📄 Privacy Policy

Last updated: July 2, 2026

Welcome to MigSense. This app is a data-tracking and analysis tool that helps you log migraine and headache attacks and understand your own triggers — it does not provide medical diagnosis or treatment. This Privacy Policy explains what information is collected while using MigSense, how it is used, and how it is protected.

1. No Account Required

MigSense does not require signing up with an email, password, or social account. All of your attack, symptom, trigger, and medication records are stored directly on your device. If you turn on iCloud sync, that data is backed up only to your own private iCloud account and synced across your devices — it never goes to MigSense's own servers.

2. Information We Collect

The following information may be processed while you use MigSense:

Attack records: Start/end time, severity, symptoms, triggers, relief methods, medication use, and any notes you add.
Apple Health data (if you grant permission): Sleep duration, heart rate, heart rate variability (HRV), respiratory rate, blood oxygen, body temperature, step count, active energy, workouts, mindful minutes, caffeine and water intake, and cycle-phase information. This data is read only to show you patterns around your attacks; we may also write the attacks you log back to Apple Health if you choose.
Location and weather: To show barometric pressure and weather conditions at the time of an attack, your location is used only "while using the app" when you grant permission. There is no background location tracking.
Voice and speech recognition: If you choose to describe an attack by speaking, your audio never leaves your device — speech is transcribed on-device. Only the resulting text is processed, and only when you tap to analyze it.
AI usage data: If you use the insight, chat, doctor-prep note, or early-warning features, a de-identified summary of your records is processed (see Section 3).
Subscription status: Whether you have a MigSense Pro subscription is managed through RevenueCat and the App Store using an anonymous user identifier.
Notification token: If you allow reminder notifications, a notification token may be used to deliver them to your device. This token is associated with an irreversibly hashed identifier, not your personal information.

3. AI Analysis

MigSense Pro includes optional AI features (insights, chat, doctor-prep notes, early warnings, and extracting an attack from your spoken description). When you use these features:

A de-identified summary of your attack records (one-way hashed identifiers instead of names, relative dates, and numeric symptom/trigger/pressure/sleep values) is sent to a Supabase server function.
That function calls the Google Gemini AI model to generate suggestions.
Your raw Apple Health samples, raw location data, or voice recording are never included in these requests — only numeric/summary values are sent.
Analysis only starts when you use the feature; it never runs automatically or in the background.
An anonymous user identifier assigned by RevenueCat is sent with the request so your usage quota can be tracked.

Important: AI output is for informational purposes only and does not replace medical advice, diagnosis, or treatment. Always consult a doctor for decisions about your health.

4. Third-Party Services

MigSense uses the following third-party services to provide the app, each with its own privacy policy:

Apple HealthKit — Reading health/activity data and writing attack records with your permission (apple.com/legal/privacy)
Apple WeatherKit — Weather and pressure data at the time of an attack (apple.com/legal/privacy)
Apple iCloud (CloudKit) — Optional, cross-device sync within your own private iCloud account only (apple.com/legal/privacy)
Supabase — Server functions that power AI requests, and notification-token storage (supabase.com/privacy)
Google Gemini API — AI insight/suggestion generation from de-identified data (policies.google.com/privacy)
RevenueCat — Subscription and purchase management (revenuecat.com/privacy)
Apple Push Notification service (APNs) — Delivering reminder notifications (apple.com/legal/privacy)

5. Data Storage & Security

Your attack, symptom, trigger, and medication data is stored primarily on your device. If iCloud sync is on, this data is kept only in your own private iCloud database — MigSense's own servers never hold a copy of your personal health records. De-identified data used for AI requests and notification tokens are stored on access-restricted server infrastructure. All network traffic is encrypted with HTTPS.

6. Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. Data is shared with the service providers listed above only to the extent needed to run MigSense, manage your subscription, send notifications, provide AI analysis you requested, and maintain security.

7. Your Rights

You have the right to:

Access the data we hold on your device and in your iCloud (always visible within the app)
Correct or remove inaccurate data
Delete all of your tracked data with a single tap
Choose never to use the AI features

See our Delete My Data page to learn how to delete your data, or contact us at the email below.

8. Children's Privacy

MigSense is not directed at children and does not knowingly collect data from users under 17. If you believe a child has provided us with data, please contact us.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: cemalefeyilmaz@gmail.com