MigraTap Privacy Policy

Last updated: March 19, 2026

MigraTap ("the App") is developed and operated by AppAtlas ("we", "us", "our"). This Privacy Policy explains how we collect, use, and protect your information when you use MigraTap.

1. Information We Collect

Data You Provide

• Migraine entries: Timestamps, duration, comments, and tags you log
• Account information: When you sign in via Authly ID, we receive your email address and display name

Data Stored Locally

• All migraine entries are stored locally on your device using SQLite
• Settings and preferences are stored locally
• The app works fully offline — no internet connection is required for core functionality

Data Synced to Our Servers

• If you sign in, your migraine entries are synced to our servers to enable cross-device access
• Sync is optional — the app works without an account

2. How We Use Your Data

• To provide the migraine tracking functionality
• To sync your data across devices (when signed in)
• To generate your personal insights and statistics
• To export your data in JSON or CSV format upon your request

3. Data Storage and Security

• Local data is stored in an encrypted SQLite database on your device
• Authentication tokens are stored in your device's secure keychain (iOS Keychain / Android Keystore)
• Server-side data is stored in encrypted PostgreSQL databases
• All network communication uses HTTPS/TLS encryption
• We use Keycloak (Authly ID) for authentication with industry-standard OAuth2/PKCE

4. Data Sharing

We do not sell, share, or transfer your personal data to third parties. Your health data stays between you and our servers.

5. Data Retention

• Local data persists until you delete the app or clear app data
• Server-side data is retained as long as your account is active
• You can export all your data at any time from Settings
• You can request account and data deletion by contacting us

6. Your Rights

You have the right to:

• Access your data (via the app's export feature)
• Delete your data (by contacting us or deleting your account)
• Port your data (JSON/CSV export)
• Opt out of cloud sync (simply don't sign in)

7. Children's Privacy

MigraTap is not intended for children under 13. We do not knowingly collect data from children.

8. Changes to This Policy

We may update this policy from time to time. Changes will be posted here with an updated revision date.

9. Contact Us

For questions or data deletion requests:

• Email: privacy@appatlas.eu
• Website: appatlas.eu