Privacy Policy
Last updated: December 30, 2025
Your privacy matters. This policy explains how MigrAid ("we", "our", or "the app") handles your information.
The Short Version
Your health data stays on your device unless you choose to turn on syncing. We never sell it, never advertise against it, and never read it.
Information We Collect
Personal Health Information
The app stores the following health-related information that you provide:
- Migraine attack dates, times, and duration
- Pain levels and intensity
- Symptoms experienced
- Potential triggers you identify
- Medications taken
- Personal notes about attacks
This data is stored locally on your device. If you turn on syncing it is also copied to your personal iCloud account (iOS) or to our Firebase project (Android) so you can restore it on a new device.
Location Data
With your permission, we access your approximate location to:
- Retrieve weather data (temperature, barometric pressure, humidity)
- Correlate weather conditions with your migraine attacks
- Power predictions based on incoming weather changes
Your location is:
- Never stored permanently by us
- Never transmitted anywhere unless you turn on syncing
- Only used temporarily to fetch weather data from Open-Meteo
You can revoke location permission at any time in iOS Settings.
Usage Information
We may collect anonymous information about how you use the app:
- Features accessed
- App preferences and settings
- Device type and iOS version (for compatibility)
How We Use Your Information
Your data is used to:
- Provide pattern analysis and insights
- Correlate weather conditions with your migraines
- Generate predictions about high-risk days
- Create exportable reports for your healthcare providers
- Send you notifications about predicted high-risk days (if enabled)
Data Storage and Security
Your health data is:
- Stored locally on your device using the platform's secure storage
- Synced to iCloud if you have iCloud enabled (encrypted by Apple)
- Only leaves your device if you enable syncing, and then only to storage tied to you
We implement industry-standard security measures, but no method of storage is 100% secure. We recommend keeping your device updated and using a passcode.
Third-Party Services
RevenueCat (Subscription Management)
We use RevenueCat to manage subscriptions. RevenueCat may collect:
- Anonymous device identifiers
- Purchase and subscription status
- App usage analytics related to purchases
RevenueCat does not have access to your health data. See RevenueCat's Privacy Policy.
Open-Meteo (Weather Data)
We use Open-Meteo's free API to retrieve weather information. Open-Meteo does not require authentication and does not track individual users. See their terms.
What We Don't Do
- No ads: MigrAid has no advertisements
- No data selling: We never sell your information
- We never read your health data: Your migraine logs, symptoms, triggers and medications stay on your device, or in your own synced copy if you enable it
- No analytics on health data: We cannot see your migraines or any health information you log
App Analytics
We use standard app analytics services to understand how the app is used and to improve the experience. These services collect anonymous usage data such as which features are accessed, device type, and app performance metrics. They do not collect or have access to your health data.
Analytics services we use:
- Firebase Analytics: Anonymous app usage metrics (privacy info)
- Meta SDK: Install attribution and app events (privacy info)
- Singular: Install attribution (privacy info)
These services never receive your migraine logs, symptoms, triggers, medications, or any personal health information.
Data Sharing
We do not sell, trade, or transfer your personal health information. Your data may only be shared when:
- You explicitly export and share reports with your healthcare providers
- Required by law or legal process
- Necessary to protect our rights or the safety of users
Your Rights and Choices
You have the right to:
- Access: View your data anytime in the app
- Export: Download your data as PDF or CSV
- Delete: See Delete your data below
- Control location: Disable in iOS or Android system settings
- Control notifications: Manage in app settings
Delete your data
You can delete everything the app holds about you at any time. No account is required, so there is nothing to close.
- Data on your device — uninstall the migraid app. Your migraine logs, symptoms, triggers, medications, cycle entries and MIDAS results are stored on the device and are removed with it. This is where your data lives by default.
- Data in cloud sync (Android) — if you turned on Cloud sync, a copy of your logs is stored in our Firebase project so it can be restored to a new device. To have it deleted, turn Cloud sync off in Settings and email [email protected] from any address, or from the app via Settings → Contact the team. We delete it within 30 days and confirm by reply.
- Data in iCloud (iOS) — if you enabled iCloud Sync, remove the app's data from iCloud in your device's iCloud settings, or delete it from your Apple account.
- Analytics and crash data — anonymous usage and crash records collected through Google Firebase Analytics. These carry no name, email or health information. They are deleted automatically within 14 months, or on request using the email above.
- Subscription records — purchase history held by our payments processor, RevenueCat, and by Apple or Google. These are financial records we are required to retain; ask us and we will remove everything not legally required.
What is kept: nothing that identifies you personally. There is no account, no profile, and no email address on file unless you write to us.
Data Retention
Your health data is stored on your device for as long as you use the app, and when you delete the app all locally stored data is removed. If you enable syncing, a copy is also held in your iCloud account (iOS) or in our Firebase project (Android) until you delete it — see Delete your data. Anonymous analytics and crash data are retained for up to 14 months.
Children's Privacy
MigrAid is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13.
California Privacy Rights
California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and the right to request deletion. Most data never leaves your device, and anything that does can be removed — see Delete your data.
European Users (GDPR)
For EU users: your health data stays on your device unless you enable syncing. Where we do hold a synced copy or anonymous analytics, we act as data controller for that limited data, and you can have it erased at any time — see Delete your data.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy and updating the "Last updated" date.
Contact Us
If you have questions or concerns about this Privacy Policy, please contact us at: