Privacy Policy — Built By Discipline

Effective date: August 10, 2026

Built By Discipline ("the app," "we," "us") is operated by Beyond North Labs. This policy explains what information the app handles, what stays on your device, what reaches our servers, and the choices you have. The short version: your daily discipline data lives on your phone, our analytics are anonymous, and we never sell data or show ads.

1. What stays on your device

Almost everything you do in the app is stored locally on your phone and never sent to our servers:

• Your goal, program, non-negotiables, and coaching-style preference

• Daily check-ins, task completions, discipline scores, streaks, and metrics

• Your daily checklist, reminders, notes, and plans for tomorrow

• Journal-style entries and progress history ("The Tape")

If you delete the app, this data is deleted with it. We cannot access it, recover it, or hand it to anyone — we never had it.

2. Anonymous usage analytics

To understand whether the app works and where it needs improvement, the app sends a small set of anonymous signals to our server:

• A random install identifier generated on your device (not your name, email, phone number, or any advertising ID)

• Basic device facts: device model, operating system version, app version, screen size, language, and time zone

• Which goal path you chose and how you heard about the app (if you chose to answer)

• Occasional in-app pulse answers and app-usage heartbeats

This identifier is random and cannot be traced back to you. We deliberately keep it separate from your email address (see below) — the two are never linked or joinable in our systems. We do not use advertising identifiers (IDFA/AAID), device fingerprinting, or any third-party analytics or ad SDKs.

3. Your email address

If you create an account, we ask for your email address and confirm it with a 6-digit code. We store:

• Your email address and its verified status

• Timestamps of when you accepted our Terms of Use

We use your email only to verify your account, keep a record of your consent, and — rarely — contact you about the app. Verification emails are delivered through Resend, an email delivery provider, which processes your email address solely to deliver those messages. Your email is stored separately from all analytics data and is never sold, shared for marketing, or linked to your usage data.

4. AI coaching conversations

When you talk to the Coach, run a Vent session, or use other AI-powered features, the text you write is sent over an encrypted connection to an AI model to generate the response, along with relevant context from your program (such as your goal, coaching style, and recent progress). These messages are processed to produce your reply and are not used to build a profile of you. Do not include information in coach conversations that you would not want processed by an AI service. Crisis-related content is detected on-device to show you appropriate support resources.

5. The Circle (community)

Posts and replies you make in the Circle are visible to other members. They are stored on our servers so the community works. Post under whatever name you choose and don't share personal details you want to keep private. You can report content, and we can remove posts that break the rules.

6. Feedback and reviews

If you send feedback or answer an in-app review ask, your written answer is delivered to us. Review answers are anonymous unless you choose to include contact details in the text.

7. Location

If you grant location permission, the app uses your approximate position on your device to suggest nearby places relevant to your goal (gyms, parks, quiet cafés, trails). Place searches are handled by your phone's built-in maps service (Apple Maps on iOS, Google services on Android) under their own privacy terms. We do not store your location on our servers, track your movements, or build a location history.

8. Biometric lock

If you enable Face ID / Touch ID / fingerprint lock, authentication is handled entirely by your phone's operating system. Biometric data never reaches the app or our servers.

9. Notifications

Reminders and nudges are scheduled locally on your device. If you allow the app to check for Circle replies, it briefly contacts our server to see if there are new posts. You can turn notifications off anytime in system settings.

10. Purchases

The app is currently free during testing. If subscriptions launch, payments will be processed by Apple (App Store) or Google (Google Play) — we never see your card details. Subscription status would be managed through RevenueCat, a subscription-management service that receives only an anonymous identifier and purchase status.

11. What we never do

• We never sell your data

• We never show ads or share data with advertisers

• We never use advertising identifiers or device fingerprinting

• We never link your email to your usage analytics

• We never access your contacts, photos, camera, microphone, or health data

12. Data retention and deletion

• On-device data: deleted when you delete the app

• Anonymous analytics: kept while we operate the service; because they are anonymous, they cannot be traced to you

• Email/account records: kept while your account exists. To delete your account and email record, contact us at the address below and we will remove it within 30 days

• Circle posts: you may request removal of your posts at any time

13. Children

Built By Discipline is not directed at children under 13 (or the minimum age required in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

14. Your rights

Depending on where you live (including the EU/EEA, UK, and California), you may have the right to access, correct, delete, or export personal information we hold about you, and to object to or restrict certain processing. Because we hold very little — an email address and consent record at most — most requests are simple. Email us and we will respond within 30 days. We do not discriminate against you for exercising your rights.

15. Security

Data in transit is encrypted (HTTPS/TLS). Server-side data is stored with access controls, and the separation of analytics from contact information is enforced by design.

16. Changes to this policy

If we make material changes, we will update this page and note the new effective date. Significant changes will also be announced in the app.

17. Contact

Beyond North Labs Email: admin@beyondnorthlabs.com Website: builtbydiscipline.com