Privacy Policy
postdrome is built around a simple promise: we don't want your health data, and we go out of our way not to have it. This policy explains exactly what happens to information when you use the app.
Quick summary
- Your symptom logs, medications, voice memos, and personal notes stay on your device (and, if you opt in to Pro, sync via your own iCloud — Apple's CloudKit, not us).
- We never receive your health data. Our backend stores only a anonymous user ID, your Pro purchase status, and an optional email if you check the "send me product updates" box.
- Voice memos are transcribed on-device only. Your audio never leaves your phone.
- We don't sell anything to advertisers, brokers, pharma, or anyone else. We don't show ads. We don't run any analytics inside the app.
- If you delete the app or your iCloud, your data is gone.
What we collect (the entire list)
When you sign in (which the app prompts after about a week of use, or when you export, import, or upgrade to Pro), we receive these fields from Sign in with Apple:
- An anonymous user ID issued by Apple. We can't reverse-engineer it back to your real Apple ID.
- Your email address, OR Apple's hide-my-email relay address — you choose.
- Optionally, your display name if you share it.
If you purchase Pro, we also store a flag indicating that purchase. That's it.
What we never collect
We do not collect, transmit, or store any of the following:
- Symptom intensity, frequency, timing, or any field you log in the app.
- Medications you record.
- Voice memos or their transcripts.
- Apple Health data (we only read it on-device).
- Imported data from Migraine Buddy, Bearable, or any other source.
- Location data beyond what's needed for the National Weather Service forecast call (used in the moment, never stored).
- Device identifiers, IP addresses for tracking, or behavioral analytics inside the app.
Where your health data lives
All symptom-tracking data lives in the app's local SwiftData store on your device. If you upgrade to Pro and enable cross-device sync, the data syncs through your own iCloud account using Apple's CloudKit private database — meaning Apple itself can't read it either, and we never see it. You own and control this data the same way you own and control your Notes app data.
Apple Health
If you grant the app access to Apple Health, we read symptom records (Headache, Dizziness, Nausea, etc.) and write back the few you log directly in postdrome (Headache, Dizziness, Nausea). All reads and writes happen on your device using Apple's HealthKit framework. We do not transmit any of this data anywhere.
Location (barometric forecast)
If you enable the barometric forecast feature, the app asks Apple for your approximate location (kilometer-level, "when in use"), uses it to call the National Weather Service API, and discards it. The NWS API receives your latitude and longitude with a User-Agent identifying postdrome. We do not store the location, log the request, or share it with any third party. Disable in iOS Settings → postdrome anytime.
Voice memos
When you record a voice memo in Aura Mode, the audio is saved as an .m4a file in the app's local Documents directory. Speech transcription runs entirely on-device using Apple's SFSpeechRecognizer with the on-device-only flag explicitly required. If on-device speech is unavailable on your device, the feature simply fails — we will never fall back to server-side recognition for health data.
Sentry crash reports
For crash reporting, we use Sentry. When the app crashes, Sentry sends Apple-provided crash info (stack trace, device model, iOS version, anonymous installation ID) to Sentry's servers. No symptom logs, medication records, voice memos, or personal notes are ever included in crash reports. Disable by deleting the app or filing a support request.
Anonymous landing-page analytics (this website only)
This marketing website (postdrome.app) uses PostHog to count visits and understand which pages get read. Only this website — never the app. Standard cookie + anonymous-ID analytics.
Children
postdrome is not intended for children under 13, and we do not knowingly collect any data from children.
Changes to this policy
If we ever change this policy in a way that affects what we collect, we'll update the "Last updated" date and email anyone who opted in to product updates. We will not change the core promise: your health data stays in your iCloud, never on our servers.
Contact
SailQuery LLC, Maryland, USA.
Privacy questions: support@sailquery.com.