Privacy Policy
Disciplina helps you plan your day, eat well, train and stay focused. To do that it handles personal information, some of it sensitive. This policy explains in plain language what the app keeps on your phone, what leaves it, who processes it, how long it is kept and what you can do about it. If anything here is unclear, write to us at [email protected].
The short version
- There is no account. We never ask for your name, email or phone number.
- Your diary, plans, workouts, goals and notes live on your iPhone. We do not sync or back them up to our servers.
- Apple Health, Screen Time and calendar data never leave your device.
- When you use an AI feature, the photo, voice recording or text you submit goes through our server to an AI provider to produce the result. We do not keep the content.
- We collect usage analytics and crash reports to improve the app. They are tied to a random identifier, never to who you are.
- We do not sell your data, show ads, or track you across other apps and websites.
- Who we are
- What stays on your device
- What we collect and why
- AI features
- Apple Health, Screen Time and calendar
- Analytics and crash reports
- What we never do
- Service providers
- How long we keep data
- Your choices and rights
- Legal bases and transfers
- Security
- Children
- Website and waitlist
- Changes and contact
1. Who we are
Disciplina is made by Collective Engineering Corporation, 2810 N Church St, STE 89894, Wilmington, DE 19802, USA ("we", "us"). We are the controller of the personal information described here.
2. What stays on your device
Everything you create in the app is stored in the app's private storage on your iPhone: your plans and routines, food diary and meal photos, workouts, goals and targets, focus sessions, notes and settings. We have no copy of it. It is included in your device backups (iCloud or computer) under Apple's control, and you can export it any time from Profile › Privacy & data. Deleting the app deletes it from your phone.
3. What we collect and why
Only the following leaves your device.
| Data | When | Why | Linked to |
|---|---|---|---|
| Meal and nutrition-label photos, voice recordings, meal descriptions | Only when you use AI food logging | To recognise the food and estimate nutrition | Not stored by us after the result is returned |
| Focus task title, notes and existing steps | Only when you ask AI to break a task down | To suggest steps | Not stored by us after the result is returned |
| Workout goals and answers, profile age/sex/weight, the exercises available to you | Only when you ask AI to generate or edit a workout program | To build or revise your program | Not stored by us after the result is returned |
| AI request records: feature, model, size, cost, outcome (no content) | Each AI request | Usage limits, cost control, reliability | Your subscription |
| Signed App Store purchase record: transaction ID, product, expiry, Apple's renewal and refund notices | When you subscribe and when the app starts | To unlock paid features and handle renewals and refunds | Your subscription |
| App Attest key | First launch | To check requests come from a genuine copy of the app and prevent abuse | This installation |
| Food search terms, scanned barcodes, feedback you send on results | When you search, scan or send feedback | To return results and improve them | Feedback: your subscription |
| Usage events, crash reports, app version, language, App Store country, subscription status | While you use the app | To understand what works and fix bugs | A random analytics identifier |
| Diagnostic report: install ID, this install's analytics identifier, device model, iOS version, recent app events and log lines, crash details, a one-way hash of your IP address | Only when you tap Send | To investigate a problem you report | A random install identifier |
Like any internet service, our servers and providers see your IP address when the app connects. We do not use it to locate or identify you.
4. AI features
AI food logging (photo, label, voice or text) and AI task breakdown send what you submit through our server to a third-party AI provider, currently OpenAI or Google (Gemini). This is part of how these features work and is covered by our Terms, which you accept when you subscribe. If you do not want your content processed this way, simply don't use the AI features; the rest of the app works without them.
- Only the content of that request is sent, with the date, meal type, language, units and time zone needed to answer. Your Apple Health data, weight, goals and diary history are never included.
- We do not store the photo, recording or text after the result is returned.
- Providers process it under their business API terms: they do not use it to train their models and may keep it for up to 30 days only to detect abuse, then delete it.
- AI estimates can be wrong. Check them, and do not rely on them for medical decisions.
5. Apple Health, Screen Time and calendar
With your permission the app reads activity, energy, steps, sleep, heart rate, body measurements and workouts from Apple Health, and writes the workouts you record. Screen Time access lets the app block the apps you choose during focus sessions and show your usage. Calendar access shows your events next to your plan and can add your plan to a Disciplina calendar.
All of this is processed on your iPhone only. The data itself is never sent to us, to AI providers or to analytics, never used for advertising or marketing, and never sold or shared. Analytics may record only that you used a feature built on it, for example that a logged workout came from Apple Health, without any of its values. You can change these permissions in iOS Settings at any time.
6. Analytics and crash reports
We use PostHog to see which features are used and where the app crashes. Events describe actions, such as "goal saved" or "workout finished", with simple settings such as the goal type you picked. They never contain your food photos, recordings, notes, diary entries or any Apple Health values; at most they note that a feature using Apple Health was used. They are tied to a random identifier created by the app, not to your name, Apple ID or contact details, and we do not build profiles of individual people. If you don't want your usage counted, email us at [email protected] and send a diagnostic report from Profile › About › Diagnostics, telling us the code it shows: the report carries this install's analytics identifier, so we can find and delete your analytics events and exclude that identifier.
Diagnostic reports are sent only when you tap Send, from Profile › About › Diagnostics or from the prompt shown after a crash. When a report contains a crash, a short alert with only the device model, iOS version and app version is forwarded to our team chat on Telegram.
7. What we never do
- Sell or rent personal information, or "share" it for cross-context behavioural advertising.
- Show ads or work with ad networks or data brokers.
- Track you across other companies' apps or websites. The app does not use the advertising identifier.
- Train our own AI models on your content.
- Read your Apple Health, Screen Time or calendar data on our servers.
8. Service providers
These companies process data for us under contracts that limit them to providing their service.
| Provider | Purpose | Location |
|---|---|---|
| Railway | Runs our server | United States |
| Supabase | Database for subscription, AI usage and diagnostic records | European Union (Ireland) |
| OpenAI | AI food recognition, transcription, task breakdown and workout programs | United States |
| Google (Gemini API) | AI food recognition, task breakdown and workout programs | United States |
| PostHog | Usage analytics and crash reports | United States |
| Apple | Purchases, subscriptions, refunds, App Attest | United States |
| Telegram | Short crash alerts to our team (device model, iOS and app version only) | Global |
| Cloudflare | This website and the waitlist | Global network |
If you ask Apple for a refund, Apple may ask us about the purchase. As described in our Terms, we then share information about the subscription and how the app was used, such as whether paid features were used, so Apple can decide the request. We may also disclose information if the law requires it, to protect people's safety, or to a successor if the business is sold, in which case this policy continues to apply.
9. How long we keep data
| Data | Kept for |
|---|---|
| AI request content (photos, recordings, text) | Not kept by us. Providers: up to 30 days for abuse monitoring |
| AI request records (no content) | 12 months |
| Subscription and purchase records | While the subscription is active, then 12 months |
| Analytics events | 12 months |
| Diagnostic reports | 90 days |
| Feedback on food results | Until it has been reviewed, at most 12 months |
| Data on your device | Until you delete it or the app |
10. Your choices and rights
- In the app: export your data, and manage Apple Health, Screen Time, camera, microphone and calendar access in iOS Settings. To stop analytics, see section 6.
- By email: ask us to access, correct or delete the data we hold about you, or object to its use, at [email protected]. Because there is no account, send a diagnostic report from Profile › About › Diagnostics and tell us its code (the report carries this install's identifiers, including the analytics one), or include your App Store order ID, so we can find your records. We answer within 30 days and never charge for it.
- EU, UK and similar laws: you also have the rights to restriction and portability, and to complain to your data protection authority.
- California and other US states: you have the right to know, delete and correct, and the right not to be discriminated against for using these rights. We do not sell or share personal information, so there is nothing to opt out of.
11. Legal bases and transfers
Where the GDPR or UK GDPR applies, we process data to provide the service you asked for (subscriptions, AI results you request), including the AI features you choose to use, and for our legitimate interests in keeping the app secure, reliable and improving (App Attest, diagnostics, analytics, which you can object to at any time). Most of our providers are in the United States; transfers rely on the EU-U.S. Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.
12. Security
Data in transit is encrypted with TLS. On your device it is protected by iOS data protection, and secrets are kept in the Keychain. On our side access is limited to the server, databases are not reachable from the app directly, and requests are checked with App Attest and signed sessions. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.
13. Children
Disciplina is not intended for children under 13, or under 16 where local law sets that age for consent. We do not knowingly process their data; if you believe a child has used AI features, contact us and we will delete the related records.
14. Website and waitlist
If you join the waitlist on this website, we store your email address and the time you joined. We use it only to send you one notice when the app opens, and for nothing else. We keep it until that notice is sent plus 30 days, after which it is deleted. You can have it deleted earlier by emailing [email protected]. The website and the waitlist are hosted on Cloudflare. The website uses Cloudflare Web Analytics, a privacy-first measurement that sets no cookies, stores no personal data and does not track you across sites, to count visits by page, country and referrer; Cloudflare may process your IP address briefly to serve the site and to block abuse, as described in its own privacy policy.
15. Changes and contact
When we change this policy we update the effective date above; for material changes we will also tell you in the app before they take effect. Questions or requests: [email protected], or Collective Engineering Corporation, 2810 N Church St, STE 89894, Wilmington, DE 19802, USA.