Privacy policy

Last updated November 10, 2026

This policy explains what happens to your information when you use our migraine app for iPhone. The app is made by Brighter Being Wellness LLC ("we", "us"). Our online store has its own policy, the store privacy policy.

Your migraine log is health information, and some US states have laws just for health data. Our Consumer Health Data Privacy Policy describes that data and your rights over it. We follow it for everyone who uses the app, wherever you live. You can also open both policies in the app under Me, then Privacy.

1. Your migraine log stays on your iPhone

Everything you record in the app is stored only on your iPhone. That includes:

your attacks: when they started and ended, how bad the pain was and how it changed, where it hurt, and how it affected your day
your symptoms, and what you noted before an attack (possible triggers)
the medicines you took, with doses and times, and whether they helped
your routine reminders and the days you tapped "Took it"
your check-in answers and your notes
your answers to the setup questions, whether your migraines follow your period and any period days on your calendar, and the name you put on your doctor report

We never receive any of this. The app uses it on your phone to show you your calendar, counts, patterns, streak, check-ins and doctor report, and to time your reminders. Reminders are scheduled on your iPhone and don't go through our server. On your Lock Screen a reminder says only "Daily reminder", unless you choose to show more in Me.

Your log leaves your phone only when you choose to send it:

Download my data makes a spreadsheet file (CSV) of your log.
Save a copy of my log makes a file you keep in the Files app, so you can use Restore from a copy later, for example on a new iPhone. It holds your whole log, so keep it somewhere private, the way you would any health record.
The doctor report is a PDF made on your phone. You choose where it goes with the iPhone share sheet.

When you send one of these files somewhere, such as an email, a message or iCloud Drive, that service handles it under its own policy.

The app doesn't send your log to iCloud or to our server, and we can't see your iPhone's backups. Your log is protected by your iPhone's passcode and encryption. Delete my data in Me erases the log from your iPhone. Deleting the app erases it too, unless you saved a copy.

2. If you create an account

Everything free in the app works without an account. You might create one to keep Plus on a new iPhone, to get Plus with your Mighty or Everbright subscription, or to share the days you took Mighty (section 5).

You can sign in with Apple, or with your email and a 6-digit code. The sign-in screen says what we keep, and by continuing you agree to it. Our app server is used only by the app. It keeps:

your email address, or the private relay address Apple gives us if you chose Hide My Email
your Apple user id, if you signed in with Apple. Apple makes this id for you and our apps only.
when you created your account and when you last signed in
for each iPhone you're signed in on, the routine details a sign-in carries: when it was last used, the IP address and the kind of device
your subscription details, if you told us you have a Mighty or Everbright subscription (section 3)
the dates you tapped "Took it" for Mighty, only while you have sharing switched on (section 5)

We use these to sign you in, to keep Plus on a new iPhone, to keep the service secure, and to clear out accounts nobody uses. Our server doesn't keep your name and never holds your migraine log. Our hosting provider also keeps routine logs of sign-ins and requests, such as the time and IP address, for 7 days.

Signing out doesn't delete your account. To delete it, use Delete my account in Me (section 11). If you don't open the app while signed in for 2 years, we delete your account and everything our server holds about it.

3. Your Mighty or Everbright subscription

Mighty and Everbright are our supplement subscriptions. If you have an active one, Plus is included.

We check for a subscription only if you tell us you have one. You do that by answering Yes to "Do you take Mighty?" when you set up the app, or by choosing the subscription option when you sign in. The sign-in screen tells you when we'll check. If you don't tell us, we never look your email up.

Then our server asks Loop Subscriptions, the company that runs our subscriptions, whether your confirmed email has a Mighty or Everbright subscription. Loop answers with each subscription's status (active, paused and since when, or nothing found), when it started, and which product it's for. Our server keeps the status, the pause date, when it last checked and the date until which Plus is on. It passes the start date to the app on your iPhone and doesn't keep it. We read nothing else, such as what you ordered or your address, and we never change anything in your subscription.

If you signed in with Hide My Email, or your subscription uses another email, the app asks for your subscription email. We send a 6-digit code there to confirm it's yours, then keep that email with your account. We only ever look up an email that has been confirmed with a code or by Apple.

To keep Plus up to date, our server checks again when you open the app (at most once a day), at night (at least once a week), and when Loop lets us know that a subscription was paused, cancelled or restarted. From each of Loop's notices our server reads only the email, to find a linked account. It keeps a short record that the notice arrived, with no names or order details, for 30 days.

Plus stays on while your subscription is active, or paused for less than 60 days. One subscription gives Plus to one account at a time, so linking it to a new account moves Plus there. Deleting your app account doesn't cancel or change your subscription.

4. Plus and purchases

You can also buy Plus in the app through Apple. Apple takes the payment, and we never see your card details. You don't need an account to buy Plus.

RevenueCat, the company that manages Plus purchases for us, receives a random user id and the purchase records Apple gives it, such as your plan, your trial, and renewal and cancellation dates. When Plus comes with your Mighty or Everbright subscription, our server tells RevenueCat that this random id has Plus until a certain date. RevenueCat never receives your email or anything from your log.

You manage or cancel an Apple subscription in your iPhone's Settings. Deleting your account doesn't cancel it.

5. Sharing your Mighty days

Sharing your Mighty days is a switch in Me. It's off unless you turn it on, and it needs an account. Before it turns on, a screen tells you what we get, who gets it, why, and how to stop.

When it's on, the app sends our server the dates you tap "Took it" for your Mighty reminder, starting from the day you turn it on. Nothing else goes with them: no times, no other routines or medicines, nothing from your log.

We use these dates only to count, in totals, whether people who use the app keep taking Mighty. They never go to marketing.

When you turn the switch off, or sign out, the app stops sending and we delete the dates it already sent.

6. Emails from us

When you sign in with your email, or confirm your subscription email, an email delivery company called Resend sends you the code for us. It receives your email address and the email we send you, which says only that it's your code for the app.

If we ever need to write to you about your account, we use the email on your account.

7. How we measure the app

We look only at totals, from three places:

Apple's App Store statistics: how many people downloaded the app and from which App Store link, and how many opened it again in the days after installing. That last number comes only from people who chose to share their iPhone's analytics with app developers. Apple gives us totals that don't identify you.
RevenueCat's purchase dashboard: trials, Plus purchases and cancellations.
Our server: from people who turned on sharing their Mighty days, how many keep taking Mighty.

If you installed the app after seeing one of our ads, Apple may tell the ad network that the ad led to an install. Apple's own system sends that report, with a delay and without anything that identifies you or your iPhone. The app contains no ad network code and sends ad networks nothing.

8. Our promises

We never sell your data, and we don't use it for targeted advertising.
The app has no analytics or advertising code and doesn't use your iPhone's advertising identifier. It doesn't track you across other companies' apps and websites.
Nothing from the app goes to Meta, Google or any ad network, and we don't build ad audiences from people who use the app.
Nothing from the app is added to our marketing emails, to our store's customer records, or to the other systems we use to run our store. If you already get emails from us as a customer, those continue under the store privacy policy, and you can unsubscribe at any time.
Your data is never used to train AI models.
The app doesn't use your location.

9. Who handles data for us

A few companies help us run the app. Each one may use the data only to do this work for us, under a contract with us.

Company	What it does for us	What it receives
Supabase	Hosts our app server and sign-in	Your account data from section 2, your subscription details from section 3, and your Mighty days if you turned that on
Loop Subscriptions	Runs our subscriptions	Your confirmed email, only if you told us you have a subscription. It answers with the status, pause date, start date and product
RevenueCat	Manages Plus purchases	A random user id, your Apple purchase records, and the date Plus ends when it comes with your subscription
Resend	Sends sign-in and confirmation codes	Your email address and the email with your code
Commslayer	Holds the emails you send to our support address	What you write to us
Anthropic	Helps us draft replies to your emails. A person on our team reads and sends every reply	What you write to us

Apple runs the App Store, Sign in with Apple and in-app payments under its own privacy policy. Apple gives us the sign-in details in section 2, your purchase records (through RevenueCat) and the App Store totals in section 7. We don't send Apple your log.

10. How long we keep it

Your log: on your iPhone, until you delete it or delete the app.
Your account and subscription details: until you delete your account, or until you haven't opened the app while signed in for 2 years.
Your Mighty days: until you turn the switch off, sign out or delete your account.
A 6-digit code for a subscription email: our server keeps a scrambled copy until you use it, and for a day at most.
Loop's notices: the short record of each one, 30 days.
Logs of sign-ins and requests: 7 days.
The code emails we sent you: Resend keeps a copy of each one, with your email address, for 30 days. After you delete your account, those copies are gone within 30 days.
Backups of our server: our hosting provider keeps a daily backup for 7 days. Data you delete leaves the backups within those 7 days.
Emails you send us: in our support inbox, until you ask us to delete them.

11. Your choices and rights

In the app, under Me:

Download my data exports your log, and Delete my data erases it from your iPhone.
The Mighty days switch turns sharing your Mighty days on or off.
Delete my account deletes your account and everything in sections 2 and 3 from our server, right away. It also deletes your record at RevenueCat and what Resend can delete for your email address, and if you signed in with Apple, it ends the app's Sign in with Apple connection. This is also how you withdraw your consent to the account. Logs, backups and sent code emails expire within the times in section 10.

By email, at hello@joinmelina.com, you can ask whether we hold data about you, get a copy, ask us to correct or delete it, or withdraw your consent. Wherever you live, we handle your request the way our Consumer Health Data Privacy Policy describes: we answer within 45 days, and you can appeal if we say no. If we turn down your appeal, you can contact the attorney general of your state, for example in Washington at atg.wa.gov/file-complaint or in Connecticut at portal.ct.gov/ag. Using these rights never changes how we treat you.

12. Security

The app reaches our server only over encrypted connections, and each account can read only its own records. On our team, only the people who need it to run the app can reach the server's data. Your log on your iPhone is protected by your iPhone's own encryption. If anything ever affects your data, we'll email you at the email on your account.

13. Links to our store

The Mighty button in Me and a few other buttons open our online store inside the app. The store is covered by the store privacy policy, including its cookies and the ad and analytics tools it uses. The link carries nothing that says it came from the app, and nothing from your log or your account goes with it.

14. Children

The app is for adults 18 and over. We don't knowingly collect data from anyone under 18. If you think a child has created an account, write to us and we'll delete it.

15. Changes to this policy

When we change how the app uses your data, we'll update this page and the date at the top. If a change means collecting a new kind of health data, or using it for a new purpose, we'll ask you in the app first.

16. Contact us

Brighter Being Wellness LLC
1321 Upland Dr. PMB 19548, Houston, TX 77043
hello@joinmelina.com