Privacy Policy
Last updated: September 30, 2026
Your privacy matters. This policy explains how MigrAid ("we", "our", or "the app") handles your information.
The Short Version
Your migraine diary lives on your phone. The iPhone app also keeps a limited copy on our server (log dates, pain level, triggers and air pressure from the last 90 days) to calculate your morning migraine-risk notification. It's stored under a random ID, not your name or email. We never sell your data and never use it for advertising.
Information We Collect
Personal Health Information
The app stores the following health-related information that you provide:
- Migraine attack dates, times, and duration
- Pain levels and intensity
- Symptoms experienced
- Potential triggers you identify
- Medications taken
- Personal notes about attacks
This data is stored on your device. If you turn on syncing, it's also copied to your personal iCloud account (iPhone) or to our Firebase project (Android) so you can restore it on a new device.
Data used for morning risk notifications (iPhone)
To calculate the morning migraine-risk notification, the iPhone app sends a limited copy of your last 90 days of logs to our server on Google Firebase each time you add, change or delete a log: when each migraine started and ended, its pain level, the triggers you picked, and the air pressure at the time, plus how many logs you have in total. Symptoms, medications, notes, MIDAS results and cycle entries are never sent.
The copy is stored under a random ID the app creates and is not linked to your name, email, Apple ID or subscription. We use it only to calculate your notification and to check that it works correctly. We don't use it for analytics or advertising, and we never sell or share it.
Location Data
With your permission, we access your location to:
- Retrieve weather data (temperature, barometric pressure, humidity)
- Correlate weather conditions with your migraine attacks
- Power predictions based on incoming weather changes
Your location is:
- Sent to Open-Meteo to look up the weather, with no ID or account attached
- Saved on our server if you turn the morning notification on or off in Settings (the location your phone reported at that moment), so the server can check your local weather each morning
- Never sold or used for advertising
You can revoke location permission at any time in iOS Settings.
Usage Information
We may collect anonymous information about how you use the app:
- Features accessed
- App preferences and settings
- Device type and iOS version (for compatibility)
How We Use Your Information
Your data is used to:
- Provide pattern analysis and insights
- Correlate weather conditions with your migraines
- Generate predictions about high-risk days
- Create exportable reports for your healthcare providers
- Send you notifications about predicted high-risk days (if enabled)
Data Storage and Security
Your health data is:
- Stored locally on your device using the platform's secure storage
- Synced to iCloud if you have iCloud enabled (encrypted by Apple)
- On iPhone, the limited notification copy described above is stored on Google Firebase servers in the United States, encrypted in transit and at rest
We implement industry-standard security measures, but no method of storage is 100% secure. We recommend keeping your device updated and using a passcode.
Third-Party Services
RevenueCat (Subscription Management)
We use RevenueCat to manage subscriptions. RevenueCat may collect:
- Anonymous device identifiers
- Purchase and subscription status
- App usage analytics related to purchases
RevenueCat does not have access to your health data. See RevenueCat's Privacy Policy.
Open-Meteo (Weather Data)
We use Open-Meteo's free API to retrieve weather information. Open-Meteo does not require authentication and does not track individual users. See their terms.
What We Don't Do
- No ads: MigrAid has no advertisements
- No data selling: We never sell your information
- Your full diary stays with you: Symptoms, medications and notes never leave your device, except in your own synced copy if you turn on syncing
- No analytics on your diary: The limited copy on our server is used only for your morning notification
App Analytics
We use standard app analytics services to understand how the app is used and to improve the experience. These services collect anonymous usage data such as which features are accessed, device type, and app performance metrics. They don't receive your migraine diary.
Analytics services we use:
- Firebase Analytics: Anonymous app usage metrics (privacy info)
- Meta SDK: Install and purchase attribution (privacy info)
- Singular: Install and purchase attribution (privacy info)
These services never receive your migraine logs, symptoms, medications or notes. One exception: Firebase Analytics receives your answers to the setup questions (such as which triggers you suspect) and the pain level of the first migraine you log during setup, which we use to improve the setup screens.
Data Sharing
We do not sell, trade, or transfer your personal health information. Your data may only be shared when:
- You explicitly export and share reports with your healthcare providers
- Required by law or legal process
- Necessary to protect our rights or the safety of users
Your Rights and Choices
You have the right to:
- Access: View your data anytime in the app
- Export: Download your data as PDF or CSV
- Delete: See Delete your data below
- Control location: Disable in iOS or Android system settings
- Control notifications: Manage in app settings
Delete your data
You can delete everything the app holds about you at any time. No account is required, so there is nothing to close.
- Data on your device: uninstall the migraid app. Your migraine logs, symptoms, triggers, medications, cycle entries and MIDAS results are stored on the device and are removed with it. This is where your data lives by default.
- Data in cloud sync (Android): if you turned on Cloud sync, a copy of your logs is stored in our Firebase project so it can be restored to a new device. To have it deleted, turn Cloud sync off in Settings and email [email protected] from any address, or from the app via Settings → Contact the team. We delete it within 30 days and confirm by reply.
- Data for morning notifications (iPhone): the limited copy on our server updates whenever your logs change, so deleting logs in the app removes them from it too. Uninstalling the app does not delete this copy, so delete your logs first if you want it cleared.
- Data in iCloud (iOS): if you enabled iCloud Sync, remove the app's data from iCloud in your device's iCloud settings, or delete it from your Apple account.
- Analytics and crash data: anonymous usage and crash records collected through Google Firebase Analytics. These carry no name, email or health information. They are deleted automatically within 14 months, or on request using the email above.
- Subscription records: purchase history held by our payments processor, RevenueCat, and by Apple or Google. These are financial records we are required to retain; ask us and we will remove everything not legally required.
There is no account, no profile, and no email address on file unless you write to us.
Data Retention
Your health data is stored on your device for as long as you use the app, and when you delete the app all locally stored data is removed. If you enable syncing, a copy is also held in your iCloud account (iOS) or in our Firebase project (Android) until you delete it; see Delete your data. On iPhone, the limited copy used for morning notifications holds your last 90 days of logs and is kept until you delete those logs in the app; uninstalling the app does not remove it. Anonymous analytics and crash data are retained for up to 14 months.
Children's Privacy
MigrAid is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13.
California Privacy Rights
California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and the right to request deletion. Most of your diary never leaves your device. What does is described above, along with how to remove it; see Delete your data.
European Users (GDPR)
For EU users: most of your health data stays on your device. Where we hold data (the limited notification copy on iPhone, an Android sync copy if you turn it on, and analytics), we act as data controller for that data, and you can have it erased; see Delete your data.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy and updating the "Last updated" date.
Contact Us
If you have questions or concerns about this Privacy Policy, please contact us at: