Privacy Policy
Last Updated: October 10, 2026
Introduction
Migraine Weather ("we," "our," or "us") respects your privacy and is committed to protecting it. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Migraine Weather iOS app and our website, migraineweather.app (collectively, the "Service"). Website analytics and session replay are described separately below and do not record activity inside the iOS app.
Information We Collect in the App
Migraine Weather is designed with privacy as a core principle. We collect only the minimal information necessary for the app to function:
- Location Data: To provide weather-based migraine risk forecasts for your area, we need your location. Your precise coordinates are rounded to approximately 7.5 kilometers (~5 miles) before being stored on our servers. This coarse location is sufficient for weather forecasting while protecting your exact whereabouts. You may also choose to monitor a fixed location instead of your current location.
- Device Identifier: We generate a random device ID stored securely in your device's Keychain. This identifier is used to match your preferences and deliver the service. It is not linked to your Apple ID or any personal information.
- Migraine Logs: If you log migraines in the app, this data is stored locally on your device using Apple's SwiftData framework. Migraine logs are not transmitted to our servers.
- Preferences and Settings: Your notification preferences, sensitivity settings, and factor toggles are stored on our servers to enable personalized alerts and forecasts.
- Push Notification Token: If you enable notifications, Apple provides us with a device token to deliver push notifications. This token is managed by Apple and does not identify you personally.
- Phone Number (optional): If you opt in to SMS alerts, your phone number is encrypted at rest on our servers and used solely to send you migraine risk alerts. We do not share your phone number with third parties except our SMS delivery service (ClickSend), which processes it only to deliver your message.
Information We Do Not Collect
- We do not require an account, email address, or name to use the app
- We do not collect health data beyond what you voluntarily log, and that is stored only locally on your device
- The iOS app does not track your browsing activity or use advertising identifiers. Website analytics and session replay are described below.
- We do not sell or share your information with advertisers
Website Analytics and Session Replay
On our website, including our educational articles, we use Umami, an analytics tool hosted on our own infrastructure, to understand how visitors use the site and improve it. Analytics includes pages and page URLs visited, referring sites, approximate region, device and browser type, and interactions with links. We do not use advertising identifiers or analytics cookies to track you across unrelated websites, and we do not sell this analytics data to advertisers.
We also keep a coarse entry-page category and referral category in your browser tab's session storage to understand which pages lead to App Store links. This attribution record stores categories rather than personal identifiers, search terms or full referring URLs, and is no longer reused after 30 minutes of inactivity. App Store links may include a campaign label for aggregate download and sales reporting.
For a randomly sampled portion of website visits, we use session replay to diagnose navigation and usability problems. A replay reconstructs visible page content and on-page interactions such as clicks, scrolling and navigation. Recording is currently sampled at approximately 15% of visits and capped at five minutes per recording. Input masking is enabled to obscure values entered in form fields, but visible page text and page URLs, including any information contained in those URLs, may still appear in a replay.
Website analytics and replays are hosted on our own infrastructure and are not sold to advertisers. They apply only to the website, not activity inside the iOS app, and do not access migraine logs stored on your device. We do not link these website records to your app device record or individual subscription.
How We Use Your Information
We use the collected information solely to:
- Provide accurate, location-based migraine risk forecasts
- Send you push notifications about approaching weather changes
- Send optional SMS alerts for high-risk conditions
- Deliver optional morning summary notifications
- Improve the accuracy of our risk predictions
- Understand website use and diagnose navigation and usability problems
Data Storage and Protection
- Encryption: Device keys are cryptographically hashed using Argon2. Phone numbers are encrypted at rest.
- No Plaintext Logging: We never log personally identifiable information in our server logs.
- Data Retention: Cached forecast data is automatically deleted after 48 hours to minimize your location history on our servers.
- Secure Infrastructure: Our backend runs on Fly.io with industry-standard security practices.
Third-Party Services
We use the following third-party services to operate Migraine Weather:
- Visual Crossing: Weather data provider. Receives only coarse location coordinates.
- Apple Push Notification Service (APNs): Delivers push notifications to your device.
- ClickSend: SMS delivery service (only if you opt in to SMS alerts).
These services receive only the minimum information necessary to perform their function.
Your Rights and Choices
- Notifications: You can disable push notifications at any time in iOS Settings or within the app.
- SMS Alerts: You can remove your phone number from the app at any time.
- Location: You can revoke location permission in iOS Settings. The app will use your last known location or a fixed location you specify.
- Data Deletion: You may request deletion of all your data by contacting us. Upon request, we will delete your device record, preferences, and any stored contact information from our servers.
- Website Analytics: You can use browser content-blocking settings or extensions to block analytics and replay scripts served from umami.moffett.cloud.
Children's Privacy
Migraine Weather is not directed at children under 13. We do not knowingly collect information from children under 13.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last Updated" date at the top of this policy.
Contact Us
If you have any questions about this Privacy Policy or wish to request data deletion, please contact us at: