MigraineScan

Privacy Policy

Last updated: March 2025

MigraineScan ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information when you use the MigraineScan iOS app.

1. Information We Collect

We collect the following categories of information:

Data Type	What It Includes	Purpose
Account Information	Email address, account identifier (user ID)	Authentication, account management
Scan History	Barcodes scanned, product names, scan timestamps, trigger results	Displaying your scan history within the app
Trigger Profile	Your sensitivity settings for migraine trigger categories	Personalizing scan results to your profile
Profile Mode	How you describe your migraine situation (e.g., doctor-diagnosed, suspected triggers)	Tailoring content and scoring
Purchase History	Premium subscription status	Unlocking premium features
Crash Reports	Crash logs, device model, OS version, app version	Diagnosing and fixing technical issues
Analytics Events	Feature usage events, session duration, app version (no personally identifiable content)	Understanding how features are used to improve the app

We do not collect your name, phone number, precise location, health records, or any information you have not explicitly provided within the app.

2. How We Collect Information

Information is collected in the following ways:

• Directly from you — when you create an account, configure your trigger profile, or scan a product.
• Automatically — crash reports and analytics events are captured automatically when you use the app.
• From third-party services — product ingredient data is fetched from OpenFoodFacts; purchase status is managed by RevenueCat.

3. Third-Party Services

MigraineScan uses the following third-party services that may process your data. Each has its own privacy policy:

• Firebase (Google) — provides authentication, database storage (Firestore), crash reporting (Crashlytics), and analytics. Data is processed in accordance with Google's Privacy Policy.
• RevenueCat — manages in-app purchase verification and subscription status. See RevenueCat's Privacy Policy.
• OpenFoodFacts — provides open-source product ingredient data. No personal information is transmitted. See OpenFoodFacts' Privacy Policy.

We do not sell or rent your data to any third party. We do not share your data with advertisers or data brokers.

4. How We Use Your Information

We use your information exclusively to:

• Create and manage your account
• Store and display your scan history
• Calculate personalized trigger verdicts based on your sensitivity profile
• Verify your premium subscription status
• Diagnose crashes and fix bugs
• Understand aggregate feature usage to improve the app

We do not use your data for advertising, behavioral profiling, or any purpose beyond operating and improving MigraineScan.

5. Data Retention

Your account data, scan history, and trigger profile are retained for as long as your account is active. Crash logs and analytics data are retained by Firebase according to their default retention policies (typically 90 days for Crashlytics crash-free data and up to 14 months for Analytics data).

When you delete your account, your personal data (account information, scan history, and trigger profile) is deleted from our servers. Some residual data may remain in backups for up to 30 days.

6. Deleting Your Account

You can request account deletion at any time from within the app:

1. Open the Account tab
2. Scroll to the bottom and tap Delete Account
3. Confirm the deletion in the prompt

You may also email safescansystems@gmail.com to request account deletion. We will process your request within 30 days.

7. Your Rights

Depending on your location, you may have the following rights:

• Access — request a copy of the data we hold about you.
• Correction — ask us to correct inaccurate data.
• Deletion — request that we delete your data (see Section 6).
• Portability — request your data in a portable format.
• Opt-out of analytics — you may disable analytics by contacting us; this does not affect app functionality.

If you are located in the European Union, you have rights under the General Data Protection Regulation (GDPR). If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA). To exercise any of these rights, contact us at safescansystems@gmail.com.

8. Children's Privacy

MigraineScan is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child, please contact us at safescansystems@gmail.com and we will promptly delete it.

9. Security

We use industry-standard security measures including Firebase's encrypted data storage, HTTPS-only transmission, and secure authentication tokens. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Continued use of the app after any changes constitutes your acceptance of the updated policy.