Privacy Policy
Your privacy matters. Here's exactly how we handle your data.
Privacy at a Glance
- ProAct uses analytics only to improve the app.
- Analytics never include your health values. This is true from app version 1.4.8; older versions sent some, as the note below explains.
- ProAct does not sell your data. It shares your trial start and first payment with Meta only if you saw ProAct's explanation and then allowed tracking in Apple's prompt, and never your health data.
| Who | What is shared | Why | Health data? | How long it is kept |
|---|---|---|---|---|
| ProAct servers (database hosted by Supabase) | What you log (attacks, check-ins, routine records), your latest risk estimate, weekly and monthly summaries, device ID, timezone, push token, subscription records, and security logs with your IP address. | To run the app: show your history, build insights, and send notifications. | Yes | Until you delete it or delete your account. Security logs and subscription event records are kept without the link to your device. |
| Anthropic (AI provider) | Summaries of your Apple Health data, attack history, check-in answers, and cycle timing if you opted in. No name, email, or device ID. | To generate your risk outlook and weekly and monthly summaries. | Yes | Kept by Anthropic for a limited period under its API data retention policy. Not used to train its models. |
| PostHog (product analytics) | Which screens and features you use, onboarding steps, subscription events, and the type of notification sent, tied to your device ID. Website page views and clicks. | To improve the app. Never for advertising. | No health values, from app version 1.4.8 (older versions sent some; see the note below). It records the type of notification sent, such as a risk alert or an attack follow-up. | Under our PostHog account settings. Ask us to delete it. |
| Sentry (error tracking) | Error reports and performance data with your device ID. Masked website session replays. Feedback form messages and the email you enter. | To find and fix bugs, and to reply to feedback. | Request bodies, cookies, query strings, and login tokens are removed first. Health fields are removed by name; free-text error messages are checked for login tokens but not for health content. No app screenshots from 1.4.8. | Under our Sentry account settings. Ask us to delete it. |
| RevenueCat (subscriptions) | Purchase and subscription events, your device ID, IP address, and device identifiers (the advertising identifier only if you allow tracking). | To manage your subscription and free trial. | No | By RevenueCat under its policies. Ask us to delete it. |
| Apple Health (on your iPhone) | Your raw Apple Health data stays on your iPhone. Only summaries leave it, when the app builds an outlook. | To build your outlook. | Raw Health data: no. Summaries: yes, via ProAct servers and Anthropic. | Raw data never leaves your iPhone. Summaries are kept as described for ProAct servers and Anthropic. |
| Apple SKAdNetwork (ad measurement) | Apple tells ad networks, without saying who you are, whether an install from an ad led to a first launch, a paywall view, a free trial, or a purchase. Apple sends these signals, not us. | To measure whether our ads work. | No | Handled by Apple under its policies. |
| Meta (ad measurement, only if you allowed tracking after ProAct's explanation) | Only if you saw ProAct's explanation and then allowed tracking in Apple's prompt: when you start a free trial and when you make your first payment, with its price (never renewals), your device's advertising identifier, and your iPhone model and iOS version, sent by ProAct's server with Meta's Limited Data Use mode. If you decline, ProAct sends Meta nothing about you. | To measure which ads work. | No health data and no IP address. | By Meta under its policies. Turn this off anytime in iOS Settings > Privacy & Security > Tracking. ProAct learns of the change the next time you open the app; a trial turning into a paid subscription before then may still be shared once. |
| Apple Push Notification service | Your push token and the notification text. | To deliver notifications you turned on. | Notification text can mention your risk level or attack logging | By Apple under its policies. |
| Vercel (hosting) | Requests between the app or website and our servers pass through it. Website page view counts. | To host our servers and website. | Passes through in transit only | By Vercel under its policies. |
| Upstash (rate limiting) | The IP address of each device registration request. | To limit abuse. | No | Short-lived counters that expire after about 2 hours. |
The Short Version
Raw Health Samples Stay on Your iPhone
The app sends our server summaries of your Apple Health data, such as average heart rate variability and hours of sleep, to build your outlook. We do not store those summaries. We do store what you log and the results we generate from it.
No Account Needed
No email, name, or account required. The app identifies you only by a random device ID.
Your Data, Your Control
Delete single entries at any time. Export or delete all your data from the app. Full deletion happens after a 7-day waiting period.
What Data Do We Collect?
Not storedData Sent to Build Your Outlook and Summaries
When the app asks for a risk outlook, it sends our server the data below. We pass it to our AI provider, Anthropic, to generate the outlook, and we do not save this input in our database.
- From Apple Health (with your permission): summaries of heart rate variability (HRV), resting heart rate, sleep duration, and sleep quality
- Weather data: barometric pressure, pressure changes, temperature, and humidity. Your location stays on your phone.
- Attack context: recent attack counts, days since your last attack, average severity, recent triggers, and your list of known triggers
- Check-in answers: wellness answers you enter, such as sleep quality, stress, and energy
- Cycle timing: the number of days since your last period started, only if you chose to include cycle tracking
For weekly and monthly summaries, our server sends Anthropic counts and averages from your attack logs: number of attacks, attack-free days, average severity, average duration, and your most common triggers.
StoredData You Log
- Migraine attack logs: when attacks occurred, pain intensity, symptoms, medications, triggers, relief methods, and your notes
- Manual wellness entries: sleep quality, stress level, hydration, activity level, and energy level
- Guided routine records: pain before and after a routine, how much of it you completed, and your rating
- Engagement data: when you open the app, complete routines, or log attacks (for streaks and insights)
StoredResults We Generate
- Your latest risk estimate: the risk level, a short explanation, the factors behind it, and suggestions. Each new estimate replaces the previous one.
- Weekly and monthly summaries of your attacks and triggers
- Routine recommendations and how you responded to them
- Notification history: which notifications we sent and when, and the content of an alert waiting to be sent
StoredDevice and Technical Data
- Device ID: a random identifier generated by the app (stored in the iOS Keychain)
- Timezone: for accurate outlook and notification timing
- Push notification token: if you enable notifications
- Subscription status and history: your plan, its dates, and the subscription events RevenueCat sends us. These event records can include the IP address and device identifiers RevenueCat collected.
- Security logs: your IP address and app or browser type, recorded for security events such as device registration, push token changes, failed authentication, and rate limiting, to protect the service from abuse
WebsiteWhen You Visit proactmigraine.com
- Website analytics (PostHog): pages you visit, clicks, and basic browser and device information, stored with a cookie and local storage. You can turn this off on our Your Privacy Choices page, and we turn it off automatically if your browser sends Global Privacy Control.
- Page view counts (Vercel Web Analytics): which pages are visited
- Error tracking and session replay (Sentry): when the site hits an error, Sentry gets an error report. Sentry also records a session replay of 10% of visits and of every visit where an error happens. The replay masks all text and form inputs and blocks images and video, so it shows page layout and clicks, not what you read or type.
- Feedback form: if you use the feedback form on our contact page, we receive your email address, your name if you give it, and your message. The form is run by Sentry. We use your email only to reply to you.
How Do We Use Your Data?
Estimate Migraine Risk
Your health summaries and history feed our AI model to estimate your migraine risk up to 48 hours in advance.
Generate Insights
Your attack logs help identify patterns, triggers, and what relief methods work for you.
Send Notifications
Send your morning outlook (at every risk level), weekly and monthly recaps, attack-free milestones, a check-in on an attack you left open, reminders during your trial or after a quiet spell, and billing notices.
Improve the App
Product analytics help us understand which features people use.
What We Don't Do
- We do not sell your data to anyone, ever
- We only share health data with the providers listed in the Third-Party Services table below, only to run ProAct, and never for their own purposes
- We do not use your health data for advertising or marketing
- We do not require an account, email, name, or other personal information to use the app
About Advertising
We advertise ProAct on Meta (Facebook and Instagram) so people can discover the app. Only if you saw ProAct's explanation and then allowed tracking in Apple's prompt, ProAct's server tells Meta when you start a free trial and when you make your first payment (with its price), using your device's advertising identifier and Meta's Limited Data Use mode. Renewals are never shared. Each event also includes your iPhone model and iOS version, which Meta requires. ProAct never shares your health data with Meta, and these events never include your IP address. If you decline, ProAct sends Meta nothing about you. Apple may still tell Meta, without identifying you, how many installs and subscriptions each ad campaign produced. You can turn this off anytime in iOS Settings > Privacy & Security > Tracking. ProAct learns of the change the next time you open the app. Until then, if your free trial turns into a paid subscription, that one payment may still be shared. ProAct has turned off RevenueCat's own Meta integration, so our subscription provider, RevenueCat, sends nothing to Meta itself. The app has no Meta or Facebook SDK. We measure ad results through Apple's SKAdNetwork, which shares no personal information with ProAct or Meta.
- How SKAdNetwork works: when someone installs ProAct from an ad, Apple later tells the ad network, without saying who it was, whether that install led to a first launch, a paywall view, a free trial, or a purchase. Apple sends these signals, not us, and they contain no device ID, name, or health data.
- The iOS tracking prompt: if you allow tracking, the app gives your device's advertising identifier to RevenueCat, our subscription provider, and if you saw ProAct's explanation first, ProAct's server uses it to tell Meta about your trial start and first payment as described above. If you decline, the advertising identifier is not collected and nothing is sent to Meta.
Third-Party Services
We use carefully selected services to provide ProAct. Here's exactly what each one receives:
How Is Your Data Secured?
Encrypted in Transit
Data between the app, the website, and our servers travels over HTTPS, so it is encrypted in transit.
Three-Layer Authentication
App secret + signed device token + device ID verification on every request.
Per-Device Access
Our server checks your device's signed token on every request and only reads or writes the records that belong to that device.
Rate Limiting
Protection against abuse and excessive requests.
Your Rights & Choices
What You Can Do
- View your data: see your attack logs and health entries in the app
- Delete single items: remove any attack log or health entry at any time
- Turn off app analytics: use the analytics switch in Profile > Privacy & Data
- Turn off push notifications: in iOS Settings
- Export your data: in Profile > Privacy & Data > Export Your Data. You get a ZIP file of spreadsheets (CSV) with your device record, attack logs, wellness entries, custom routines, routine records, achievements, streaks, subscription record, and weekly and monthly summaries. The download link works for 24 hours. The export does not include your latest risk estimate, routine recommendations, notification history, or engagement events; email us for a copy of those.
- Delete all your data: in Profile > Privacy & Data > Delete Account. If you have an active subscription or free trial, including one in a billing retry or paused, you need to cancel your subscription or trial in iOS Settings first; the app will not accept the request until then. After a 7-day waiting period, during which you can cancel the request, we permanently delete everything linked to your device in our database: attack logs, entries, routine records, risk estimates, summaries, notification history, your device record, and export files.
What Deletion Does Not Remove
A deleted account leaves no health data or health summaries behind in our database, anonymized or otherwise. The only records we keep are the security log entries and subscription event records below, with the link to your device removed.
- Security log entries (IP address and app or browser type). We remove your device ID from them, but we do not yet delete them on a schedule.
- The subscription event records RevenueCat sent us. We remove the link to your device, but each record still contains RevenueCat's ID for your device. We store new records without your advertising identifier, vendor identifier, or IP address; older records may still include them.
- Data held by PostHog, Sentry, and RevenueCat. Deleting in the app does not delete it there. Email us if you want us to ask them to delete it.
For California Residents (CCPA/CPRA)
You have the right to know what personal information we collect, request deletion, and opt out of the sale or sharing of personal information. We do not sell your data. If you saw ProAct's explanation and allowed tracking, ProAct's server sends Meta your trial start and first payment, as described under About Advertising, which California law may treat as "sharing". To opt out, decline tracking in Apple's prompt, or turn it off anytime in iOS Settings > Privacy & Security > Tracking. ProAct learns of the change the next time you open the app. Until then, if your free trial turns into a paid subscription, that one payment may still be shared. We share data with no other ad network.
For European Users (GDPR)
You have the right to access, rectify, erase, and port your data. You can also object to processing or withdraw consent. Contact us at support@proactmigraine.com to exercise these rights.
How Long Do We Keep Your Data?
Special Note About Health Data
Your health data is the most sensitive information you share with us. We take extra care:
- Raw Apple Health samples stay on your iPhone: we receive only summaries, use them to generate an outlook, and do not save them. We do save the outlook.
- Error reports are filtered: our server and website remove request bodies, cookies, query strings, and login tokens before anything goes to Sentry. Health fields are removed by name; free-text error messages are checked for login tokens but not for health content. From app version 1.4.8, the app sends no screenshots or screen contents with error reports.
- Analytics carry no health values: from app version 1.4.8, PostHog does not receive your symptoms, triggers, mood, sleep, pain, or severity values, or your answer to the cycle question. PostHog receives no health values from our server either: it records that an estimate was generated, not its risk level or inputs. It does record which type of notification was sent, such as a risk alert or an attack follow-up.
- We do keep a health history: your logs, routine records, and the estimates and summaries generated from them. It is yours to export or delete.
Note about older app versions (added October 10, 2026): older versions of the app (before 1.4.8) sent PostHog some health values, such as symptom and trigger names, mood and sleep ratings, attack severity, and your cycle question answer, and could attach a screenshot of the screen in use when the app reported an error to Sentry. Updating to version 1.4.8 or later stops this.
Your attack logs, guided-routine records, and Apple Health summaries are also "consumer health data" under Washington's My Health My Data Act and similar state laws. For the full breakdown of what we collect, why, who it's shared with, and how to exercise your rights over it, see our standalone Consumer Health Data Privacy Policy.
Children's Privacy
ProAct is for adults 18 and older. We do not knowingly collect data from anyone under 18. If you believe someone under 18 is using ProAct, please contact us at support@proactmigraine.com.
Changes to This Policy
We may update this policy as our service evolves. For material changes, we'll notify you through the app before they take effect. Your continued use after changes means you accept the updated policy.
Contact Us
For privacy questions or data requests:
- Email: support@proactmigraine.com
- Response time: Within 30 days for data requests
Change Log
October 2026
- Updated October 10, 2026: only if you saw ProAct's explanation and then allowed tracking in Apple's prompt, ProAct's server now tells Meta when you start a free trial and when you make your first payment (never renewals), using your device's advertising identifier and Meta's Limited Data Use mode. It never sends your health data or your IP address. If you decline, ProAct sends Meta nothing about you. Apple may still tell Meta, without identifying you, how many installs and subscriptions each ad campaign produced. This replaces the earlier change below.
- We stopped sending data to Meta from our servers. Ads are measured only through Apple's SKAdNetwork.
- From app version 1.4.8, analytics no longer include your health values such as symptoms, triggers, mood, sleep, pain, severity, or your cycle answer.
- Error reports sent to Sentry now have request bodies, cookies, query strings, and login tokens removed. Health fields are removed by name; free-text error messages are checked for login tokens but not for health content. From app version 1.4.8, the app sends no screenshots with error reports.
- From app version 1.4.8, the app asks your permission before it sends data to our AI provider.
- We turned off longer-term logging in Upstash, our rate-limiting service. It now keeps your IP address only in counters that expire after about 2 hours.
- We corrected this policy to describe what we store, how deletion and export work, and which services receive data.