Effective date: July 10, 2026
Last updated: July 10, 2026
This Privacy Policy describes how MigraGuard: Migraine Risk & Log (“MigraGuard,” “we,” “us,” or “our”) collects, uses, stores, and shares information when you use our mobile application (the “App”).
By using the App, you agree to this Privacy Policy. If you do not agree, please do not use the App.
1. Who we are
Data controller: [NeuroIn]
Contact: [office.neuroin@gmail.com]
App package: com.migrainetrack.app
2. Summary
MigraGuard is designed offline-first. Most health and tracking data you enter—migraine attacks, daily logs, your profile, menstrual cycle data, and gamification progress—is stored on your device and is not uploaded to our servers for routine cloud backup.
We use cloud services only for limited purposes:
- Account sign-in (Firebase Authentication)
- MigraChat conversation history and daily message limits (Google Cloud Firestore)
- MigraChat AI responses (Google Gemini via Firebase AI)
- Premium purchase status (Google Cloud Firestore, after a lifetime purchase or restore)
We do not sell your personal information.
3. Information we collect
3.1 Information you provide
| Category | Examples | Where stored |
|---|---|---|
| Account | Email address, display name (from Google Sign-In), authentication tokens | Device (encrypted storage) + Firebase Authentication |
| Migraine profile | Age, sex, diagnosis type, migraine frequency, usual duration/severity, known triggers, medications, family history, sleep chronotype | Device only |
| Migraine attacks | Start/end time, pain severity, symptoms, medications, notes, duration | Device only |
| Daily wellness logs | Sleep, hydration, meals, stress, diet triggers, hormonal notes, optional barometric readings | Device only |
| Menstrual cycle | Period start dates, cycle length, period length | Device only |
| MigraChat messages | Text you send to the in-app AI assistant | Device + Firestore (signed-in cloud users only) |
| App preferences | Language, appearance, notification settings | Device only |
3.2 Information collected automatically
| Category | Examples | Purpose |
|---|---|---|
| Location | Approximate GPS coordinates (with your permission) | Local weather and barometric pressure for risk estimates |
| Weather data | Temperature, humidity, barometric pressure (derived from location) | Risk scoring and daily log enrichment |
| Purchase records | Lifetime premium entitlement status | Unlock Premium features |
| Ad interaction | Ad requests handled by Google AdMob (may include device/advertising identifiers per Google’s policies) | Display banner and rewarded ads |
| Usage counters | Daily MigraChat message count | Enforce free-tier chat limits |
We do not use a separate analytics SDK (e.g., Firebase Analytics) in the App.
3.3 Sensitive health information
MigraGuard processes health-related information, including migraine history, symptoms, medications, lifestyle factors, and (if you choose to track it) menstrual and reproductive health data. You control what you enter. This information is treated as sensitive and is stored primarily on your device.
4. How we use your information
We use collected information to:
- Provide migraine logging, risk estimates, trends, calendar views, and reports
- Personalize MigraChat responses using a summary of your on-device data (profile, recent attacks, daily logs, cycle phase, cached weather, and computed risk)
- Authenticate your account and sync MigraChat history across sessions (for signed-in users)
- Process and verify Premium purchases through Google Play
- Show advertisements to non-Premium users
- Send local notifications (e.g., risk changes, attack reminders, daily log reminders) based on your preferences
- Fetch educational articles from our content partner’s public website (Info Center)
MigraChat is an AI assistant, not a medical professional. Do not rely on it for diagnosis or treatment decisions.
5. Where your data is stored
5.1 On your device
The following are stored locally using secure storage and/or device storage:
- Migraine attacks, daily logs, profile, menstrual cycle data, gamification progress
- Cached weather readings tied to your last known coordinates
- Authentication session tokens
- Notification preferences and app settings
If you uninstall the App or clear app data, local health data may be permanently lost unless you have exported it (see Section 9).
5.2 In the cloud (Google Firebase)
When you sign in with a cloud-linked account (not guest, offline, or local-only mode), the following may be stored in Google Cloud Firestore (project: migrainerisk):
| Data | Firestore path |
|---|---|
| MigraChat messages | users/{userId}/chatMessages/{messageId} |
| Daily chat usage count | users/{userId}/chatUsage/{date} |
| Premium status | users/{userId} (premiumLifetime, product ID, update timestamp) |
Firebase Authentication stores your account identifier, email, and verification status.
Attack logs, daily logs, profile fields, and cycle data are not written to Firestore by the App.
6. Third-party services
We rely on the following categories of third-party processors. Each has its own privacy policy:
| Service | Provider | Data involved | Purpose |
|---|---|---|---|
| Firebase Authentication | Email, UID, Google ID token | Sign-in | |
| Cloud Firestore | Chat messages, usage counts, premium flags | Cloud sync | |
| Firebase AI / Gemini | Your message + migraine context summary + recent chat turns | MigraChat AI | |
| Google Sign-In | OAuth credentials | Social login | |
| Google Play Billing | Purchase/receipt data | Lifetime Premium IAP | |
| Google AdMob | Ad request data; banner ads request non-personalized ads where supported | Advertising | |
| OpenWeatherMap | OpenWeather | Latitude/longitude (if API key configured) | Weather |
| Open-Meteo | Open-Meteo project | Latitude/longitude | Weather fallback/forecast |
| WordPress REST API | med-pubs.com (configurable) | No personal data—public page content only | Info Center articles |
We do not transmit your health logs to WordPress. Opening an article in your browser is subject to that website’s own policies.
7. Advertising
If you have not purchased Lifetime Premium, the App may show banner ads and offer rewarded video ads (e.g., temporary access to expanded history and an ad-free period).
- Banner ads are configured to request non-personalized ads where the platform supports it.
- Rewarded ads are served through Google AdMob under Google’s advertising policies.
- Purchasing Lifetime Premium removes banner ads. MigraChat daily limits remain unless you have Lifetime Premium.
For more information about how Google uses data in advertising, see Google’s Privacy Policy.
8. Location
With your permission, the App accesses device location to:
- Fetch local weather and barometric pressure
- Support migraine risk calculations
- Refresh weather periodically in the background (where enabled)
Coordinates may be sent to OpenWeatherMap and/or Open-Meteo. Location is cached locally in weather data storage; it is not uploaded to Firebase/Firestore.
You can deny or revoke location permission in your device settings; weather-based features may be limited.
9. Notifications
The App schedules local notifications on your device (risk alerts, active attack reminders, daily log reminders, MigraChat limit notices, weather sync failures). We do not register a remote push token or operate a push notification server for marketing.
You can control notification categories in Settings → Notifications.
10. Data export and sharing by you
You may generate a Neurologist Report (PDF) from Settings. This report is created on your device and may include profile data, attack history, daily logs, charts, triggers, and cycle information. When you share the PDF, you choose the recipient and channel (email, messaging, cloud drive, etc.). We do not receive a copy.
11. Account, offline mode, and data deletion
Sign-in and offline mode
- Email/password and Google sign-in require network access and email verification (for new email accounts).
- Offline mode lets you use the App without cloud sign-in; MigraChat cloud sync and Premium cloud restore may be unavailable.
Sign out
Signing out clears your local authentication session. It does not delete your Firebase account, Firestore chat history, or on-device health logs.
Account and data deletion
The App does not currently provide an in-app “Delete my account” or “Erase all data” button. To request deletion of cloud-stored data (Firebase account, Firestore chat messages, premium records), contact us at privacy@migraguard.app. To remove local data, uninstall the App or clear app storage in your device settings.
12. Data retention
| Data type | Retention |
|---|---|
| On-device health logs | Until you delete them, clear app data, or uninstall |
| Firestore chat messages | Until you request deletion or we delete your account |
| Firebase Authentication account | Until you request deletion |
| Premium entitlement (Firestore) | For the life of your account or as needed for purchase verification |
| Weather cache | Refreshed periodically; stored locally until cleared |
| Auth tokens (device) | Until sign-out or session expiry |
13. Security
We use industry-standard measures appropriate to a mobile health app, including:
- Encrypted credential storage (SecureStore on supported platforms)
- Firebase security rules restricting user data access by authenticated user ID
- Minimal cloud data footprint (health logs stay on device)
No method of transmission or storage is 100% secure. You are responsible for securing your device and account credentials.
14. International transfers
If you use the App outside the country where our service providers operate, your information may be processed in the United States and other countries where Google and our processors maintain facilities. Those countries may have different data protection laws than your jurisdiction.
Where required by law (e.g., GDPR), we rely on appropriate safeguards such as standard contractual clauses offered by major cloud providers.
15. Your privacy rights
Depending on where you live, you may have rights to:
- Access personal information we hold about you
- Correct inaccurate information
- Delete certain information
- Restrict or object to certain processing
- Data portability (machine-readable format)
- Withdraw consent where processing is consent-based
- Lodge a complaint with a supervisory authority
California residents (CCPA/CPRA): We do not sell personal information. You may request disclosure of categories of data collected and deletion of personal information we maintain, subject to legal exceptions.
EEA/UK residents (GDPR): Our lawful bases include contract (providing the App), legitimate interests (security, fraud prevention, improving features), and consent (where required—for example, location or optional notifications).
To exercise rights, email privacy@migraguard.app. We may need to verify your identity. Note that most health data is stored only on your device and is under your direct control.
16. Children’s privacy
MigraGuard is not directed at children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. The App collects age and health information that is inappropriate to collect from young children without parental consent.
If you believe a child has provided us information, contact us and we will take steps to delete applicable cloud data.
17. Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised policy with a new “Last updated” date. Material changes may also be communicated in the App or via app store release notes. Continued use after changes constitutes acceptance of the updated policy.
18. Contact us
Questions about this Privacy Policy or our data practices:
Email: privacy@migraguard.app
App: MigraGuard: Migraine Risk & Log
Appendix: In-app data flow (technical summary)
On your device (primary):
• Migraine attacks, daily logs, profile, menstrual cycle
• Preferences, gamification, weather cache, auth tokens
Cloud (limited):
• Firebase Auth — account identity
• Firestore — MigraChat messages, daily chat counts, Premium flag
• Gemini (via Firebase AI) — processes chat + health context summary
Third parties (no health log upload):
• AdMob — advertising
• Google Play — purchases
• OpenWeather / Open-Meteo — coordinates for weather
• WordPress (med-pubs.com) — public educational content onlyThis appendix is provided for transparency and does not alter the terms above.