Privacy Policy
Who is responsible
Samuel Kittinger
Magdalenenstraße 15/20
1060 Vienna
Austria
Email: support@sta7us.app
We have not appointed a data protection officer because we are not required to.
In short
- What you enter in the app stays on your iPhone: name, age, weight, photos, measurements, your answers in “Your why”, your quarterly goals and the titles of your custom tasks.
- Your protocol, your streak and your history also stay on the device.
- For your subscription, the app creates an account with a random ID. No name, no email, no password.
- Usage data and crash reports only go to PostHog if you agree. Even then, only with the random ID and never with your name.
- No ads, no advertising ID, no tracking across other companies’ apps and websites, no location.
- You can delete your account right in the app.
1. What stays on your device
The app stores this data only in its own folder on your iPhone. We have no access to it:
- your name, age, weight and your other answers from setup
- your protocol, completed tasks, streak, Score, rank, badges and your full history
- your checkpoints: progress photos, strength values, money values
- your profile photo
- the titles of your custom tasks
- your answers in “Your why” and your quarterly goals
- your settings
Camera and photos. The camera only opens when you take a progress photo at the “Mirror” checkpoint. For your profile photo, the app opens the iOS photo picker. The app only receives the photo you pick. STA7US never uploads photos.
Your backup. If you have iCloud Backup or a computer backup turned on, iOS includes the app’s folder. That backup belongs to you and runs through Apple, not through us.
Notifications. Reminders are scheduled directly on your iPhone. No server needs your data for them, and there is no push token.
The data is gone when you delete the app, choose “Start over” or delete your account.
Legal basis: storing data on the device is necessary for the app to work (Art. 6(1)(b) GDPR, § 165(3) Austrian Telecommunications Act 2021).
2. Your account (Supabase)
During setup, once it’s clear you’re at least 16, the app automatically creates an account with Supabase (Supabase, Inc., USA, servers in Frankfurt, EU).
Stored:
- a random user ID
- when the account was created and when the app last signed in
- the session key, which the app also keeps on your iPhone
For every connection, Supabase technically sees your IP address and keeps it in server logs. With the session, Supabase also stores the most recent IP address and the technical identifier of the request (user agent, meaning the app and iOS version). Both are overwritten each time the app signs in and are kept until you delete the account.
Purpose: your subscription is tied to this account and not just to your device, and you can delete the account in the app. The logs are used for security and troubleshooting.
Legal basis: Art. 6(1)(b) GDPR (contract), for the logs Art. 6(1)(f) GDPR (legitimate interest in secure operation).
Transfer to the USA: under the EU Standard Contractual Clauses.
3. Purchases and subscription (Apple, RevenueCat)
Apple. Purchase, payment, renewal, cancellation and refunds are handled by Apple. Apple is responsible for this itself, and Apple’s privacy policy applies. We never see your payment details.
RevenueCat. RevenueCat (RevenueCat, Inc., USA) checks for us whether your subscription is active. For this, RevenueCat receives:
- your random user ID, the same as with Supabase
- purchase data from Apple: which subscription, purchase and expiry date, transaction numbers, price, currency, App Store country
- technical data: device model, iOS version, app version, language and a device identifier that Apple assigns only for this app (not an advertising ID)
- your IP address, for technical reasons
- your answer to the question “How did you find us?” from the setup, for example TikTok or “Through friends”
When you tap “Restore purchases”, RevenueCat links your subscription to the account on this device. If you have bought a subscription before and delete your account, the app then syncs your purchases with RevenueCat without asking, so your subscription stays. RevenueCat then keeps your purchase data under the new ID and notes that it comes from the old one.
We also see summaries from this data, for example how many subscriptions are active. Your answer from the setup shows us which channels bring people to STA7US and to a subscription. It is something you tell us, not tracking across other apps or websites. Legal basis for this: Art. 6(1)(f) GDPR (legitimate interest in advertising where it works).
Legal basis: Art. 6(1)(b) GDPR (contract), for the summaries Art. 6(1)(f) GDPR (legitimate interest in understanding our business).
Transfer to the USA: under the EU Standard Contractual Clauses.
4. Usage analytics and crash reports (PostHog, only with your consent)
When we ask. From your second day, a card on Home asks whether you want to share usage data. Both answers are equally easy, nothing is preselected. You can change your choice at any time with the “Share usage data” switch under Privacy in Settings. If you agreed and your subscription runs out, you’ll also find the switch at the bottom of the purchase screen under “Usage data”. Until you say yes, the app records nothing, not even on the device.
What we learn. Events like these:
- setup completed, with your answers: chosen areas and extra goals, time per day, language and the result of your self-assessment as a number
- protocol created: how many tasks, how many goals
- task completed: which task, which area, whether morning, daytime or evening
- task swapped: from which to which
- streak milestone, rank up, badge unlocked
- checkpoint recorded: only which one, never the value
- a Dose Coach suggestion accepted or declined
- paywall shown, purchase completed (which subscription), account deleted
Custom tasks only appear as “custom task”, without a title. Tasks and extra goals on an intimate topic, such as “Dopamine control”, only appear neutrally as “private”.
The PostHog software also sends, for technical reasons: device model (e.g. iPhone 15), iOS version, app version, device language and time zone, screen size, a random PostHog identifier and your IP address. PostHog keeps a profile under your random user ID, the same one used by Supabase and RevenueCat. So we don’t know who you are, but we can see which events belong to the same ID.
We don’t determine your location, not even from your IP address. PostHog does not store your IP address.
What we never learn. Photos, measurements, weight, name, age and the titles of custom tasks. There is no screen recording.
Why. We see which parts of the app help and where people drop off, and use that to make STA7US better. Not for ads. Your protocol is not calculated from this; that happens on your iPhone.
Crash reports. With your consent, PostHog also receives a report when the app crashes or shows its error screen: the type and text of the error and where in the code it happened, plus the same device data as above and your random user ID. If a report can’t get out before the crash, it goes at the next launch. The same consent and the same switch apply. We only use these reports to find and fix bugs.
Where. PostHog Cloud EU (PostHog, Inc., USA, servers in Frankfurt, EU). If PostHog accesses the data from the USA, the EU-U.S. Data Privacy Framework applies.
Legal basis: your consent (Art. 6(1)(a) GDPR, § 165(3) Austrian Telecommunications Act 2021). It is voluntary. The app works exactly the same without it.
Withdrawal: turn off “Share usage data” in Settings. From then on, the app records nothing. What was sent before remains lawful and is deleted after the period in section 10.
5. App updates (Expo)
At launch, the app asks Expo (650 Industries, Inc., USA) whether an update is available. Expo receives: your IP address, a random installation ID, the platform (iOS), the app version, the update channel and the ID of the current update. If the app crashed right at launch, the next update request also includes the error text (type and text of the error, time). This happens without consent, so that a faulty update can be detected and replaced.
Purpose: bug fixes and improvements reach your iPhone quickly, without a new App Store version.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, working app).
Transfer to the USA: under the EU-U.S. Data Privacy Framework.
6. Apple
Downloading, buying and updating the app run through the App Store. Apple is responsible for this itself (Apple Distribution International Ltd., Ireland).
If you turned on “Share With App Developers” in iOS Settings under Privacy & Security, Analytics & Improvements, Apple gives us crash reports and usage statistics without your name. Only you control this setting.
7. The website sta7us.app
Hosting. The website is hosted by Cloudflare (Cloudflare, Inc., USA). On every visit, Cloudflare processes your IP address, the time, the page you open and details about your browser, to deliver the page and protect it from attacks. A small Cloudflare script, served from our own address, protects the email address on the page from spam. The website does not set cookies.
Home page. On the home page, a small script in your browser checks whether you’re on an iPhone or iPad and, if so, opens the App Store. It also checks your browser’s language, so you get the English page if it isn’t set to German. The script itself stores nothing and sends nothing. As with any visit, Apple sees your IP address and that you came from sta7us.app. On iPhone and iPad, Safari shows a banner for the app at the top of every page and gets the details for it from Apple itself. What happens in the App Store is Apple’s responsibility (section 6).
Content for the app. The app loads a file from this website with the text for notes, notifications and bonus tasks (sta7us.app/inhalte). It sends nothing that points to you: no user ID, no information about you. As with any visit, Cloudflare sees your IP address, the time, and which app and iOS version is asking. The app on your iPhone decides which of it you see.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure website, in up-to-date text in the app in taking you straight to the app on iPhone and in showing you the page in your language). Transfer to the USA: under the EU-U.S. Data Privacy Framework.
Links. The TikTok link is a plain link. TikTok only receives data once you tap it.
8. When you email us
If you write to support@sta7us.app, we process your email address, the content and the technical details of the message to reply. The message arrives via Cloudflare Email Routing and is forwarded to a mailbox at Google (Gmail). We also reply from that mailbox, as support@sta7us.app.
Legal basis: Art. 6(1)(b) GDPR for questions about your subscription, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering requests).
9. Who receives data
| Recipient | Purpose | Servers | Transfer outside the EU |
|---|---|---|---|
| Supabase, Inc. | Account | Frankfurt | EU Standard Contractual Clauses |
| RevenueCat, Inc. | Subscription status | USA | EU Standard Contractual Clauses |
| PostHog, Inc. | Usage analytics and crash reports, only with consent | Frankfurt | EU-U.S. Data Privacy Framework |
| 650 Industries, Inc. (Expo) | App updates | USA | EU-U.S. Data Privacy Framework |
| Cloudflare, Inc. | Website, content for the app, email forwarding | worldwide | EU-U.S. Data Privacy Framework |
| Google LLC (Gmail) | Support emails | USA | EU-US Data Privacy Framework |
| Apple | App Store, purchase. Apple is responsible itself. |
We don’t sell data and we don’t share data for advertising.
10. How long we keep data
| Data | Period |
|---|---|
| Account at Supabase | until you delete it in the app |
| Supabase server logs | 1 day |
| Most recent IP address and user agent of the session at Supabase | until you delete the account in the app |
| Subscription data at RevenueCat | as long as you have a subscription, and after that as long as we need it for refunds and questions about your purchases. This also applies if you delete your account (section 11). |
| Usage events and crash reports at PostHog | at least 1 year: that is how long PostHog keeps data on our plan, after that PostHog may delete it. The plan does not let us set our own period. This also applies if you delete your account (section 11). |
| Update requests at Expo | as long as Expo needs them for updates. Expo does not state a fixed period. |
| Website requests at Cloudflare | as long as Cloudflare needs them to deliver and protect the site. Cloudflare does not state a fixed period. |
| Support emails | 12 months after the last message. If it’s about a purchase, as long as we have to keep records of it. |
| Data on your iPhone | until you delete it |
11. Deleting your account
In the app: Settings, at the very bottom, “Delete account”. You confirm twice.
This deletes:
- your account at Supabase
- all data on this iPhone: history, streak, photos, measurements, settings
Not deleted automatically:
- your subscription. It keeps running through Apple until you cancel it there. In the app, “Manage subscription” takes you straight there.
- your purchase data at Apple and RevenueCat
- your usage events and crash reports at PostHog, if you had agreed
This data stays under the old random ID until its period in section 10 ends. If you bought a subscription, the app moves your purchase data to the new ID as described in section 3. Otherwise, nothing on your iPhone points to the old ID afterwards.
“Start over” in Settings deletes all data on the iPhone but keeps your account and your subscription.
If you only delete the app, the data on the iPhone is gone, but the account remains. To delete everything, tap “Delete account” first, then delete the app. Right after the deletion, the app creates a new, empty account with a new random ID so it keeps working. It holds nothing of yours.
12. Your rights
You have the right of access, rectification, erasure, restriction of processing and data portability (Art. 15 to 18 and 20 GDPR). Where we rely on our legitimate interest, you can object (Art. 21 GDPR). You can withdraw consent at any time (Art. 7(3) GDPR).
Write to support@sta7us.app.
We know neither your name nor your email address. To match a request to your account, we need your random user ID. Without it, we cannot identify you (Art. 11 GDPR).
You see and delete the data on your iPhone yourself. We have no access to it.
You can lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, dsb.gv.at, or with the authority in your EU country.
13. Age
STA7US is for people aged 16 and over.
14. No automated decisions
The app calculates your protocol on your iPhone from what you entered. There are no automated decisions with legal effect on you (Art. 22 GDPR).
15. Security
All connections of the app and the website are encrypted. The app only contains public keys. Secret keys are kept on the server only.
16. Changes
When the app changes, we update this policy. The current version is always at sta7us.app/privacy-en. If a change requires your consent, we ask again in the app.