Privacy Policy

Last updated: August 8, 2026

Cura ("we", "our", or "the app") is committed to protecting your privacy. This policy explains what data we collect, why, and how it is stored.

Data We Collect

Data collected and purpose

Data	Purpose	Required
Email address	Account authentication and cloud sync	Required (via Google or Apple Sign-In)
Attack logs	Tracking migraine episodes (start/end time, intensity, symptoms, medications, notes)	Core feature
Location	Auto-capture environmental context for trigger correlation	Optional (permission-based)
Voice recordings	Voice memos attached to attack logs for hands-free note-taking during migraines	Optional (only when you record)
Weather data	Barometric pressure, temperature, humidity linked to attacks for pattern detection	Automatic when location is granted

How We Use Your Data

To provide migraine tracking, history, and pattern insights to you
To sync your data across devices when you sign in
To send weather-based trigger alerts (if enabled)
To generate personal correlation reports

We do not sell, rent, or share your personal data with any third parties.

We do not use your data for advertising. We do not build advertising profiles. Your health data is yours alone.

Data Storage and Security

Data is stored locally on your device using encrypted storage (MMKV)
Cloud backups are stored in Firebase / Google Cloud Platform infrastructure
Data is transmitted over HTTPS (TLS encryption in transit)
Firestore security rules ensure users can only access their own data
Voice recordings are stored locally on your device and in your encrypted cloud backup (if sync is enabled). Speech-to-text transcription uses your device's built-in speech recognition (Apple Speech framework) and is processed on-device — audio is not sent to external servers
We do not store data on any third-party analytics or tracking services

Third-Party Services

Service	Purpose	Data shared
Firebase Authentication	User login	Email (if provided)
Cloud Firestore	Data sync/backup	Attack logs (encrypted in transit and at rest)
WeatherAPI.com (via Firebase Cloud Function)	Weather data	Approximate location coordinates (processed server-side, not sent directly from device)
RevenueCat	Subscription management	Anonymous user ID, purchase status
Sentry	Crash reporting	Anonymous error data (no health data)

Data Retention

Your data is retained as long as your account is active
You can delete all your data at any time from Settings within the app
If you delete your account, all associated cloud data is permanently removed within 30 days
Local data is deleted immediately when you clear data or uninstall the app

Your Rights

You have the right to:

Access your data (available via the app's export feature)
Delete your data (Settings → Clear History)
Opt out of location tracking (revoke permission in device settings)

Children's Privacy

This app is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us data, please contact us and we will delete it.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the app after changes constitutes acceptance.

Contact

If you have questions about this privacy policy or your data, contact us at:

cura.migraine@gmail.com