The short version
- Everything you log in MigraiND stays on your device. We have no copy and no way to read it.
- No account, no analytics, no advertising, no tracking, no data sales.
- Sensitive fields are encrypted on your device with a key that never leaves it.
- Only three things can ever leave your device, and only when you act: a purchase (handled by Apple), feedback you choose to send us, and the weather lookup you can switch on.
Who we are
MigraiND is published by SaFraSa BV, Franklin Rooseveltplaats 12/21, 2060 Antwerp, Belgium ("we"). For anything about this policy or your data, e-mail support@safrasa.eu.
Data that stays on your device
Everything you record — attacks, symptoms, medication, notes, settings — is stored in a database inside the app on your phone. Medication names, notes and other sensitive text are encrypted with AES-256-GCM using a key kept in the iOS Keychain, which is not included in cloud backups. We do not operate a server for your records, so there is nothing for us to access, lose or hand over.
Exports and backups are created on your device. They only go where you send them (for example to your doctor), and backup files are protected with a passphrase you choose. Deleting the app deletes all its data.
Data that can leave your device
| What | To whom | When and how |
|---|---|---|
| Purchase and subscription details | Apple (App Store) | When you buy or restore a purchase. Apple processes the payment under its own privacy policy. The app checks your purchases on the device; we only receive anonymous, aggregated sales reports from Apple and never learn who you are. |
| Feedback text you type, app version, iOS version, language | SaFraSa BV | Only when you press Send in "Send feedback". See Feedback below. |
| Rounded location (≈1 km grid) and a date range | Open-Meteo (open-meteo.com), directly from your device | Only when weather correlation is switched on. No account, key or identifier is sent; like any web request, Open-Meteo sees your IP address. See their terms at open-meteo.com/en/terms. |
Feedback and feature requests
Sending feedback is optional. When you send it, the app transmits the text you typed plus the app version, iOS version and language, so we can understand and reproduce what you describe. It is not linked to your name, e-mail or Apple ID, and we cannot reply to it — if you want an answer, e-mail us instead.
Please do not include health details or anything that identifies you. The feedback form is meant for ideas and problems with the app, not for medical information.
To keep the feedback service free of spam and abuse:
- The app uses Apple's App Attest service to prove the message comes from a genuine copy of MigraiND. This creates a random key identifier on your device; we store that identifier and its public key to verify later messages and enforce sending limits. It does not identify you or your device to us. It is deleted after 12 months without use.
- Our server sees your IP address while receiving the message. It is never stored as such: only a one-way hash, with a secret that changes every day, is kept for up to 31 days to enforce rate limits.
Feedback is stored as an internal ticket in our self-hosted development tools, on infrastructure we operate in the European Union. We keep it as long as needed to assess the request and at most 36 months. We do not share it with anyone.
Legal basis: your consent when you press Send (GDPR art. 6(1)(a)), and our legitimate interest in protecting the service against abuse for the App Attest and IP-hash processing (art. 6(1)(f)). You can withdraw consent at any time by e-mailing us with the reference number shown after sending, and we will delete that message.
Permissions the app asks for
- Location (optional, while using the app) — To look up air pressure and weather for your area. Your position is rounded to about 1 km on your device before anything is sent.
- Microphone and speech recognition (optional) — To dictate a note during an attack. Speech is transcribed on your device; audio is never stored or sent.
- Notifications (optional) — Only for reminders you switch on. They are scheduled on your device.
Every permission is optional; the app works without it.
What we never do
- No account, name or e-mail address is needed.
- No advertising identifiers, no third-party analytics or crash-reporting SDKs, no cross-app tracking.
- No selling, renting or sharing of data.
- No Apple Health / HealthKit access in this version.
Children
MigraiND is intended for adults (people living with migraine) and is not directed at children under 16.
Your rights
Because your records only exist on your device, you are in full control of them: you can view, export, correct and delete them in the app at any time. For feedback you sent us, you have the right to access, rectify, erase, restrict or object, and to withdraw consent — e-mail support@safrasa.eu with your reference number. You may also lodge a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be).
This website
The MigraiND privacy, terms and support pages load no analytics or tracking scripts.
Changes
If a future version changes how data is handled (for example optional sync), we will update this page before that version is released and describe the change in the app's release notes.