Calmira privacy policy.

Application Name: Calmira — Migraine Tracker
Developer: Workship Apps
Contact: support@migrainetrackingapp.com
Effective Date: June 23, 2026
Last Updated: October 8, 2026

1. Introduction

Welcome to Calmira ("we," "our," or "us"). We are committed to protecting your privacy and your personal health information. This Privacy Policy explains how Calmira — Migraine Tracker ("the App") collects, uses, stores, and protects information when you use our iOS application.

By downloading or using Calmira, you agree to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use the App.

2. Our Core Privacy Commitment

Calmira is built on a local-first, privacy-first foundation:

• No account required. You never need to create an account or provide any personal identifying information to use the App.
• Your health data stays on your device. All migraine logs, medication records, symptom entries, and personal health notes are stored exclusively on your device using an encrypted local database. This data is never uploaded to our servers or any third-party server.
• We do not sell your data. We will never sell, rent, or trade your personal or health information to any third party, under any circumstances.

3. Information We Collect

3.1 Health and Personal Data (Stored Locally Only)

The following data is entered by you and stored only on your device. It is never transmitted to us or any external server:

• Migraine attack logs (date, time, duration, intensity, symptoms, triggers, notes)
• Head pain region selections
• Medication names, dosing schedules, and dose logs
• Mood or wellbeing quick-log entries
• Any personal notes you add to an attack record

3.2 HealthKit Data (Optional)

With your explicit permission, Calmira may read the following data from Apple Health:

• Sleep data — to help identify sleep-related migraine triggers
• Menstrual cycle data — to surface potential hormonal trigger patterns

This data is read directly from Apple Health and processed entirely on your device. It is never transmitted off your device.

You can revoke HealthKit access at any time in iOS Settings → Privacy & Security → Health → Calmira.

3.3 Location Data (Optional)

With your explicit permission, Calmira uses your approximate location solely to retrieve local barometric pressure data and its forecast from Apple WeatherKit. Barometric pressure changes are a well-documented migraine trigger.

• To keep pressure alerts and the migraine forecast current while the app is closed, the App keeps a rounded copy of your last location (accurate to about 1 km) on your device only, and uses it to check the forecast in the background. It is never sent to us, to analytics, or to any third party other than Apple WeatherKit.
• The barometric pressure at the moment you log an attack is saved with that attack on your device, so the App can show how your attacks relate to pressure changes.
• Your location is not shared with us or any third party.
• You can use all core features of the App without granting location permission, and enter pressure data manually instead.

You can revoke location access at any time in iOS Settings → Privacy & Security → Location Services → Calmira.

3.4 Analytics Data (Aggregated, Non-Identifying)

To understand how the App is being used and to improve it, we collect anonymous, aggregated usage events through PostHog, a privacy-focused analytics platform. These events include:

What is never included in analytics:

• Your migraine notes or descriptions
• Medication names
• Trigger details
• Any data that could identify you as an individual (unless you optionally set a display name, as described below)

PostHog operates under a strict no-personal-data policy for this integration. Data is transmitted securely over HTTPS.

Profile properties. To understand usage patterns, your anonymous analytics profile may include: subscription status (Pro or free), selected app language, and whether onboarding was completed. None of these identify you.

Optional display name. If you choose to set a display name in the App (used to greet you on the home screen), that name is also attached to your anonymous analytics profile. This is entirely optional: you can leave the name blank and the App works fully. You may request deletion of your name from analytics at any time by contacting us.

Approximate location. Our analytics providers infer an approximate, city-level location from your IP address when events are received. Your precise GPS location is never sent to analytics.

3.5 Crash Reports

If the App crashes, Calmira uses Firebase Crashlytics to collect technical crash reports. These reports include:

• Device type and iOS version
• App version and build number
• Stack trace (technical code location of the crash)
• A randomly generated, non-identifying installation ID

Crash reports do not include any health data, your name, or any personally identifiable information.

3.6 In-App Purchases

Calmira offers optional Pro subscriptions via Apple's App Store. All payment processing is handled by Apple and RevenueCat. We receive only anonymized subscription status information (e.g., whether you have an active premium entitlement). We never receive your payment card details. To understand how subscriptions perform, RevenueCat shares subscription lifecycle events (for example trial started, purchase, renewal, cancellation, expiration, or billing issue, together with the product and price) with our analytics provider, PostHog, linked to your anonymous analytics profile. This never includes your payment details, Apple ID, or any health data.

3.7 AI Assistant (Pro Feature)

The AI Assistant feature sends a summary of your migraine history (not raw logs or personal notes) to our secure AI proxy server, which forwards requests to Google Gemini to generate responses. Specifically:

• A structured summary is included as context: your recent attack frequency and pain levels, common triggers, last month's summary, long term trends, the names of the medicines you logged with how often each one helped, the medication overuse level, and the barometric pressure forecast.
• Your name, your personal notes, and any other free text fields are not included.
• AI conversations are not stored on our servers. Each session is stateless.

3.8 Masked Session Replays

To find and fix usability problems, the App records fully masked session replays through PostHog. These recordings are wireframe-level only: all text, numbers, images, and anything you type are blacked out before the recording is created on your device, and keystrokes are never captured. A replay shows only which screens were visited and where taps occurred, never your health data, notes, medication names, or display name. Replays are retained per PostHog's retention policy (typically 30 days).

4. How We Use Information

We use the information described above to:

• Provide the core functionality of the App (attack tracking, pattern detection, insights)
• Surface barometric pressure data relevant to your location
• Identify potential migraine triggers based on your local health data
• Generate AI-powered insights and recommendations (Pro feature)
• Monitor App stability and fix crashes
• Understand overall App usage patterns to improve the product

5. Data Storage and Security

5.1 Local Storage

All health data is stored in an encrypted local database on your device using industry-standard encryption. The database is protected by iOS's built-in hardware encryption.

5.2 iCloud Backup

If you have iCloud Backup enabled on your device, your App data may be included in your device backup as encrypted data managed by Apple. We do not have access to this data.

5.3 Data Retention

• Your health data: Retained on your device until you delete the App or manually clear your data within the App.
• Anonymous analytics events: Retained by PostHog per their data retention policy (typically 1 year).
• Crash reports: Retained by Firebase Crashlytics for 90 days.

6. Data Sharing and Third Parties

We do not share your personal or health data with any third parties except as described in this policy (anonymous analytics, crash reports, AI processing). Below is a summary of third-party services used:

7. Children's Privacy

Calmira is not directed toward children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at support@migrainetrackingapp.com and we will promptly delete it.

8. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request information about data we hold about you.
• Deletion: Because all health data is stored locally on your device, you can delete it at any time by deleting the App. For analytics or crash report data, contact us at support@migrainetrackingapp.com.
• Opt-out of analytics: Contact us to request exclusion of your device from analytics.
• Display name: You can clear your display name in the App at any time (Profile → You), and you may request its deletion from our analytics by contacting us at support@migrainetrackingapp.com.
• Revoke permissions: Revoke HealthKit, Location, or Notification permissions at any time in iOS Settings.

For users in the European Economic Area (EEA), United Kingdom, or California, you have additional rights under GDPR, UK GDPR, and CCPA respectively. Please contact us at support@migrainetrackingapp.com to exercise these rights.

9. International Data Transfers

Anonymous analytics events may be processed on servers located in the United States or other countries where PostHog and Google operate. These transfers are protected by standard contractual clauses and data processing agreements. Your health data is never transferred internationally.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will:

• Update the "Last Updated" date at the top of this document
• Notify you within the App for material changes

Continued use of the App after any changes constitutes acceptance of the updated Privacy Policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

Workship Apps, Developer of Calmira
Email: support@migrainetrackingapp.com

We aim to respond to all privacy inquiries within 5 business days.

Calmira — Understand your migraines, change your days.