Privacy Policy
What we collect, what we do with it, and what you can make us do about it. Your diary entries are health information and we treat them that way.
On this page
What we collect
You give us: your name, email address, mobile number, and the entries you make in your diary — which include health information about your headaches, symptoms, medications and sleep.
We collect automatically: basic technical data needed to serve the site — IP address, browser and device type, pages viewed, and the time of the request.
We do not buy personal information about you from data brokers.
How we use it
To run the diary and produce your summaries; to send the messages you asked for; to answer you when you contact us; to keep the service secure; and, only if you opt in, to compare your pattern against the criteria of recruiting studies.
We do not use your health entries for advertising, and we do not profile you for anyone else's marketing.
Who we share it with
We do not sell or rent your personal information, and we do not share your mobile number or your SMS consent with third parties for their own marketing.
We share data only with service providers who process it on our behalf under contract (hosting, email and SMS delivery, error monitoring); with a research site or sponsor when you ask us to introduce you to a study, and then only the details needed for that introduction; and where the law requires it.
Health information
Your diary entries are health information and we treat them as sensitive. MigraSens is generally not a HIPAA covered entity — we are not a healthcare provider, health plan or clearinghouse — so your entries here are protected by this policy and by applicable state law rather than by HIPAA. Data you give directly to a research site is governed by that study's consent form and its own obligations, which may include HIPAA.
Your choices and rights
You can export everything in a readable format at any time, correct anything that is wrong, turn research matching off, unsubscribe from email, reply STOP to text messages, and delete your account. Deletion removes your entries from our production systems; backups age out on a rolling 30-day cycle.
Depending on where you live you may have additional rights — to know, to access, to correct, to delete, to limit the use of sensitive information, and not to be discriminated against for exercising them. Ask us and we will honour them.
How long we keep it
Diary entries: until you delete them or close your account. Account records: for the life of the account plus 30 days. Contact messages: two years. Records we must keep for legal or accounting reasons: as long as the law requires.
Security
Data is encrypted in transit and at rest, access is limited to staff who need it, and we log administrative access. No system is perfectly secure; if a breach affects you we will tell you promptly and say what we know.
Children
MigraSens is not for anyone under 18. We do not knowingly collect information from children. If you believe a child has given us data, write to us and we will delete it.
Changes to this policy
We will post any change here with a new date, and we will tell you directly before a material change takes effect.
Contact
The data controller is Prospect Digital LLC, registered in Wyoming, trading as MigraSens Health. Privacy questions or a rights request: [email protected], or Prospect Digital LLC, 1621 Central Ave, #68675, Cheyenne, WY 82001. We answer within 30 days.