Start free

Privacy Policy

Last updated: April 2, 2026

This Privacy Policy describes how Wayout ("we," "us," or "our") collects, uses, stores, and shares information when you use the Wayout application and website at wayout.today (the "Service"). It should be read together with our Terms and Conditions, which include additional provisions relevant to health disclaimers and liability.

1. Who we are

The data controller responsible for your personal data in connection with the Service is Wayout. For privacy-related requests, contact us at support@wayout.today or via our contact form.

1.1 Purchases and Stripe (Payment Processor)

When you buy a paid plan, checkout is hosted by Stripe, Inc. ("Stripe"), our third-party payment processor. Stripe collects and processes payment information (such as card or wallet details and billing details) to complete the charge. That processing is governed by Stripe's Privacy Policy in addition to this Policy for what we receive and use on our side.

We typically receive limited transaction metadata from Stripe (for example payment intent identifiers, customer identifiers, and license status) so we can activate and manage your access to the Service. We do not store full payment card numbers on our own servers.

2. What personal data we collect

Depending on how you use the Service, we may process:

  • Account data: email address and account identifier from Google Sign-In when you authenticate.
  • Profile and program data: information you choose to provide, such as quit date, smoking profile fields, timezone, language preferences, and similar settings.
  • Program and usage data: messages you send in program chat, urge-flow inputs, and related session content needed to provide program features.
  • WhatsApp data: if you opt in, your phone number and delivery/verification metadata required to send messages through our messaging provider.
  • Payment-related data: when you purchase a plan, Stripe processes payment and billing details at checkout. We do not store full card numbers on our servers; we may receive references such as payment intent IDs, customer IDs Stripe assigns, and related fulfillment data needed to activate your license.
  • Technical data: server logs, security logs, and limited diagnostics needed to operate and secure the Service (e.g. IP address, user agent, timestamps), consistent with our infrastructure providers.

3. Why we use your data (purposes)

We process personal data to:

  • Provide, operate, and maintain accounts and core app features;
  • Deliver AI-based program tools and urge support you request;
  • Send optional WhatsApp notifications when you have opted in and are eligible;
  • Process payments and fulfill licenses (via Stripe);
  • Improve reliability, security, and product quality (including troubleshooting and abuse prevention);
  • Comply with legal obligations and respond to lawful requests.

4. Legal bases (EEA / UK)

If the GDPR or UK GDPR applies, we rely on one or more of the following: contract (providing the Service you asked for), legitimate interests (securing and improving the Service, fraud prevention), consent where required (for example, certain marketing or optional communications, where applicable), and legal obligation where the law requires processing.

5. Sharing and subprocessors

We use trusted service providers who process data on our instructions. Categories include:

We do not sell your personal information. We do not share data for cross-context behavioral advertising as defined under the CPRA.

6. International transfers

Your information may be processed in countries other than where you live, including the United States and Israel. Where we transfer personal data from the EEA, UK, or Switzerland, we use appropriate safeguards such as Standard Contractual Clauses or other mechanisms permitted by applicable law.

7. Retention

We retain personal data for as long as your account is active and as needed to provide the Service, unless a longer period is required by law. If you ask us to delete your account, we will delete or anonymize personal data except where we must retain certain records for legal, security, or dispute-resolution purposes.

8. Your rights

8.1 EEA / UK (GDPR)

Subject to applicable law, you may have the right to access, rectify, erase, restrict processing, data portability, and object to certain processing. You may also lodge a complaint with a supervisory authority. To exercise rights, contact support@wayout.today.

8.2 California (CCPA / CPRA)

California residents may request access to categories and specific pieces of personal information we collect, deletion, and correction, and may limit use of sensitive personal information where applicable. We do not sell personal information or share it for cross-context behavioral advertising. Submit requests via support@wayout.today.

9. WhatsApp

If you enable WhatsApp notifications, you consent to messages sent to the number you provide. You can opt out at any time by replying STOP to a message, adjusting settings in the app, or contacting us.

10. Security

We implement appropriate technical and organizational measures designed to protect personal data. No method of transmission over the Internet is 100% secure; we cannot guarantee absolute security.

11. Children

The Service is not directed to individuals under the age of majority in their jurisdiction. We do not knowingly collect personal information from children. If you believe we have collected such information, contact us and we will take steps to delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date. Material changes may be communicated through the Service where appropriate.

13. Contact

Questions about this Privacy Policy: support@wayout.today · Contact form · wayout.today

For refund terms, see Section 6.4 of our Terms and Conditions (refund policy).