Privacy policy | Migraine Evidence Log

What we collect

Migraine Evidence Log is designed to minimize data collection. We collect only what is necessary to provide the service:

Your email address (used for authentication).
The migraine entries, work impact entries, and documents you choose to enter or upload.
Optional profile preferences such as display name, branch of service, default employer, and timezone.
Standard server logs (IP address and request metadata) for security and reliability. These are not used for advertising.

We do not request your Social Security number, VA file number, or government-issued identifiers.

Why we collect it

We use the information you provide to render the application: showing your own entries back to you, generating reports for your use, and authenticating you to your account. We do not sell your data and we do not use it to train AI models.

Sensitive health information

The migraine and work impact entries you log can constitute sensitive health information. We treat this data accordingly and limit access to it through row-level security: only your authenticated session can read or write rows that belong to you.

Migraine Evidence Log is not a HIPAA-covered entity. If you require HIPAA-grade handling, use a tool offered through your provider.

How it is stored

Application data is stored in a managed PostgreSQL database provided by Supabase. Uploaded files are stored in Supabase Storage. All connections are encrypted in transit (TLS), and Supabase encrypts data at rest. Storage paths are scoped to your user ID and access is enforced by row-level security on the database and storage object policies.

Exporting your data

You can export your migraine entries and work impacts as CSV at any time from the Settings page or the Reports page. You can generate a PDF report covering any custom date range.

Deleting your data

You can delete all of your logged data, or your entire account, from the Settings page. Deletion permanently removes the rows from the database and the uploaded files from storage. Backups are retained for a limited period as part of routine disaster-recovery operations.

Cookies

We set a small number of first-party cookies required to keep you signed in (your Supabase session). We do not use third-party advertising or analytics cookies.

Children

Migraine Evidence Log is not directed to children under 13 and we do not knowingly collect data from anyone under 13.

Changes to this policy

We may update this policy from time to time. Material changes will be highlighted on this page with an updated revision date.

Contact

For privacy questions or data requests, contact the team operating your deployment of this application.