Your health information belongs to you.

1. Who the app is for

Migraine Club is intended for people aged 16 and over. This includes people aged 16–17. We use the same privacy-protective defaults for everyone. The app is not intended for under-16s and does not ask for your date of birth. There is no parental monitoring or automatic sharing with parents, carers or healthcare professionals. For app versions before 1.1, the minimum age remains 18.

2. Health information stored by the app

You may record symptoms, ratings and descriptors, mood, medicines taken, relief-tool use, cycle and PMS entries, appointment notes, custom items, preferences and check-in history. App 1.1 also lets you optionally record energy, self-confidence, comfort in your body, easier moments and personal monthly reflections. You can leave optional answers blank, and a blank answer is not treated as a positive or negative score. These can reveal sensitive information about your health.

The app stores those records locally in its private storage on your iPhone. A limited snapshot is stored in Apple’s shared App Group container for the widget. Migraine Club has no user account, cloud sync or operator-controlled health database, so Phoebe Wolstenholme does not receive the health entries you make in the app. This does not remove the operator’s responsibility to design the app with privacy in mind.

From app 1.1, diary records, appointment notes and widget snapshots use protected files excluded from automatic device backups. Existing entries are transferred on the device; the old copy is removed only after the new file is written and verified. Earlier backups can still contain records from older versions and cannot be erased by the app. Losing the phone or deleting the app can lose the diary. PDF and CSV exports are readable copies, not files the app can import to restore a diary.

Optional voice notes

In app 1.1, you can record voice notes alongside check-ins and personal monthly reflections without Premium. The app asks for microphone permission only when you tap Record. You can refuse or revoke that permission in iPhone Settings and continue using written entries. Recording stops when the app becomes inactive or you leave the editor; it does not listen continuously in the background.

Recordings, their dates and durations are stored locally. Audio files use protected app-private storage and are excluded from automatic device backups. Audio is not uploaded to Migraine Club or a transcription service, is not automatically transcribed or analysed, and does not contribute to charts or clinical summaries. Voice notes are not included in PDF or CSV exports and cannot be restored from those exports. Losing the device or deleting the app can permanently lose recordings.

You can listen to or remove saved recordings in Reports → Resources → Saved voice notes. “Delete all app data” also removes saved and draft recordings. If deletion fails, the app displays an error and offers a retry. Recordings may contain sensitive information or other people's voices: avoid recording someone without their agreement and consider who can hear playback.

3. What the app does not collect

The current app does not send your health records to a Migraine Club server, use third-party advertising or analytics, sell personal information, or access HealthKit. If a future release changes that position, this policy and the App Store privacy information will be updated before the feature is released.

4. Widget information

The widget can show check-in completion and limited symptom or mood information. Health details are hidden by default. You can change “Hide health details from the widget” inside the app. Apple’s operating system may also redact widgets while a device is locked. Consider who can see your Home Screen.

5. Reports and sharing

A PDF or CSV is created on your device only when you request it. Nothing is sent automatically. Apple’s share sheet lets you choose a destination. You can preview reports before sharing. Personal monthly writing is excluded from the appointment report. Care-star cards contain no symptoms or diary notes, but sharing one may reveal that you use the app. Once you share a file to email, messages, Files, cloud storage, a printer or a healthcare service, the recipient and destination provider control their copy. Check the file and recipient carefully.

Blank printable diaries

The free weekly and monthly printable diaries are blank PDF templates bundled with the app. They do not automatically include your health entries. Saving or printing uses the destination you choose; Migraine Club does not receive what you later write on paper. Store completed paper diaries securely.

6. Deleting app data

“Delete all app data” clears the app’s locally stored check-ins, medication and mood entries, cycle data, relief logs, appointment notes, monthly reflections, easier moments, reminder preferences, custom items, colour choice, widget data/preference and onboarding choices. Deleting the app generally removes its local data. Neither action recalls exported files, cancels an Apple subscription nor erases Apple’s purchase record.

Optional reminders and wellbeing questions

Diary and monthly-review reminders are off by default. They are scheduled locally only after you choose them and grant iOS permission; there is no remote notification server. Alerts contain no symptoms or notes, but the Migraine Club name may be visible on your lock screen. Adjust previews in iPhone Settings, or switch reminders off in the app. Deleting all app data also cancels its reminders.

Extra wellbeing questions and occasional Premium invitations start off. You can choose them in Settings. You do not need to share more health information to use the core diary. There is no advertising, behavioural profiling for ads, geolocation, chat or public posting in this version.

Apple subscriptions

Apple handles Premium purchases, billing and purchase restoration through the App Store. The app checks Apple's verified transaction information, including the product and entitlement or expiry status, to unlock Premium. Your diary and voice notes are not sent with that check. The app does not ask for or receive your payment-card details or Apple Account password. Apple's handling of account and purchase information is governed by Apple's privacy information.

7. This website and Vercel

This static site is hosted by Vercel. Vercel may process technical request information such as IP address, request time, browser/device information and requested page to deliver, secure and troubleshoot the site. Migraine Club does not add advertising trackers or its own analytics cookies to this site.

The lawful basis for necessary delivery and security logs is legitimate interests: operating, securing and diagnosing the public legal and support site. Vercel acts under its own applicable terms and privacy commitments.

8. Support email and Gmail

If you email support, Phoebe Wolstenholme receives your email address, message and any information you choose to include. Gmail, provided by Google, is used to handle that correspondence. The lawful basis for ordinary support and privacy correspondence is legitimate interests in responding to users, maintaining the service, preventing misuse and keeping an appropriate business record. Where correspondence is needed to take steps at your request relating to a purchase or service, contract-related grounds may also apply.

Please do not email a migraine diary, medical record or other detailed health information. If limited health information is genuinely necessary to investigate a problem, support will ask you to minimise it and will identify an appropriate condition for processing special-category data before it is used.

9. Retention

Ordinary support messages are normally deleted within 12 months after the last meaningful contact. A message may be kept longer where reasonably necessary for a legal claim, security or fraud investigation, accounting obligation or unresolved complaint. You may ask for earlier deletion where no legal reason requires retention. Necessary Vercel logs follow the host’s applicable retention settings and policies.

10. International processing

Vercel and Google operate internationally and may process technical or correspondence data outside the UK, including in the United States. Where UK data-protection law treats this as a restricted transfer, the relevant provider’s applicable contractual safeguards, adequacy arrangements or other lawful transfer mechanism are used. Their own privacy notices describe their infrastructure and transfer arrangements.

11. Your rights

Depending on the circumstances, UK data-protection law may give you rights to access, correct, erase, restrict or object to processing of personal information held through website/support operations, and to complain to the Information Commissioner’s Office. Most health entries exist only on your iPhone, so use the app’s delete and export controls for those records.

14. Changes

This policy will be updated before a released feature materially changes these practices. The effective date and version above will change, and material changes will be made reasonably visible in the app or on this site.