Baromind: Migraine Tracker Privacy Policy

This policy covers the Baromind: Migraine Tracker app for iOS and Android ("the app"). The app is published by SummationWorks ("we", "our" or "us"), which is the controller of the personal data described here. Our website is covered by our main Privacy Policy.

1. What Baromind Is

Baromind is a personal diary for recording headaches and migraines. It is not a medical device and does not diagnose, treat or predict any condition. Talk to a healthcare professional about your symptoms and treatment.

You log an attack in a few taps, add details only if you want to, and see your entries on a calendar. With Baromind Pro you can also create a report to share with your doctor. The app can show the air pressure where you are, as a supporting feature.

2. What Stays on Your Device

The app works without an account, and Baromind has no server that stores your diary. What you record is kept only in the app's storage on your device:

• your diary entries: when an attack started and ended, how bad it was, symptoms, pain location, possible triggers and notes. This is health information, and the app never sends it to us or to any third party.
• the medications you record, with their doses and times, and your saved medication list
• the air-pressure readings the app has saved, including the pressure when each attack started
• your settings, such as theme, pressure unit and alert preferences, and a random install ID (see section 4)

Entries stay on your device until you delete them, use Erase all data, or delete the app.

• Device backups: Like other app data, your diary is included in your device's own backup if you have backups turned on: iCloud Backup on iPhone, or Google's backup on Android. These backups belong to your Apple ID or Google account and are governed by Apple's or Google's terms; we cannot access them. Restoring a backup restores your diary.
• Exports: A doctor report (PDF) or a CSV file leaves your device only when you create one and choose where to send it in the system share sheet. The copy the app makes for sharing is deleted when the share sheet closes; what happens to the file you send depends on the app or person you send it to.
• Alerts: Pressure-change alerts are local notifications scheduled on your device. The app uses no push service and no push token, and the alerts mention air pressure only.

3. Permissions

The app asks for a permission only when you turn on the feature that needs it, never during setup. Both are optional, and you can change them at any time in your device's settings.

• Location: Approximate location, to show the air pressure where you are. The app asks only after you tap "Show local pressure". Without it, everything else works; you just don't see local pressure.
• Notifications: To show pressure-change alerts, asked for only when you turn alerts on.

4. Data That Leaves Your Device

The app sends data to the services below. None of them receives your diary entries, medications or notes, and each third-party service is governed by its own privacy policy.

Install ID: When you first open the app, it creates a random identifier on your device. It is not based on your name, email address, Apple ID, Google account or any device identifier. It is the only identity Mixpanel and RevenueCat see, and Erase all data replaces it with a new one.

Local air pressure — our weather server and MET Norway

• What is sent: Your approximate location, rounded to about 1 km (two decimal places) before it leaves your device, and the app's name and version. The app sends this to our own weather server, which passes only the rounded coordinates on to MET Norway (the Norwegian Meteorological Institute), a public weather service. MET Norway does not receive your IP address or anything else about you or your device.
• Why: To get the air pressure for your area. The app asks for it only after you have turned on local pressure, at most once every 10 minutes, and keeps the readings on your device.
• Where and for how long: Our weather server runs on Vercel, our hosting provider, in the United States. It does not store your location: each answer is cached for a short time (until MET Norway's next update is due, at most about an hour), keyed only by the rounded location, so people nearby share one copy. Like any web host, Vercel processes each request, including your IP address, to deliver it, and keeps standard request logs that include your IP address and the rounded location. On our current plan these logs are available to us for one hour. Vercel also processes traffic data under its own privacy notice. Vercel Privacy Notice
• At MET Norway: MET Norway keeps request logs in its own data centre in Norway. They show our server's address and the rounded coordinates, not your IP address. MET Norway Privacy Policy

Mixpanel — product analytics

• What is sent: Your install ID; device and app information (device model, operating-system version, screen size, app version and build); and these product events, nothing else:
  • app opened
  • onboarding completed
  • first entry saved — sent once per install, with no details of the entry
  • paywall viewed — with the screen it was opened from
  • purchase started and purchase completed — with the plan (annual or lifetime)
  • purchase restored
  • report exported — with the format (PDF or CSV), and no counts or dates
  • local pressure turned on
  • pressure alerts turned on
• The events contain no health information: no entries, intensity, symptoms, triggers, medications, notes, or dates or counts of attacks. Mixpanel receives your IP address when the app connects, but we have turned off IP-based location, so it is not used to work out where you are.
• Why: To understand how the app is used, for example whether setup is clear and which features people open, so we can improve it.
• Where and for how long: Stored in Mixpanel's EU data centre (EU data residency). Kept only as long as we need it to understand and improve the app, then deleted. Mixpanel Privacy Policy
• Your control: Turn off "Share anonymous usage data" in Settings and the app sends no more events. It is on by default, and the same switch also stops crash reports (see below).

Firebase Crashlytics — crash reports

• What is sent: When the app crashes or runs into an error, a crash report: the stack trace (the part of the app's code that failed), when it happened, your device model, operating-system version and app version, and a random identifier that Firebase creates for this installation of the app (a Firebase installation ID). Like any internet request, sending a report reveals your IP address to Google.
• Crash reports contain no diary content, no health information and no location.
• Why: To find and fix crashes and errors, and keep the app stable.
• Where and for how long: Processed by Google, as our processor, on its global infrastructure. Crash reports and the identifiers attached to them are kept for 90 days, after which Google starts deleting them from its live and backup systems. Firebase Privacy and Security
• Your control: Crash reports are sent only while "Share anonymous usage data" is on in Settings. Turn it off and the app sends no crash reports.

RevenueCat — purchases

• What is sent: Your install ID; the product you bought (Annual or Lifetime), its price and currency, your subscription status and dates, and the store's transaction identifiers; basic device and app information; and your IP address when the app connects.
• Why: To verify purchases of Baromind Pro, unlock Pro features, and let you restore them on a new phone or after Erase all data.
• Where and for how long: Processed by RevenueCat in the United States. Purchase records are kept as long as needed for accounting and to restore your purchases. RevenueCat Privacy Policy

Apple App Store and Google Play — payments

Payment for Baromind Pro is handled entirely by Apple or Google under your Apple ID or Google account. We never receive your name, email address or card details. Apple Privacy Policy · Google Privacy Policy

5. What We Don't Do

• No ads, and no advertising identifiers (no IDFA and no Android Advertising ID).
• No tracking across other companies' apps or websites, and no App Tracking Transparency prompt.
• No selling or sharing of your personal data.
• No account: we never ask for your name, email address or phone number.
• No health data to third parties: the app never sends your diary to us or to anyone else. It leaves your phone only when you export it yourself, or as part of your own device backup.
• No diary content, health information or location in crash reports, and no performance-monitoring service.

6. Your Choices and Rights

• Erase all data: Settings → Data → Erase all data deletes everything the app keeps on your device: entries, medications, settings, saved pressure readings and any export files. It also cancels scheduled alerts and replaces your install ID with a new one, so nothing sent afterwards is linked to the old ID. You can restore Baromind Pro afterwards with Restore.
• Analytics and crash reports: Turn off "Share anonymous usage data" in Settings at any time. This stops both analytics events and crash reports.
• Location and notifications: Turn them on or off at any time in your device's settings.
• Uninstalling: Deleting the app deletes its data from your device. Copies in your device backup follow your backup settings.
• Records we hold: Because there is no account, the analytics and purchase records described above are linked only to your install ID. To ask us to access or delete them, email hello@summationworks.com and include your install ID if you have it; without it we may not be able to find analytics records, because we hold nothing else that identifies you. For purchase records, the order number from your Apple or Google receipt can also help us find them. Google starts deleting crash reports automatically after 90 days.
• EEA, UK and Switzerland: You can ask to access, correct or delete your data, and object to or restrict its use. You can also complain to your local data-protection authority.
• California residents: We do not sell or share your personal information.

7. Legal Bases (EEA, UK and Switzerland)

We send your rounded location through our weather server to MET Norway, and handle purchases, to provide the features you choose to use (performance of a contract). We use product analytics and crash reports on the basis of our legitimate interest in understanding the app, improving it and keeping it stable, and you can switch both off at any time. We do not process your health information on any system of ours.

8. International Transfers

Our weather server runs on Vercel in the United States, Google may process crash reports in any country where it has data centres, and RevenueCat processes purchase data in the United States. These transfers are protected by appropriate safeguards, such as Standard Contractual Clauses or the EU-U.S. Data Privacy Framework. MET Norway keeps its logs in Norway, in the European Economic Area, and Mixpanel stores our analytics in the EU. Apple and Google process payments under their own policies.

9. Security

Your diary is protected by your device's own security, such as your passcode and the operating system's storage encryption, so keep your phone locked. Everything the app sends travels over encrypted connections (HTTPS). Because no server of ours holds your diary, there is no copy of it on our side.

10. Children's Privacy

Baromind is not directed at children under 13, or under 16 where that is the age of digital consent, and we do not knowingly collect their data. If you believe a child's data has reached us, contact us and we will delete it.

11. Changes to This Policy

When the app or our practices change, we will update this page and its "Last updated" date.

12. Contact Us

If you have questions about this policy or a request about your data, contact us:

• Email: hello@summationworks.com
• Company: SummationWorks
• Website: summationworks.com