Migraine + Headache Tracker — Privacy Policy

Effective Date: August 10, 2026

Migraine + Headache Tracker ("the App") is developed by Mobile Card Games & Travel Apps LLC. This Privacy Policy explains what data the App collects, how it is used, and how your privacy is protected.

1. Data We Collect

The App is built so that your health data stays on your device:

• Health data you log: Migraine and headache attacks, medications, daily check-ins, and menstrual cycle entries (see the Health Data section below).
• HealthKit data (optional, with your permission): Sleep and menstrual flow data read from Apple Health, and headache entries the App writes back to Apple Health.
• Your location (with your permission): Used only at the moment you log an attack, to look up the weather conditions (such as barometric pressure) at that place and time.
• Purchase information: Transaction records for the subscription, managed by Apple and RevenueCat.

The App does not collect your name, email address, photos, or advertising identifiers, and it contains no analytics or advertising SDKs of any kind.

2. Health Data

This is a health app, and we treat your data accordingly. What you can log and what the App stores:

• Attack logs: Start and end time, pain level (1–10), symptoms, likely triggers, and notes for each attack.
• Medications: Medication name, dose, and timing for attacks and preventive treatment.
• Daily check-ins: Daily factors such as sleep hours (optionally synced from Apple Health).
• Cycle tracking: Menstrual cycle and period entries, logged manually or synced from Apple Health, used to correlate your cycle with headache risk.

How this data is handled:

• Stored locally, no cloud sync: Everything is saved in an on-device database (SwiftData) that is explicitly configured as local-only. There is no iCloud/CloudKit sync of your health log in the current version, no server upload, and no account.
• HealthKit is optional: With your permission, the App reads sleep and menstrual flow from Apple Health to power its Trigger Report and Risk Today insights, and writes the attacks you log to Apple Health as headache entries. The App works fully without HealthKit if you decline. You can revoke access at any time in the Health app.
• Never for advertising: In line with Apple's HealthKit rules, data obtained through HealthKit is never used for advertising or marketing and is never shared with third parties. Your health data — from HealthKit or logged in the App — is never sold or shared.
• We cannot see it: No health data of any kind is transmitted to Mobile Card Games & Travel Apps LLC or to any third party.

3. Consumer Health Data

Some laws treat information about your health that an app handles — “consumer health data” — with special care. In plain terms, here is where this App stands:

• What health data the App handles: the migraine and headache attacks, symptoms, likely triggers, medications and doses, daily check-ins, and menstrual-cycle entries you log, plus sleep and menstrual-flow data read from Apple Health if you grant access.
• Where it lives: entirely on your device, in a local database. It is never uploaded to us or anyone else, and it is never sold, shared, or used for advertising.
• Processing in transit: none of your health data is transmitted. The only related network request sends the coordinates of an attack location to Apple WeatherKit to fetch the weather at that moment; no symptom, medication, or cycle information is included.
• Your choices: delete any entry in the App, revoke HealthKit access in the Apple Health app, or uninstall the App to delete everything on the device. For questions or to exercise any right over health data, contact us at the email below.

4. Location

When you log an attack, the App can attach the weather at that moment — useful for spotting pressure-related triggers. To do this, the coordinates of the attack location are sent to Apple WeatherKit, Apple's own weather service, which returns the weather conditions. Those coordinates are processed by Apple under Apple's privacy policy; they are never sent to us or to any other party, and they are not stored anywhere except with the attack entry in your on-device database.

You can deny location permission and log attacks without weather data.

5. Third-Party Data Sharing

The App shares data with only two parties, and neither receives your health data:

• Apple: WeatherKit receives coordinates to return weather conditions; HealthKit data stays inside Apple Health on your device; and Apple processes your subscription payment. We never see your payment card details.
• RevenueCat (revenuecat.com): Manages subscription purchases. RevenueCat receives purchase/transaction tokens and a random anonymous app-user ID — never your name, email, or any health data.

We do not sell, rent, or share your data with any other third parties. There is no analytics SDK, no ad network, and no remote push server in this App.

6. Data Storage and Retention

• On your device: All attack, medication, check-in, and cycle data lives in a local database on your device. Small app preferences are synced across your devices via Apple iCloud key-value storage tied to your Apple ID; we cannot access them.
• In Apple Health: Headache entries you allow the App to write are stored in Apple Health under Apple's protections and remain there under your control even if you delete the App.
• On our servers: We do not operate servers that store your data.
• Reminders: Check-in and medication reminders are local notifications scheduled on your device.
• Deletion: You can delete individual entries in the App at any time; doctor-report PDFs you export are created locally and shared only where you choose to send them. Uninstalling the App removes all locally stored data.

7. Data Security

Your health log never leaves your device, which is the strongest protection available. The only network traffic the App generates — Apple WeatherKit weather lookups and App Store purchase processing — travels over encrypted HTTPS connections operated by Apple and RevenueCat.

8. Your Rights

You have the right to:

• Delete any attack, medication, check-in, or cycle entry in the App at any time.
• Grant, deny, or revoke HealthKit access per data type at any time in the Apple Health app.
• Deny location permission and still use every feature except automatic weather tagging.
• Remove all App data by uninstalling the App.

Depending on where you live, privacy laws such as the European Union's General Data Protection Regulation (GDPR) and the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) give you rights over your personal data, including the rights to know, access, correct, and delete it. Because we do not hold your data on servers we operate, there is typically nothing for us to access or delete on request — deleting the App deletes your data. Where the App does process data in transit, or a third-party service described above collects data, you may contact us at the email below to exercise your rights, and we will respond as required by applicable law.

9. Children's Privacy

The App is not directed at children under 13, and we do not knowingly collect data from children under 13. In some regions, including the European Union, a higher minimum age applies to consent for data processing; the same statement applies there — we do not knowingly collect data from anyone under the applicable age.

10. Data Breach Notification

In the unlikely event of a data breach affecting user data on any system we operate, we will notify affected users as required by applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Effective Date" at the top of this page.

12. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at:

v5cqpsj4e3u4@opayq.com