Version 2.1. Effective 6 October 2026. Replaces the version of 29 September 2026.
In short
Your diary stays on your device. The app has no server, no account, no analytics, no advertising, no tracking and no third-party libraries. We, the developer, receive nothing from the app.
Three things are off by default and each is switched on by you:
- writing to Apple Health: finished attacks as headache entries, plus nausea;
- reading from Apple Health: the days of your period and your sleep, each behind its own switch;
- weather recording: when you start an attack, your approximate location is sent to Apple WeatherKit to look up the barometric pressure.
Anything else leaves the device only when you send it yourself: a PDF or CSV file you share, or an email you write to support.
Who is responsible
The data controller is Danila Ermolenko, Av. Joaquim Maria Batista 94, 1-I, 2380-098 Alcanena, Portugal, email support@kephale.app.
We act as controller only for the little that can reach us or that the app sends on its own (the weather request and the emails you send to support, both described below). We never receive your diary.
What the app stores on your device
Only what you enter yourself, or what the app records at your request:
- attacks: start and end, pain intensity and how it changed, symptoms, aura, early signs, where and how it hurt, what you did for relief, and your notes;
- medications: your list (name, dose, unit, class, reminder schedule) and every dose you record, with its time, amount, effect, side effects and whether a second dose was needed;
- triggers and reliefs, including the ones you added yourself;
- days: triggers you marked for a day, your stress level and how much water you drank, all typed in by you;
- rescue plan: its steps and, if you fill them in, your doctor's name, specialty and phone number;
- profile: name, emoji and photo. The photo is chosen through the system photo picker, so the app sees only the one picture you pick and has no access to the rest of your library;
- weather at the start of an attack, if weather recording is on (the location itself is not saved);
- settings: interface and report language, theme, reminders and the state of each switch.
Everything is kept in the app's private storage on your device and in a storage area shared only with the app's own widgets, so that the Home Screen widget and the Lock Screen Live Activity can show whether an attack is running. It is protected by the encryption built into your device.
There is no cloud sync. The app does not copy your diary to iCloud or anywhere else. If you back up your device (iCloud Backup or a computer), iOS includes the app's data in that backup, as it does for every app; this is controlled by your backup settings and by Apple.
Apple Watch, widgets, reminders and Shortcuts
- Apple Watch. The iPhone sends your paired watch only what the watch app needs to work: whether an attack is running and when it started, the name of your last medication, and the interface language. The watch sends back your commands: start or end an attack, record a dose. This goes directly between your own devices through Apple's WatchConnectivity, never through us.
- Widgets and Live Activity show the state of the current attack and the diary on your Home Screen and Lock Screen. Their contents are marked as sensitive, so iOS can hide them while the device is locked.
- Reminders are local notifications scheduled on the device. Their text may appear on the Lock Screen according to your notification settings.
- Shortcuts and Siri actions (start or end an attack, record a dose) run on the device.
Apple Health
Writing and reading are separate and are switched on separately in the app's Settings, under Apple Health. iOS asks for your permission for each type.
What the app writes
Only with the Health switch on, and only two types: headache (a finished attack with its start, end and intensity) and nausea, when you record it. They are marked as entered by you. Nothing else is written.
Turning the switch off stops new entries. Entries already written stay in Health until you delete them (see "Deleting your data").
What the app reads
Two types, each behind its own switch and each off by default:
- menstrual flow ("Take the cycle into account"), to see whether attacks cluster around your period;
- sleep analysis ("Take sleep into account"), to compare the nights before days with and without an attack.
Nothing else is read: not water, not medications, not heart rate, not any other Health data.
What is read is used on the device to calculate the figures in the summary and the reports. The app does not copy it into the diary, does not keep it, does not send it anywhere, does not use it for advertising and never puts it in iCloud. It leaves the device only inside a PDF report you create and share yourself (see "Export and sharing").
Weather and location
This is the only feature that goes online. It is off by default; you turn it on in Settings, under Weather, with "Record the weather".
When you turn it on, iOS asks for permission to use your location while the app is in use. The app asks for approximate location by default, because for barometric pressure a street and a city are the same.
With it on, when you start an attack in the app, the app determines your approximate location once and sends it to Apple WeatherKit. It saves with the attack the barometric pressure, its change over the past 24 hours, the temperature, the humidity and the current conditions.
- The lookup happens only when an attack is started: never in the background, never continuously.
- Your location is not saved in the diary and is not sent to us. Apple processes the request under Apple's privacy policy.
- If the weather cannot be obtained (no network, no permission, service not available), the attack is saved without it.
- The legal basis is your consent, given by the switch and the iOS permission. You can withdraw it at any time: turn the switch off or change location access in iOS Settings. Weather already saved stays with the attacks until you delete them.
Purchases
Subscriptions and purchases are handled by Apple through the App Store. The app never sees your card details, name or address: it only learns whether an active purchase exists. Refunds, cancellations and renewals are handled by Apple.
Export and sharing
Files are created on your device and only when you ask:
- PDF report for your doctor (Export PDF). Before exporting you choose what goes in. The report can include summaries of your attacks, medications, triggers and sleep. Your personal notes and your menstrual cycle are included only if you turn them on. The report's header shows the name and photo from your profile, so your doctor can tell whose report it is; you can turn them off with the “Name and surname” switch before exporting, and the report then has an empty line for the name. Your profile emoji is never included.
- CSV tables (Settings, Export to CSV): attacks, doses and days, including your notes.
- A copy of the database, offered only if the diary cannot be opened, so that you can save your records before doing anything else.
Where a file goes next is up to you: you choose the recipient in the system share sheet. The app never sends files by itself, and they never reach us. The PDF and CSV files are temporary and are removed from the app's storage once you close the preview or the share sheet.
Contacting support
"Write to support" in Settings opens your own mail app with a message addressed to support@kephale.app and the app version in the subject. Nothing is sent until you send it.
If you write to us, we receive your email address and whatever you choose to write. We use it only to answer you and to fix the problem you report (legal basis: handling your request and our legitimate interest in supporting the app). We keep the conversation only as long as needed for that, and delete it on request. Our mailbox is hosted by our email provider (Google Workspace), which may process messages outside your country under the safeguards required by law, such as the EU Standard Contractual Clauses. Please do not send health details unless they are needed to solve the problem.
Crash reports and ratings
If you turned on "Share With App Developers" in iOS settings, Apple may give us anonymous crash reports and usage statistics. This is controlled by you in iOS and handled by Apple; the app itself sends nothing. The app may show Apple's standard rating prompt; your rating goes to Apple.
What the app does not do
- no analytics or behavioural tracking;
- no advertising and no advertising identifier;
- no sharing or selling of data;
- no account and no sign-up;
- no cloud sync;
- no network requests other than the weather lookup described above.
Deleting your data
- Delete individual records inside the app. Deleting an attack also removes its entry from Health, as long as the app is still allowed to write there.
- Settings → Delete all data erases attacks with their weather, doses, medications, marked days, your own triggers and reliefs, the rescue plan with your doctor's details, and your profile name, emoji and photo. It also removes the entries the app wrote to Apple Health, as long as the app is still allowed to write to Health. If you have taken that permission away, iOS does not let the app delete them; delete them in the Health app. Your settings (language, theme, reminders, switches) remain until you delete the app.
- Deleting the app removes everything it stored on the device. It does not remove entries in Health, files you exported, or earlier device backups.
Your rights
Your diary never reaches us, so you exercise your rights over it directly in the app: view and correct your records, export them (CSV), and delete them. We hold no copy and cannot produce, change or delete it on request.
For the data we may hold (your emails to support), and under the GDPR and similar laws, you have the right to access, correct and delete it, to restrict or object to its processing, to data portability, and to withdraw consent at any time without affecting earlier processing. Write to support@kephale.app; we reply within one month. You also have the right to lodge a complaint with the data protection authority in the country where you live or work.
Children
The app is not directed at children. It collects no personal data from anyone, children included.
Changes
If the app starts handling data differently, we will update this policy, change its version and date above, and describe material changes in the app.
Contact
Danila Ermolenko, Av. Joaquim Maria Batista 94, 1-I, 2380-098 Alcanena, Portugal support@kephale.app