Consumer Health Data Privacy Policy

Last updated November 10, 2026

Brighter Being Wellness LLC ("we", "us") makes a migraine log app for iPhone. This policy covers the consumer health data connected to the app, in the form Washington's My Health My Data Act (RCW 19.373) asks for. We follow it for everyone who uses the app, wherever you live.

"Consumer health data" is the law's term for information that is linked to you and says something about your health. Your migraine log is consumer health data. We also treat your app account as consumer health data, because it shows that you use a migraine app, and your subscription details, because Mighty and Everbright are supplements and Mighty is made for people with migraine.

Our privacy policy covers the rest of how the app handles information.

1. What we collect, why, and how we use it

Your migraine log, kept only on your iPhone

What it includes: your attacks (when they started and ended, the pain and how it changed, where it hurt, and how it affected your day), symptoms, possible triggers, the medicines you took with doses and times and whether they helped, your routine reminders and the days you tapped "Took it", check-in answers, notes, your answers to the setup questions, whether your migraines follow your period and any period days on your calendar, and the name you put on your doctor report.

Where it's kept: in the app on your iPhone. We never receive it.

Why, and how it's used: the app uses it on your phone to show you your log, calendar, monthly counts, patterns, streak, check-ins and doctor report, and to time your reminders. It's the migraine log you asked the app to keep.

Your account, on our server, only if you create one

What it includes: your email address, or the private relay address Apple gives us if you chose Hide My Email; your Apple user id, if you sign in with Apple; when you created your account and last signed in; for each iPhone you're signed in on, when the app last used that sign-in and the IP address and kind of device it came from; and routine logs of sign-ins and requests, such as the time and IP address.

Why, and how it's used: to sign you in and keep Plus on a new iPhone, to keep the service secure, and to clear out accounts nobody has used for 2 years.

Your consent: the sign-in screen says what we keep, and you agree to it by continuing.

Your subscription details, on our server, only if you tell us you have a subscription

What it includes: the subscription email you confirmed, if it's different from your account email; whether it has an active or paused Mighty or Everbright subscription, with the pause date; when we last checked; and the date until which Plus is on. Loop Subscriptions, the company that runs our subscriptions, also tells us when the subscription started. We pass that date to the app on your iPhone and don't keep it.

Why, and how it's used: to include Plus with your subscription, and to keep that up to date.

Your consent: we check only after you tell us you have a subscription, by answering Yes to "Do you take Mighty?" or by choosing the subscription option when you sign in. The sign-in screen says that we'll check, and you agree to it by continuing.

Your Mighty days, on our server, only if you turn them on

What it includes: the dates you tapped "Took it" for your Mighty reminder, from the day you turn sharing on. No times, no other routines or medicines.

Why, and how it's used: to count, in totals, whether people who use the app keep taking Mighty.

Your consent: we collect these dates only after you turn on the Mighty days switch in Me and agree on the screen that follows. It's off unless you turn it on.

Messages you send us

What it includes: if you email hello@joinmelina.com about the app, including through "Report a problem", we receive your email address, what you write, and, from "Report a problem", your app version, iPhone model and iOS version.

Why, and how it's used: to answer you.

2. Where it comes from

• You: what you enter in the app, the email you sign in with, the subscription email you confirm, and the messages you send us.
• Apple: when you sign in with Apple, your email or private relay address and your Apple user id. Your Plus purchase records also come from Apple, through RevenueCat.
• Loop Subscriptions: your subscription's status, pause date, start date and product, only if you told us you have a subscription.
• RevenueCat, the company that manages Plus purchases for us: whether you have Plus through an Apple purchase.
• Your iPhone: the technical details that come with each request to our server, such as the IP address and the kind of device.

3. Who we share it with

• Consumer health data we share: none.
• Third parties we share it with: none.
• Affiliates we share it with: none. An affiliate is a company that shares our branding and is under common ownership or control with us.
• Sale: we don't sell consumer health data.

A few companies process data for us, under a contract that lets them use it only to do this work for us. The law calls them processors and doesn't count giving them data as sharing. They are Supabase (our app server and sign-in), Loop Subscriptions (our subscriptions), RevenueCat (Plus purchases), Resend (code emails), Commslayer (our support inbox) and Anthropic (helps us draft replies to your emails). Our privacy policy lists what each one receives.

When you export your log, save a copy of it, or send your doctor report, you choose where it goes. We don't receive it.

4. Your rights

• Confirm and see your data. You can ask whether we collect, share or sell consumer health data about you, and get a copy of it. The copy comes with a list of every third party and affiliate we have shared or sold it to, with an email address or online way to contact each one. Today that list is empty. We'll also tell you which processors hold your data and how to reach them.
• Withdraw your consent. Turn off the Mighty days switch in Me: the app stops sending right away and we delete the dates it already sent. Delete my account in Me withdraws your consent to the account and to the subscription check. You can also email us to withdraw consent to anything we collect about you.
• Delete your data. In the app, Delete my account in Me deletes your account and everything our server holds about you, and Delete my data erases the log on your iPhone. Only you can erase the log, because we never receive it. You can also ask us by email. When we delete your data, we delete it from all of our systems, including backups, and we tell every company that has it, including our processors, to delete it too. Copies in our server's automatic backups are gone within 7 days, and always within six months of when we confirm your request. Deleting your app account doesn't cancel your Mighty or Everbright subscription or an Apple subscription.
• Correct your data. You can ask us by email to fix anything we hold about you that's wrong. You can change your subscription email yourself in Me, under Membership.

5. How to make a request

• Email hello@joinmelina.com with the subject "Health data request", and tell us which right you want to use. If you have an account, write from your account email, or tell us what it is.
• We'll confirm the request comes from you, for example by sending a code to your account email. If we need more to confirm it's you, we'll ask only for what we need. You don't need an account to make a request. If you have one, we may ask you to use it.
• Someone you authorize can make a request for you. We'll ask for proof that you authorized them, and we may still confirm with you.
• We answer as soon as we can, and within 45 days of receiving your request. If we need more time because your requests are complex or many, we may extend that once, by up to 45 more days. If we do, we'll tell you why within the first 45 days.
• Requests are free up to twice a year. If requests are clearly unfounded, excessive or repetitive, we may charge a reasonable fee to cover our costs, or decline, and we'll tell you why.

6. How to appeal

If we say no to your request, you can appeal. Reply to our decision, or email hello@joinmelina.com with the subject "Health data appeal". Within 45 days of receiving your appeal, we'll tell you in writing what we did or didn't do, and why.

If we deny your appeal, you can file a complaint with the Washington State Attorney General online at atg.wa.gov/file-complaint.

7. Changes to this policy

Before we collect a new kind of consumer health data, or use it for a purpose this policy doesn't describe, we'll update this policy and ask for your consent in the app first. The date at the top shows when this policy last changed.

8. Contact us

Brighter Being Wellness LLC
1321 Upland Dr. PMB 19548, Houston, TX 77043
hello@joinmelina.com