Privacy policy

Last updated 2026-11-06

Headache Log & Migraine Diary is operated by TLM Software Design, Inc. (Michigan, USA). This policy explains what the app and this website collect, why, and what choices you have. We kept it short on purpose.

The short version

• Your diary (attacks, intensity, medications, symptoms, triggers, notes and the profile you enter) is stored only on your device. We never receive it.
• No account or registration is needed. The app works offline.
• Only three things leave the app: anonymous usage events (Firebase Analytics), crash reports (Firebase Crashlytics) and the record of your purchase (RevenueCat). None of them contains diary content.
• This website uses Google Analytics only after you accept the cookie banner.
• We do not sell data, show ads or use advertising trackers.

Your diary

Everything you record is saved in a local database on your device. There is no cloud sync and no server-side copy. Exporting a CSV or PDF, available with the unlock, creates a file on your device; what you do with it is up to you.

Your device's own backup (for example iCloud or the Android backup) may include the app's data so that a new phone can restore it. That backup is handled by Apple or Google under their terms, not by us.

Analytics and crash reports

The app uses Firebase Analytics and Firebase Crashlytics (Google LLC) to count which parts of the app are used and to receive crash reports (a stack trace plus basic device information such as OS version and model). Events are tied to a random install identifier.

Events never contain diary content, and we deliberately do not send events whose timing would reveal it, such as when an attack starts or ends, when a medication is taken or which days were pain-free.

Purchases

The $4.99 unlock is processed by Apple or Google. RevenueCat records the purchase against an anonymous app user ID so that we can unlock the features and restore them. We do not receive your payment details. Refunds are handled by Apple or Google under their policies.

This website

This website uses Google Analytics 4 (GA4) to measure aggregate visits: pages viewed, sessions and referral source. GA4 is activated only after you click "Accept" in the cookie banner. If you click "Decline", no analytics script is loaded and no cookies are set. You can withdraw consent at any time by clearing this site's localStorage (key: ga_consent) and reloading the page.

apps.swtlm.com is one website: this page and every app page on it share a single analytics property and a single consent choice. This policy covers Headache Log & Migraine Diary and its pages only; every other app has its own policy.

When analytics are active, GA4 may set cookies named _ga and _ga_*. No marketing or advertising cookies or tracking pixels are used.

Who we share with

• Google (Firebase Analytics, Crashlytics) - anonymous usage events and crash reports from the app.
• Google Analytics 4 - aggregate website visits, only with your consent.
• Apple App Store and Google Play - billing for the one-time unlock.
• RevenueCat - records the unlock against an anonymous user ID.
• A web-hosting provider - serves this website.

None of these providers receives your diary.

How long we keep things

• Diary: on your device until you delete entries, use "Delete all data" in Settings, or uninstall the app.
• Analytics and crash events: up to 14 months, per Google's defaults.
• Purchase record: at RevenueCat until you ask us to delete it. Uninstalling the app does not remove it.

Your rights and choices

Because the diary never leaves your device, you delete it by deleting entries, using "Delete all data" in Settings, or uninstalling the app.

If you live in the EU, the UK, California or another region with comparable privacy laws, you may ask us to access, correct, port or delete the personal data we hold, and to object to or restrict its processing. Write to privacy@swtlm.com.

Children

Headache Log & Migraine Diary is not directed to children under 13 (under 16 in the EU) and we do not knowingly collect their data. If you believe a child is using the app, contact us.

International transfers

Our analytics, crash and purchase providers (Google and RevenueCat) operate servers in the United States, where anonymous events and purchase records are processed. Your diary is not transferred, because it never leaves your device.

Changes

We post material changes here and update the date above. If a change widens what we collect, the app will show a notice on its next launch.

Contact

Privacy questions, requests or complaints: privacy@swtlm.com