Privacy Policy

This policy applies to the Luma Migraine Tracker iOS app (the “App”), provided by Digital Sprout (“we”, “us”, or “our”). Migraine and medication details are health information and can be sensitive. The App is designed so we do not receive that information during ordinary use.

The information you choose to record is saved in an on-device database within the App. Depending on what you enter, this may include:

• Migraine dates, start and end times, duration, intensity, symptoms, aura information, possible triggers, and relief factors.
• Medications or other treatments you choose to log, and notes about their timing or perceived effect.
• Free-text notes and manually entered context, such as sleep, food, stress, menstrual cycle, place, or weather observations.
• App preferences, reminder settings, and the history needed to create your charts and reports.

The App does not require a Digital Sprout account and does not sync this database to a Digital Sprout server. It does not request your device’s precise or approximate location, contacts, photos, camera, microphone, or Apple Health data in version 1. If you type location or other context into a note, it is treated like the rest of that locally stored entry.

Your iPhone’s own backup settings may allow Apple to include app data in a device backup. That is an Apple device-backup service, not a Luma cloud sync feature, and is governed by Apple’s settings and privacy terms.

We do not receive your migraine log in normal use. The following limited information may be processed to run subscriptions, provide support, and maintain the App:

If you email support, we receive the email address, message, and any file you choose to attach. Please avoid including health details unless they are genuinely needed to answer your request. We use support messages to respond, investigate the issue, protect the service, and keep an appropriate record of the conversation.

We do not sell personal information, use it for targeted advertising, or share it for cross-context behavioural advertising. RevenueCat purchase metrics are used only for App functionality and subscription analytics; they are not linked to your on-device migraine log.

The App can generate a report from your entries on your device. Nothing is uploaded merely because you create a report. It leaves the App only when you choose a destination using the iOS share sheet, such as Mail, Messages, Files, a healthcare provider’s system, or another app.

A report may reveal sensitive health information. Check the recipient and destination before sending it. Once shared, the recipient and the service you selected handle the copy under their own privacy and security practices; Digital Sprout cannot control or delete it for you.

If you enable reminders, iOS asks for permission and schedules them on your device. We do not operate a push-notification server, receive a push token, or receive a record of when you respond. You can change or revoke permission at any time in the App or in iOS Settings.

Luma Pro is offered as an optional monthly or annual auto-renewing subscription. Apple processes the payment and RevenueCat helps the App determine whether Pro access is active. These providers may process information in countries other than yours and use safeguards described in their own policies and agreements.

We process subscription information because it is necessary to provide the paid service you request, prevent fraud, and meet legal and accounting obligations. Support information is processed to respond to you and for our legitimate interests in operating and securing the App. Where consent is required, you may withdraw it for future processing.

You can view and edit entries directly in the App. You can delete entries using the controls provided and remove the App to delete its local database from the device. We cannot retrieve or erase a migraine history we never receive. Copies in an Apple device backup or in a report you shared must be managed through Apple or the chosen recipient.

Depending on where you live and subject to legal exceptions, you may have rights over personal information we or our processors hold, including access, correction, deletion, portability, restriction, objection, or withdrawal of consent. UK and EEA residents may also complain to the UK Information Commissioner’s Office or their local data protection authority. Contact us to make a request; we may need limited information to verify it.

California residents may, where the California Consumer Privacy Act applies, request to know, access, correct, or delete personal information and receive equal service for exercising those rights. They may also opt out of sale or sharing and limit certain uses of sensitive personal information. We do not sell or share personal information for cross-context behavioural advertising and do not use sensitive personal information for purposes that require a “Limit” link, so those opt-outs are not currently necessary for Luma. An authorised agent may submit a request on your behalf, subject to verification.

Privacy laws differ by location and may not apply to every request. We will explain our response and any available appeal or complaint route.

On-device entries remain until you delete them, clear the App’s data, or remove the App. We retain support correspondence only for as long as reasonably needed to answer the request, maintain appropriate business records, resolve disputes, and meet legal obligations. Apple and RevenueCat retain information according to their own policies and our arrangements with them.

Local data benefits from iOS app sandboxing and your device’s security controls. Use a device passcode, keep iOS current, and take care with exported reports. No storage method is completely secure, and we cannot protect an unlocked device or a report after you share it.

Luma is not directed to children under 13, and they should not use the App. If you are under the age at which you can agree to data processing or contracts where you live, a parent or legal guardian must review and accept the applicable terms and supervise your use. We do not knowingly collect personal information from children through the App. A parent or guardian who believes a child sent us information can contact us.

We may update this policy to reflect App, provider, or legal changes. The current version will remain at this URL with a revised effective date. We will provide additional notice in the App when a change is material and it is reasonably practical to do so.

Questions, privacy requests, or concerns can be sent to: