Privacy policy
Last updated 7 October 2026
This policy explains what the Looma: Migraine Tracker app and loomamigraine.com collect, why, and what you can do about it. Some of what you log is health data, so we explain it plainly.
Who is responsible
Viktor Cvetanovic, [legal entity name and address in Serbia, to be added]. Contact:[email protected].
What the app stores
- A random ID created on your device, and an anonymous sign-in with Google Firebase. You don't need an email or password.
- The name you type in, if you give one.
- Your migraine logs: when an attack started and ended, intensity, type, where it hurt, symptoms, possible triggers, medicines and doses and how well they helped, other things you tried, how it affected your day, and notes.
- Daily check-ins, your medicines list, doctor appointments and medication reminder times.
- If you turn on weather: the air pressure, temperature and humidity where you were when you logged an attack, and daily air pressure readings, so the app can tell how fast pressure changed. Your approximate location (rounded to about a kilometre) stays on your iPhone and is sent to MET Norway to look up the weather. It isn't saved to our database.
- If you turn on Back up with Apple: a link between your Looma data and your Apple ID, including the email address Apple shares with us, so you can restore your logs on a new iPhone.
If you connect Apple Health, Looma reads your sleep and menstrual cycle data on your iPhone to show links with your attacks. This data isn't saved to our database, and it's hidden from session recordings.
Health data and your consent
Your migraine logs are health data, a special category of personal data under the GDPR and UK GDPR. We process it only with your explicit consent, to provide the diary, insights and reports you ask for. [How consent is given in the app, to be confirmed.] You can withdraw consent at any time by deleting your account.
Who processes your data
- Google Firebase stores your logs and runs the anonymous sign-in, and Firebase Analytics counts how the app is used.
- PostHog records app usage events and, in recent versions, session recordings: what was on screen as you used the app. Text you type, images and Apple Health data are hidden in recordings, but other screens, such as your history or insights, can appear in them.
- RevenueCat and Apple handle Premium subscriptions. We never see your payment details.
- MET Norway receives your approximate location when weather is turned on.
[Transfers outside the EEA and the UK, and the safeguards used, to be confirmed.]
How long we keep it
Your logs are kept until you delete your account. [Retention for analytics and recordings, to be confirmed.]
How to delete it
In the app, go to Profile, Delete account. This deletes your logs, appointments and reminders and the anonymous account. Deleting the app alone doesn't delete your data. You can also email[email protected].
Your rights
You can ask to access, correct, delete or take a copy of your data, and object to how it's used. Email[email protected]. You can also complain to a data protection regulator, such as the ICO in the UK or the authority where you live.
This website
loomamigraine.com sets no cookies and has no forms. The headache diary is a PDF you fill in on paper, so the site never receives your health data. The site runs behind Cloudflare, which processes your IP address to deliver pages.
Children
Looma isn't for children under 16.
Changes
We'll update this page and its date when this policy changes, and tell you in the app if a change matters to you.