Privacy Policy

Effective: July 10, 2026

1. Who we are

Migora ("the app", "we", "us") is developed and distributed by TheKnack. Questions or concerns: migora.support@theknack.dev.

2. What stays on your device

Migora stores your content locally on your iPhone or iPad using Apple's SwiftData. We do not upload, mirror, or read this content. The data on your device includes:

• Your migraine attacks — start and end times, pain severity over time, pain locations, aura, symptoms, and relief actions
• Your medications and the times you recorded taking them
• Your triggers and tags
• Your daily check-ins — sleep, stress, hydration, cycle phase, mood, and meals
• Your MIDAS assessment answers
• Your pressure history — barometric readings and forecasts, with a coarse (approximate) location used to fetch local weather
• Your notes and preferences — reminder settings and display options

All of this belongs to you. We, TheKnack, never receive it, because there is no Migora server and nothing is sent to us.

3. Your health data — how it is handled

The information you record in Migora about your migraines, symptoms, medications, and related conditions is health data, and we treat it with particular care.

• Your health data is stored only on your device. It never reaches a TheKnack server.
• Your health data is never sold and never shared with any third party — not for advertising, not for marketing, not for any purpose.
• Your health data is never sent to our analytics. The anonymous usage events described in Section 6 contain no severity, no symptoms, no aura, no medications, no MIDAS scores, no coordinates, no pressure values, and no dates — only that an action happened (for example, "an attack was logged").
• Migora uses your health data only to show it back to you and to compute your personal patterns on-device — for example, overlaying your recorded attacks against your recorded pressure, or summarizing frequency and medication-use days for a report you choose to generate.
• You can edit or delete any entry inside the app at any time, and you can remove all of it at once (see Section 12).

4. Apple Health (HealthKit)

This version of Migora does not connect to Apple Health (HealthKit). It does not read from or write to Apple Health, and it declares no HealthKit permissions. Everything you track lives inside Migora, entered by you. If Apple Health integration is added in a future version, it will be optional, will ask for your explicit permission in context, and this policy will be updated first.

5. Where your data lives (on your device)

Migora stores your data only on the device where you created it. It does not sync to a Migora account or to any TheKnack server — there is no server, and no account. If you use Apple's standard device backup (iCloud Backup or an encrypted computer backup), a copy of Migora's data may be included in that backup, which is created, encrypted, and managed by Apple under Apple's Privacy Policy; TheKnack has no access to it. To move your log to another device, you can restore that device from your backup or use Migora's free CSV export.

6. What we collect (nothing)

Migora collects no analytics or usage data of any kind. The app contains no third-party analytics or tracking SDKs — there is no TelemetryDeck, no advertising SDK, and no usage-measurement service of any sort. We do not record which screens you view, when you open the app, whether you saw the paywall, or that you logged an attack. Nothing about how you use Migora is sent anywhere.

Because we collect nothing, there is no profile of you, and we do not track you across other apps or websites (our privacy manifest sets tracking to false, with no tracking domains, no advertising identifier, and no App Tracking Transparency prompt). Migora's App Store privacy label is Data Not Collected.

We do not collect crash logs or performance traces.

7. Weather and location

To show you local barometric pressure and a short pressure forecast, Migora uses Apple's WeatherKit. When you use pressure features, an approximate (coarse) location is sent to Apple to retrieve weather for your area. This request is handled by Apple under Apple's privacy policy; it is not sent to any TheKnack server. Migora stores a coarse location on your device only, alongside its pressure readings, so it can refresh your local forecast — it is never sold or shared. You can control location access in iPhone Settings → Privacy & Security → Location Services → Migora. Weather data is provided by Apple Weather.

8. Notifications

Migora can send gentle reminders — a daily check-in nudge, a post-attack follow-up, or (with Pro) a pressure-change alert. These are scheduled locally on your device via Apple's notification system; no push server is involved, and the details never leave your device. You choose whether to enable them, and you can change or disable reminders anytime in iPhone Settings → Migora → Notifications, or inside Migora.

9. App Store purchases

If you purchase Migora Pro (monthly or yearly subscription, or the lifetime unlock), Apple processes the transaction. We receive a receipt from Apple that confirms your entitlement status; we do not receive your payment information. Apple's privacy policy governs payment data: apple.com/legal/privacy.

10. What we do not do

• We do not require an account, sign-up, or login with us.
• We do not track you across apps or websites.
• We do not sell, rent, or share your data — and we never sell or share your health data with anyone, for any purpose.
• We do not use advertising identifiers, and we never show ads.
• We do not show the App Tracking Transparency prompt — there is nothing to track.
• We do not collect any analytics or usage data — there is nothing to put your health data into.
• We do not integrate any third-party analytics or tracking SDKs.
• We do not receive, store, or read your migraine log on any server.

11. Children

Migora is a general-audience app and is not directed to children under 13. We do not knowingly collect personal data from anyone, including children, and we do not direct any data collection or advertising at children. In line with COPPA and similar laws, if you believe a child has provided information in a way that concerns you, contact us and we will help.

12. Data retention and deletion

Because your content lives on your device, you control it directly:

• Access: open the app — everything is there.
• Edit or delete content: change or remove any attack, medication, check-in, trigger, or assessment inside the app.
• Delete everything at once: use Settings → Delete All Data inside Migora to erase your on-device log. Deleting the app also removes its local data.
• Backups: copies of your data may persist inside any device or iCloud backups you keep, managed by Apple, until those backups are deleted or rotate out.

We retain no server-side copy of your content, because we never receive it.

13. Your rights (GDPR / CCPA and other regions)

Because we hold no personal data about you on any server, most data-subject requests resolve on your device:

• Your health and personal content lives with you; you can access, correct, export (CSV), or erase it directly in the app at any time.
• We collect no analytics or usage data, so there is no diagnostic profile of you held anywhere.
• We do not "sell" or "share" personal information as those terms are defined under the CCPA/CPRA. There is no "Do Not Sell or Share" action needed, because there is nothing to sell or share, and we never process sensitive health information for those purposes.

EU/EEA and UK residents retain all rights under the GDPR/UK GDPR, including access, rectification, erasure, restriction, portability, and the right to lodge a complaint with a supervisory authority. California residents retain all rights under the CCPA/CPRA, including with respect to sensitive personal information.

14. Changes to this policy

If we ever change how Migora handles data, this page will update with a new effective date. Substantive changes will also be surfaced in-app on your next launch.

15. Governing law

This policy and the operation of Migora are governed by the laws of the Republic of Turkey. Where European Union consumer and data-protection law (including the GDPR) provides stronger rights, those rights apply to EU residents.