advertising.

3. WHERE YOUR DATA LIVES

Your program, check-ins, metrics, journal text, notes, and checklist live on your device. They are not uploaded to us. Uninstalling the App, or using Delete Account inside it, removes that data from the device. Device backups (iCloud, Google Backup) may include it; control of those backups is yours through your operating system settings.

A small amount of information does reach our servers, and only for the purposes described in sections 4 through 7.

4. EMAIL REGISTRATION

Your name and email address are stored in a contact registry on our servers so we can confirm your registration, verify your email, send you tester and release notices, and reach you about the App. We may send a verification code to confirm the address is yours.

This registry is used for communication only. It is never sold, rented, or shared with advertisers. You can ask us to delete your entry at any time by emailing support@beyondnorthlabs.com.

5. USAGE ANALYTICS — PSEUDONYMOUS

To understand how the App is actually used, we collect limited usage and reliability data: which screens and features are opened, streak and check-in counts, which goal path you chose, app version and build, and anonymous device facts (device model, operating system version, language, region, screen class). We do not use advertising identifiers and we do not fingerprint your device.

Analytics records are pseudonymous. They are keyed to a one-way cryptographic hash of your email address, never the address itself, and to a random installation identifier. Our contact registry does not store that hash, so the two sets of records cannot be joined back together to attach your name to your usage.

Analytics never includes your journal text, vent text, chat messages, check-in notes, or any free-text content you write.

6. FEEDBACK, REVIEWS & THE CIRCLE

When you answer an in-app feedback prompt or review request, your ratings and written comments are sent to us. These submissions are anonymous by default: they carry only a random installation identifier, and there is no path from a submission back to your identity.

If a review request offers to credit you and you tick that permission and type a name or contact, that name and contact are stored with your submission so we can attribute or follow up. Leaving those fields blank keeps the submission fully anonymous. Permission applies only to submissions made after you give it — it is never applied to earlier ones.

Posts you publish to the Discipline Circle are transmitted to our servers so other members can see them. Treat anything you post there as visible to other users; do not post information you want to keep private.

7. AI FEATURES & THIRD-PARTY PROCESSORS

Some features (AI Coach, Vent Session, Weekly Review, custom path generation) send the text of your prompt — along with limited program context you have entered, such as your goal, streak, and recent scores — to AI providers operated by third parties (such as OpenAI, Anthropic, or Google) through the Rork toolkit proxy. Providers process prompts to generate a response and may retain them briefly for safety filtering under their own terms. We do not authorize providers to train on your prompts.

Do not enter information you would not want processed by a third party. If you have specific data-residency or processor requirements, email support@beyondnorthlabs.com before using AI features.

8. LOCATION

If you grant permission, the App uses your approximate location — neighbourhood-level, roughly 100-metre accuracy — to power Discipline Radar, which shows supportive nearby places such as gyms, healthy food, and trails. Neither app requests precise GPS location.

To find those places the App runs a place search around your approximate position. On iPhone that search is submitted to Apple Maps; on Android it is sent to Photon, a place-search service operated by komoot GmbH. Each provider handles that request under its own privacy policy. We do not store your location on our servers and we do not use it to build a profile of your movements.

You can revoke the permission at any time in your operating system settings; the rest of the App continues to work without it.

9. PURCHASES

Any subscription is processed by Apple (App Store) or Google (Google Play). We use RevenueCat to receive entitlement events from those stores so the App knows what you are entitled to. We never see or store your payment card. Apple, Google, and RevenueCat handle data they collect under their own privacy policies.

10. ADVERTISING

The App shows no ads and contains no third-party advertising SDKs. We do not sell, rent, or share your personal information for advertising or cross-app tracking.

11. HEALTH-ADJACENT CONTENT

Birthdate, sex, and metrics you choose to log (weight, sleep, mood, sobriety milestones, and similar) may be considered health-adjacent data in some jurisdictions. The App is not a medical device and does not provide medical advice. Health-adjacent data you log stays on your device under the same protection as the rest of your content.

12. CHILDREN

The App is for adults only (18+). We do not knowingly collect information from anyone under 18. If we learn that a registration belongs to a minor, we will delete it.

13. YOUR RIGHTS

You can: (a) access and edit your information directly in the App at any time; (b) export a copy of your data from Settings → Account → Export My Data; (c) delete your account and local data from Settings → Account → Delete Account; and (d) ask us to delete your contact-registry entry and any feedback you have sent.

If you have already uninstalled the App, you do not need to reinstall it to delete your data. https://www.beyondnorthlabs.com/builtbydiscipline-delete-account explains exactly what in-app deletion erases, what is held elsewhere, and how to request removal by email.

To exercise any right under the GDPR, UK GDPR, CCPA/CPRA, or another applicable law — including access, correction, deletion, portability, or objection — email support@beyondnorthlabs.com. We respond within 30 days. Because analytics records are pseudonymous and unlinkable to your identity by design, we may be unable to locate them for an individual request; we will explain that if it applies.

14. DATA RETENTION

Local data persists on your device until you delete it. Contact-registry entries are kept until you ask us to remove them. Feedback and review submissions are kept as long as they remain useful for improving the App. Pseudonymous analytics are retained in aggregate form. AI provider retention of prompts is governed by the provider's terms. Support correspondence is kept as long as needed to provide support, then deleted.

15. SECURITY

We use reasonable safeguards — including operating-system sandboxing, transport encryption (HTTPS) for anything sent to our servers, an optional biometric app lock, and secure keystore storage for sensitive flags — to protect your information. No method of electronic storage or transmission is 100% secure. You are responsible for protecting your device and your store account.

16. INTERNATIONAL USERS

The App is operated from the United States. If you use it from outside the U.S., your information may be processed in the U.S. or other countries where our service providers operate, which may have different data-protection laws than your own.

17. CHANGES TO THIS POLICY

We may update this policy. The effective date above always reflects the current version, and material changes will be surfaced in-app. Continued use after a change means you accept the updated policy.

18. CONTACT

Questions or requests (access, correction, deletion): email support@beyondnorthlabs.com. We respond within 30 days.

Support: https://www.beyondnorthlabs.com/builtbydiscipline-support

Delete your account: https://www.beyondnorthlabs.com/builtbydiscipline-delete-account

Privacy Policy Built By Discipline