Consumer Health Data Privacy Policy

This policy applies to consumer health data within the meaning of the Washington My Health My Data Act (RCW 19.373) and Nevada law (NRS 603A.400 to 603A.550). It is provided by Philipp Epple, Palmenwaldstraße 58, 73733 Esslingen, Germany (the “provider”), for the HeadAIche app and the website headaiche.app. Contact: contact@headaiche.app.

1. Consumer health data collected and purposes

On the device. The app records and analyzes the following on the user’s device: headache days and episodes (start, end, intensity, location, type), daily information (for example sleep, tension, activity, hydration, caffeine, alcohol, skipped meals), medications and their intake, period starts and other cycle information, answers given during setup, values read from Apple Health (sleep, state of mind, period start, workouts, steps, water intake, caffeine) and the analyses the app calculates from them. Purpose: the personal record and analysis requested by the user, including the export and the PDF report. This data stays on the device; it reaches the provider only when the user sends feedback.

Feedback, only when sent by the user: title, text and up to four images, which may contain health information, together with the app version, iOS version, device type and language and region setting. Purpose: handling the feedback and improving the app.

“Send data” is not offered in the App Store in the United States.

Consumer health data is processed by the app on the device and, for feedback, by the provider on servers of its hosting provider and in its email mailbox.

2. Sources

Information entered by the user in the app; Apple Health, read-only and only with the user’s permission; analyses derived by the app on the device.

3. Consumer health data shared and categories of third parties

Consumer health data is not shared with third parties or affiliates and not sold. It is not used for advertising.

Feedback is processed on the provider’s behalf by service providers: a hosting provider and an email provider.

4. Rights

Consumers have the right to confirm whether the provider collects or shares their consumer health data and to access it, including a list of the third parties with which it was shared and a way to contact them; to withdraw consent; and to have their consumer health data deleted. Deletion includes the provider’s service providers and third parties.

How to exercise them. In the app: the data on the device can be viewed, exported, and deleted by withdrawing consent or resetting the app. Otherwise, by email to contact@headaiche.app. For feedback, its title or the approximate time is needed to find it. No account is required.

The provider responds within 45 days, extendable once by 45 days with notice, and deletes within 30 days of identifying the data. Requests are free of charge at least twice a year.

Appeal. If the provider declines a request, an appeal can be made by replying to the decision with the word “Appeal”. The provider decides in writing within 45 days. If the appeal is denied, the decision states how to contact the attorney general of the consumer’s state.

Review and correction. Entries are reviewed and corrected in the app.

5. Tracking, changes, effective date

No third party collects consumer health data over time and across different websites or online services through the app or the website.

Material changes take effect only with a new version of this page; where consent is required, the app asks for it again before the change applies.

Effective date: October 15, 2026.