1. Information We Collect

Information You Provide

When you create an account and use MigraineArc, you may provide:

• Account information such as your email address and password

• Health and symptom data, including migraine episodes, severity ratings, duration, and timing

• Contextual data you choose to log, such as sleep quality, stress levels, hydration, food triggers, and medications taken

• Freeform notes and observations you enter within the app

Information Collected Automatically

When you use MigraineArc, we may automatically collect:

• App usage data such as screens visited, features used, and session duration

• Device information such as device type, operating system, and app version

• Crash reports and error logs to help us identify and fix technical issues

Information We Do Not Collect

MigraineArc does not collect:

• Precise GPS location data

• Contacts or communications from your device

• Data from other apps on your device

2. How We Use Your Information

We use the information we collect to:

• Provide and operate the MigraineArc service

• Generate personal insights, pattern analyses, and episode summaries within the app

• Improve app performance, fix bugs, and develop new features

• Communicate with you about your account or important updates

• Comply with legal obligations

We do not sell your personal information or health data to third parties.

3. How We Store and Protect Your Data

Your data is stored securely using Supabase, a cloud infrastructure provider with industry-standard security practices. We use the following measures to protect your information:

• Encrypted connections (HTTPS/TLS) for all data in transit

• Row-level security policies to ensure your data is accessible only to your account

• Secure authentication managed through Supabase Auth

While we take reasonable precautions to protect your data, no method of transmission or storage is 100% secure. We encourage you to use a strong, unique password for your account.

4. Data Sharing

We do not sell, rent, or trade your personal information or health data. We may share data in the following limited circumstances:

• Service providers: We work with trusted third-party services (such as cloud hosting and error monitoring) that process data on our behalf under strict confidentiality agreements.

• Legal compliance: We may disclose information if required by law, regulation, or valid legal process.

• Business transfers: In the event of a merger or acquisition, your data may be transferred to the new entity, subject to this Privacy Policy.

5. Your Choices and Rights

You have the following rights regarding your data:

• Access: You may request a copy of the personal data we hold about you.

• Correction: You may update or correct your account information within the app at any time.

• Deletion: You may delete your account and associated data at any time from the app settings. We will remove your data from our systems within 30 days of your request.

• Export: You may request an export of your episode data in a standard format.

To exercise any of these rights, please contact us at the email address listed at the end of this policy.

6. Health and Sensitive Data

MigraineArc is designed to help you track episodic health experiences. The symptom and health data you log is treated as sensitive information. This data is:

• Stored securely and accessible only to your account

• Used solely to provide in-app insights and features

• Never sold to advertisers, insurers, or data brokers

MigraineArc is not a medical device and is not intended to diagnose, treat, or cure any medical condition. Always consult a qualified healthcare provider for medical advice.

7. Children's Privacy

MigraineArc is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

8. Third-Party Services

MigraineArc uses the following third-party services that may collect limited data as part of providing their services:

• Supabase — database, authentication, and cloud storage

• RevenueCat — subscription and in-app purchase management

Each of these services operates under their own privacy policy. We encourage you to review them for more information about their data practices.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will notify you through the app or by email and update the effective date at the top of this document. Continued use of MigraineArc after changes are posted constitutes your acceptance of the updated policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at:

MigraineArc

Email: privacy@migrainearc.com