PRIVACY POLICY

Last updated: September 9, 2026.

Disciplined Agent is made by Corey Bonds, an individual developer in Alabama, United States. Privacy questions: privacy@disciplinedagent.app.

WHAT NEVER LEAVES YOUR PHONE

There is no account. You never create one, there is nothing to log into, and nothing you do in this app is tied to a name or email we hold.

Your leads, notes, showings, income figures, goals, closings, scripts and schedule are stored on your iPhone and are never transmitted to us. Not summarised, not counted, not backed up to anything we operate. They exist in this app's storage and they are gone when you delete the app.

Your contacts are never transmitted. If you use Import Contacts, the app reads your address book on the device to fill in a lead and sends nothing anywhere.

There is no analytics of any kind. No Google Analytics, no Firebase, no Amplitude, no Segment, no crash reporter. We do not know which features you use, how long you use the app, or whether you opened it today.

There is no advertising identifier and no advertising SDK. We do not track you across apps and we have nothing to sell to anyone who would.

There are no push notifications. Every reminder this app shows was scheduled on your phone, by your phone. There is no push token, no notification server, and no mechanism by which we — or anyone else — could send a notification to your copy of this app.

Your recordings never leave your device through this app. The teleprompter saves takes to your Photos library and nothing uploads them.

If you never join an office board, and never tap Generate on a caption, this app never contacts a server we operate. That is not a setting. It is how the app is built.

WHAT LEAVES, AND EXACTLY WHEN

Four things send data off your phone. Each is listed with what triggers it and what it carries.

1. Caption generation — only when you tap Generate. The text sent is: the caption category you picked, the notes you typed, and your caption sign-off. Your sign-off is the block you configured yourself, and by default it contains your name, your brokerage, your phone number and your licence number. A per-install identifier is sent in the request header. The app generates it on this phone — it is a random value tied to this installation, not to you — and it goes to our proxy and nowhere else: not onward to Anthropic, and not to any other company. Nothing on the server reads it yet. It is carried so abuse limits can be added there without shipping a new version of the app. The text goes to a proxy we run, which forwards it to Anthropic, the company that makes the Claude model. Anthropic's handling is governed by their privacy policy at anthropic.com/legal/privacy. Nothing else goes with it — no leads, no notes, no showings, no income. If you would rather not send your phone or licence number, remove them from your caption sign-off in Profile; the app will still generate captions.

2. Office boards — only if you enter an invite code. Joining sends your first name, the invite code, and a per-install identifier. After that, each day you complete sends: that identifier, the date, whether you banked the day, your current run, and your first name. Nothing else about you is in that request. Other members of your board can see your first name, the number of days you worked, and your run — that is the entire board. If you never enter an invite code, none of this ever runs. Leaving a board deletes your row. "Delete All My Data" leaves every board you have joined before it erases the device.

3. Purchases — on every launch. This app includes RevenueCat, which handles subscriptions. Its SDK starts when the app opens and contacts RevenueCat's servers, whether or not anything is for sale. It reports purchase history against an anonymous identifier RevenueCat generates for this installation, and uses that history both to validate receipts and for their own dashboard. We never give it your name, your email, or anything you have entered, and we never set an identifier of our own — so your purchase history is not linked to your identity. RevenueCat declares that its SDK is not used for tracking.

4. App updates — on every launch. This app asks Expo's update service whether newer code is available. That request carries the platform it is running on, the app's runtime version, the version of the update protocol, and the release channel this build was published to. It contains no device identifier, no installation identifier and no user identifier.

PERMISSIONS THIS APP ASKS FOR

Contacts — to fill in a lead from your address book. Read on the device, never transmitted.

Calendar — to keep a calendar of its own, named Disciplined Agent, so your planned day sits alongside your existing events. It writes the blocks from your plan and your day presets into that calendar, and each sync replaces that day's events in it. Your other calendars are never changed. What it writes follows whatever sync you have set up with Apple.

Camera and microphone — to record teleprompter takes. Photos — to save those takes.

You can revoke any of these in iOS Settings, under Privacy & Security. The app asks for each one at the moment the feature needs it, never up front.

DELETING YOUR DATA

Data & Privacy → Delete All My Data erases everything on the device and removes you from any office board first. If you are offline and on a board, it will tell you and delete nothing, so you are never left on a board you cannot leave.

Deleting the app removes everything stored on the device, but it cannot remove an office board row — leave the board, or use Delete All My Data, before you delete the app.

Export My Data writes everything to a JSON file you can send wherever you like. Once you share it, it is out of this app's hands.

OTHER

What you enter is yours, and so is the responsibility for it. Client names, numbers and addresses belong to real people, and you are the one who owes them whatever your licence, your brokerage and your state require. This app stores what you type; it does not decide whether you were entitled to type it.

A few controls hand a detail to another app rather than sending it anywhere ourselves. Tapping a phone number or an email address opens your own dialer, Messages or Mail with it filled in. Tapping an address opens Apple Maps. Tapping Parcel records runs a Google search for that address. The detail goes to the app you opened, not to us — which is why none of this is in the four above. The parcel search is the one worth knowing: it puts a client's address into Google, and nothing else in the app depends on it.

Security. Your data is protected by your iPhone's own encryption and passcode. What we send is sent over HTTPS. We hold no database of your business data, so there is none to breach.

Children. This app is for licensed real estate agents and is not directed at anyone under 13.

Changes. If this policy changes, the date at the top changes and the new version appears in the app.

Contact. privacy@disciplinedagent.app.