This policy covers Outwait, the iPhone app published by STARS S.R.L. on the App Store to help you cut down and quit smoking, and explains where the data you enter ends up. In short: it stays on your phone. It only leaves it if you turn on the habit analysis, and only after you have given us your consent.
Who the controller is
The data controller is STARS S.R.L., Via Mario Vinciguerra 75, 00128 Rome (RM), Italy, VAT / tax code 18548941006.
Email: info@stars.srl · Certified email (PEC): stars@namirialpec.it
What stays on your phone
Everything you log — cigarettes, cravings you got through, your reduction goal, the price of a pack, your settings and milestones — stays in the app’s storage on your iPhone. Outwait has no account and syncs nothing: it doesn’t ask for your name, email or any other detail, it contains no analytics, advertising or crash-reporting tools, and it doesn’t track you.
This data is included in your iPhone backup if you have one turned on (in iCloud or on a computer), which Apple handles under its own privacy policy. If you export a backup from the app’s Settings, the file only goes where you choose to save it.
The habit analysis, only with your consent
The analysis is optional. Before it starts, the app shows you a screen listing what is sent and what isn’t, and it only turns on if you tap “Accept and analyse”. Cigarette times say something about your health: that is why the legal basis is your explicit consent (Art. 6(1)(a) and Art. 9(2)(a) of Regulation (EU) 2016/679).
What reaches our server. The dates and times of the cigarettes you logged, the app’s language, so the answer comes in yours, and a random identifier the app generates on its own. The identifier isn’t tied to your name, email or account, and it isn’t the phone’s advertising identifier: it is only used to limit how many analyses each device can request in a day. Nothing else from your log leaves the phone: not your goal, not your milestones, not your breathing sessions.
Where. The server is hosted by Fly.io in its Frankfurt data centre, in Germany.
What reaches DeepSeek. From your data the server builds a summary — cigarettes per day over the last 30 days, the total, the average and the three hours when you smoke the most — and passes it to DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd.), in China, which writes the analysis. DeepSeek receives neither the times nor the identifier, nor anything that identifies you. It processes the summary under its own privacy policy, which provides for data to be stored in China.
Transfer outside the European Union. China has no adequacy decision from the European Commission, so the summary leaves the European Economic Area. This only happens if you turn on the analysis, with the explicit consent the app asks for first, and you can withdraw it at any time.
How long it is kept. The server keeps neither the times it receives nor the analysis it returns: it only remembers how many analyses that identifier requested today, and deletes the count the next day. The analysis stays on your phone until the next one.
How to withdraw consent. Any time, from the app’s Settings › AI analysis › “Withdraw consent”. From then on nothing is sent, and the identifier changes: the count the server remembered can no longer be linked to you.
The analysis is text written by a language model: it is not medical advice.
Subscription
Outwait offers a monthly or yearly subscription after a seven-day free trial. Subscriptions go through the App Store and are handled by Apple: payment details never reach STARS S.R.L. The app reads your subscription status from transactions signed by Apple, on the phone, without sending us anything.
Phone permissions
Outwait asks for a single permission, and works without it.
- Notifications, to warn you fifteen minutes before the hours when you usually smoke. The phone works out those hours and schedules the reminders: they don’t come from a server.
A cigarette timer can stay on the Lock Screen and in the Dynamic Island, also handled on the phone. You can change your mind any time from your iPhone’s Settings › Notifications.
Who receives it
Only those needed for the analysis, and only if you turned it on: Fly.io, which hosts our server in Germany and does not use your data for its own purposes, and DeepSeek, in China, which receives the summary without the identifier and processes it under its own privacy policy. We don’t sell data or share it with anyone for advertising.
How to delete it
From the app’s Settings › “Delete all data” you remove your log, goal, settings, consent and latest analysis from the phone, and the identifier changes. Only the language, the theme and the date your trial started remain. Deleting the app also removes everything that was on the phone.
There is nothing to ask us to delete on the server: at most today’s analysis count remains, tied to an identifier that no longer exists after you delete your data or withdraw consent, and it disappears the next day.
If you want to quit
The app shows you the free helpline for your country, based on the phone’s region:
- Italy — Telefono Verde contro il Fumo: 800 554 088
- United Kingdom — NHS Smokefree: 0300 123 1044
- France — Tabac info service: 39 89
Elsewhere, your doctor or your health service can point you to free help.
Your rights
Under Articles 15–22 of Regulation (EU) 2016/679 (GDPR) you have the right to access your data, to have it corrected or erased, to restrict its processing, to object and to receive it in a portable format, and you can withdraw your consent at any time without affecting what happened before. You manage the data on your phone yourself, from the app; on the server we keep nothing that can be linked to you. You can still write to us at any time at info@stars.srl or by certified email at stars@namirialpec.it: we reply within one month, as Article 12 GDPR requires.
You always have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali, or with the authority of the country where you live.
Changes to this policy
If the app changes the way it handles data, this policy changes with it, and if what the analysis sends changes, the app asks for your consent again. The date at the bottom of the page shows the latest revision.