Last updated: 9 October 2026
Emycra has no server and makes no network requests of any kind. Everything you record stays in your iPhone's memory, in the app's private folder, in a local database protected by iOS encryption. We do not collect your name as a way of identifying you, nor your email address, your location, your contacts or any gender data. We use no analytics tools, show no advertising and share nothing with third parties.
Emycra does not read weather or barometric pressure: you enter your triggers yourself, by hand. It takes no data from other apps and writes none elsewhere: what the diary contains is what you typed. This page explains how all of this works in detail, because transparency about health data is not optional.
The data controller is Simone D'Agostino, Calle Ollerías 20, 29012 Málaga, Spain, reachable at dagostino.simone@icloud.com.
For the data the app saves on your device, the controller has no actual access: there is no technical channel through which it could be read, because the app transmits nothing. This policy still describes that data, because you have the right to know what the app you are using does.
All of it is entered by you and stays in the device's memory, in the app's local database:
| Data | Why | Required |
|---|---|---|
| Name (optional) | Only to personalise the greeting on the home screen and the header of the report | No |
| Attacks: start, duration, intensity from 0 to 10, pain location, aura, symptoms | The heart of the diary: this is what you describe to your doctor | Yes, when you log an attack |
| Acute medication and the doses taken during an attack | A record of what you took, when, and whether it helped | No |
| Preventive therapy: medication, dose, frequency and each intake | The reminder on the device and the adherence calculation | No |
| Triggers and control days | Correlation between triggers and attacks: without the days free of attacks there would be nothing to compare against | No |
| Free notes | Whatever you want to remember about an attack or a day | No |
| PRO purchase status | Only to know whether the three PRO features are unlocked on this device: the app reads it from StoreKit and sends it nowhere | No |
We never collect your gender, your ethnicity, your beliefs, your contacts, your location, your advertising identifier or your email address. The name field is optional and exists only so the app can say "Good morning, Marco" instead of "Good morning".
On your device, in two places, both inside the phone:
The operating system encrypts this data while the device is locked.
There is no backup on our systems, because we have no systems. If you enable iCloud backup on your device, that backup follows whatever rules you chose for iCloud: it is an Apple feature, not an app feature.
Emycra asks for two permissions only, both optional and both revocable at any time from iOS Settings, without losing the data you have already entered:
| Permission | If you allow it | If you deny it |
|---|---|---|
| Notifications | The preventive-therapy reminder is scheduled on the device and alerts you at the time you choose | No reminder: you check the app whenever you want. The diary works just the same |
| Face ID | The app locks when you leave it and asks you to unlock it when you come back | The app stays accessible to anyone holding your unlocked phone |
Emycra does not ask for any other permissions: no access to your photo library, your contacts, the microphone, your location or the camera. The Face ID permission only keeps the app locked: the image of your face stays in the iOS Secure Enclave, the app has no access to it and receives nothing but a yes or a no.
The app makes no network requests of any kind: it contacts no server, downloads no data updates, does not read weather and does not read barometric pressure. It contains no third-party SDKs, uses no tracking identifiers and has no analytics system. Even the notifications are local: they are scheduled by the phone, they do not come from a remote notification service.
Emycra is free to download and the diary is complete and free: unlimited attacks, medication, therapies, triggers and JSON/CSV export, with nothing that expires. Anyone who wants to can buy Emycra PRO once — a single non-consumable product, com.dagostinosimone.emycra.pro — which unlocks the PDF report, the statistics and the Face ID app lock. Purchases are handled entirely by Apple through the App Store. We do not receive or store your payment data: card details, billing address and buyer identity stay between you and Apple.
The app receives from StoreKit only the confirmation that the purchase has been made. That information lives on the device and is used to decide which features to show you. No purchase data is sent to us: we have no server that could receive it.
To exercise your rights over purchase data (refunds, invoices, history), the reference is Apple: reportaproblem.apple.com for refund requests.
We transfer data to no one, for no purpose, in no country: the data simply does not leave the device.
There is one exception, and you trigger it explicitly: when you use Export, the app creates a JSON or CSV file — or, with PRO, a PDF report — and opens the system share sheet. From that moment the destination is your choice — sharing, saving to Files, printing — and the app keeps no record of it. No file is ever sent on its own.
As long as you decide. Your data stays on the device until you delete it from the app's settings ("Delete all data") or uninstall the app. When you uninstall, iOS removes the app's private folder and everything in it.
The app keeps no copies on a server, so there is nothing on our side to delete.
The European General Data Protection Regulation (GDPR) gives you the right to access your data, to correct it, to erase it, to restrict its processing, to object and to receive it in a portable form. Because the app keeps everything on your device, you exercise those rights directly inside the app:
If you believe the processing does not comply with the law, you can contact the supervisory authority in your country (in Italy, the Garante per la protezione dei dati personali).
The app is not intended for people under 16 and does not knowingly collect data from minors. If you use it for a minor, responsibility for consent lies with the person who holds parental responsibility.
The data you enter concerns your health and belongs to the category of special-category data, which the GDPR protects with stricter rules. The legal basis for processing is your explicit consent, given when you accept this policy and when you grant each individual permission. You can withdraw it at any time by deleting your data or uninstalling the app.
Emycra is not a medical device: it does not diagnose, it does not interpret your symptoms and it does not suggest which medication to take or in what dose. The counts it shows — number of attacks, migraine-free days, average duration, adherence to the preventive therapy, correlation between triggers and attacks — are elaborations of the data you typed yourself, meant to help you talk about it more effectively with your doctor. They are not clinical measurements and they contain no validated clinical scores.
Your data is protected by device encryption and, if you turn it on, by the Face ID lock when the app opens. Because nothing is transmitted, nothing can be intercepted. We still recommend protecting your phone with a passcode: it is the first line of defence for your health data.
If we change anything substantial, we will say so inside the app and update the date at the top of this page. We will never reduce the protections described here without asking for your explicit consent again.
For any question about this policy or about how your data is handled: dagostino.simone@icloud.com.