Privacy Policy for Discipl
Last updated: March 21, 2026
1. Controller
The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:
Leonardo Granetto Biebricher Straße 7f 55252 Mainz-Kastel Germany
2. Overview – What does Discipl do?
Discipl is a mental training app designed for athletes. It delivers daily affirmations, mindset content, and push notifications to help athletes build discipline, confidence, and resilience.
3. Data We Process
3.1 Onboarding Data (Stored Locally)
During onboarding, Discipl collects the following information:
- First name
- Gender
- Age
- Sport category
- Notification preferences (time window, frequency)
- Selected content categories
This data is stored exclusively on your device using local storage (MMKV). It is never transmitted to our servers or shared with third parties.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract)
3.2 Anonymous Usage Analytics (PostHog)
Discipl uses PostHog to collect anonymous usage data in order to understand how the app is used and to improve the user experience.
Data collected may include:
- App events (e.g. onboarding steps completed, features used)
- Device type and operating system
- App version
- Session duration and navigation patterns
No personally identifiable information is included in analytics data.
You can opt out of analytics tracking during onboarding or at any time in the app settings.
Legal basis: Art. 6(1)(a) GDPR (consent)
3.3 Attribution & Marketing (AppsFlyer, TikTok)
Discipl uses AppsFlyer and TikTok's SDK for marketing attribution purposes — to understand which channels drive app installs and to measure the effectiveness of advertising campaigns.
Data collected may include:
- Device identifiers (e.g. IDFA on iOS, with your permission)
- Install source and campaign information
- Anonymized in-app events
This data is processed in accordance with AppsFlyer's and TikTok's respective privacy policies. On iOS, device-level tracking requires your explicit consent via Apple's App Tracking Transparency (ATT) prompt.
Legal basis: Art. 6(1)(a) GDPR (consent)
4. No Backend — No Account Required
Discipl does not require an account. There is no server-side storage of your personal data. All preferences and profile information remain on your device and are deleted when you uninstall the app.
5. Push Notifications
If you grant permission, Discipl sends local push notifications to deliver your daily affirmations. These notifications are scheduled entirely on your device — no data is sent to external servers to generate them.
You can disable notifications at any time in your device settings.
6. Third-Party Services
| Service | Purpose | Privacy Policy | |---|---|---| | PostHog | Anonymous analytics | posthog.com/privacy | | AppsFlyer | Install attribution | appsflyer.com/legal/privacy-policy | | TikTok for Business | Ad attribution | tiktok.com/legal/privacy-policy |
7. Data Sharing
Personal data is not shared with third parties, except where:
- it is necessary to provide the service (e.g. analytics providers listed above)
- we are legally required to do so
- you have given explicit consent
No data is sold or shared for advertising purposes beyond what is described in Section 3.3.
8. Data Retention
Since all personal data is stored locally on your device, it is retained until you uninstall the app. Anonymous analytics events are retained by PostHog in accordance with their data retention policy.
9. Your Rights
Under the GDPR, you have the right to:
| Right | Article | |---|---| | Access your personal data | Art. 15 GDPR | | Rectify inaccurate data | Art. 16 GDPR | | Request deletion of your data | Art. 17 GDPR | | Restrict processing | Art. 18 GDPR | | Data portability | Art. 20 GDPR | | Object to processing | Art. 21 GDPR | | Withdraw consent at any time | Art. 7(3) GDPR |
To exercise your rights, contact us at: 📧 LeonardoGranetto@gmail.com
10. App Tracking Transparency (iOS)
On iOS 14.5 and later, Discipl will request your permission before accessing your device's advertising identifier (IDFA) via Apple's App Tracking Transparency framework. You can deny this request without affecting the core functionality of the app.
11. Children's Privacy
Discipl is not intended for users under the age of 16. We do not knowingly collect data from children under 16.
12. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy to reflect changes in legal requirements, functionality, or technology. The latest version will always be available within the app.