// CIVILIAN DATA DIRECTIVE //
Privacy
Policy
EFFECTIVE DATE: MARCH 1, 2025 // DOCUMENT ID: DISC-PRIV-001
CLEARANCE: PUBLIC // DATA CLASS: MINIMAL
We built Disclosure to prepare you for contact. Not to surveil you while you wait. Here is exactly what we collect, what we do not, and why.
Your file contains what you create inside the app. Nothing more. When you complete the assessment and train for contact, we store:
- Archetype designation — your assigned classification (Sentinel, Diplomat, Scholar, Survivor, or First Contact)
- Clearance Level — your current operational clearance within the Disclosure system
- Readiness Score — your assessed preparedness rating (0–100)
- Oath streak — your consecutive daily training commitment
- Training progress — completed modules, drill levels, and certification status
- Device identifiers — used only for purchase verification through RevenueCat. Not sold. Not shared beyond that function.
- Anonymous analytics — aggregate usage data (which features are used, crash reports) with no personal identifiers attached
We do not know who you are. We know your archetype. There is a difference.
This is a short list. We intend to keep it that way.
- Real name — Disclosure does not ask for it. You are your designation.
- Location data — your coordinates are your own business
- Camera or microphone data — the Universal Translator uses your device camera and flashlight locally. Light pulses and frequency tones are generated on-device. Nothing you point your phone at is transmitted anywhere. The signal goes out. Nothing comes back to us.
- Payment information — all transactions are processed by Apple App Store or Google Play. We never see your card number, billing address, or any payment data. We receive only confirmation that a purchase occurred.
- Biometrics — Stone Cold Drill flinch tracking runs locally on your device only
- Contacts, calendar, or background data — we do not request these permissions
Three external systems support Disclosure infrastructure. You should know what they do with your data:
- RevenueCat — purchase verification and entitlement management. Receives device identifiers to confirm valid purchases. RevenueCat Privacy Policy
- Supabase — account data (archetype, scores, progress) stored on Supabase servers in the United States. SOC 2 compliant. Supabase Privacy Policy
- Expo / React Native — the app framework powering Disclosure on iOS and Android. Standard framework telemetry applies. Expo Privacy Policy
We do not sell your data to any third party. Not now. Not ever. The moment we did, the mission would be compromised.
Your file stays open as long as your account exists. The moment you delete your account or use the Reset Progress function in Settings, your data is wiped from our systems. There is no archive. There is no soft delete. When you erase it, it is gone.
Anonymous analytics data — which contains no identifying information — may be retained in aggregate for longer periods for the purpose of improving the platform.
You are not a data source. You are a liaison.
- Right to access — everything we hold on you is visible inside the app. Your archetype, score, clearance, streak — all of it. No request required.
- Right to deletion — Settings → Reset Progress. One action. Total erasure. No waiting period, no support ticket required for your stored training data.
- Right to know — this document exists for exactly that reason
For anything not covered above, contact us: team@getdisclosure.app
Disclosure is not directed at individuals under 13. We do not knowingly collect data from children under 13. If we discover a minor has created an account, it will be terminated. Contact us at team@getdisclosure.app if you believe this has occurred.
If this policy changes, the effective date at the top changes with it. We will not bury the update. If changes are significant, we will surface a notice in the app. Continued use of Disclosure after an update constitutes acknowledgment of the revised terms.
Current effective date: March 1, 2025.