This site uses cookies. By continuing to browse the site you are agreeing to our policy on the use of cookies. Find out more here.

Privacy Policy

Effective date: March 13, 2019

Curelator, Inc. (“Curelator”, “the Company”, “we“, “us“, or “our“) operates the website (“Site”) and the N1-Headache application (together hereinafter referred to as the “Service“).

This page informs you of our policies regarding the collection, use, protection, and disclosure of personal data when you use our Service and the choices you have associated with that data.

Unless otherwise defined in this Policy, the terms used in this Privacy Policy have the same meanings as in our Terms and Conditions.

We collect several different types of information for various purposes to provide and improve our Service to you. We may employ service providers, including third party companies and individuals, to facilitate our Service, provide the Service on our behalf, perform Service-related services or assist us in analyzing how our Service is used. The service providers may contact you on our behalf, including, but not limited to, using surveys, market research, and e-bulletins. These service providers have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

We do not share, sell or distribute User Personal Data except to provide Curelator services to Users as set forth herein.

We may collect various types of information, including Personal Data, as part of your use of our Service. We use this data to provide the features of our Service and to improve and customize our Service.

The types of information we may collect, process and/or maintain are set forth below.

While using our Service, we may ask you to provide us with certain Personal Data, as defined above. We may also obtain information, including Personal Data, from third parties and sources other than Curelator services, such as our partners and advertisers. If we combine or associate information from other sources with Personal Data that we collect through our Services, we will treat the combined information as Personal Data in accordance with this Policy.

We may also collect Usage Data, as defined above, whenever you visit our Service or when you access the Service by or through a mobile device.

We may also collect, use and store Location Data, as defined above, if you give us permission to do so. You can enable or disable location services when you use our Service at any time by way of your device settings.

You can read our full Cookies Policy to find out how we use Cookies to track the activity on our Service.

We will not collect or store your payment card details. Any such information that is necessary for the use of our Service is provided directly to our third-party payment processors whose use of your Personal Data is governed by their Privacy Policies. These payment processors adhere to the standards set by the Payment Card Industry Data Security Standard (“PCI-DSS”) as managed by the PCI Security Standards Council (, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information.

We use the information we collect in a variety of ways in providing our Services and operating our business, including:

We use Anonymized Information to provide selected research groups and individual researchers with daily diary, profile, medication, and demographic data with the goal of improving the knowledge of the disease, influencing factors, impact, and effectiveness of potential and existing therapies. The results of these research projects may be presented in relevant publications, journals, and meetings.

We may keep Anonymized Information related to you for the purpose of medical research. This information will be kept in such a way that it will be impossible to re-identify it. We may also keep records for legal and administrative requirements.

With your express consent, we may share Personal Data, including health and lifestyle information, with your treating clinician and/or healthcare provider to improve their understanding of your health situation and allow them to make better decisions about your treatment options, risks, and effectiveness. Your Personal Data is shared using compliant means, is password protected and is encrypted during transit.

We may retain communications with Users of the Service for reasons including:

You may opt-out of receiving any, or all, promotional communications from us by following the unsubscribe link or the instructions provided in any email we send.

We use Anonymized and aggregated information to analyze the usage trends of the Service, to improve the Service offering, and to develop new features, products, and services.

We use Cookies and comparable tracking technologies to:

We use Google Analytics to measure access to and traffic on our Service, and we create usage reports for our Service managers. Google may use the information collected through Google Analytics to evaluate activity and usage on our Service. For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page. We make sure the data sent to Google Analytics is protected and Anonymized and is used solely for the purpose of administering the Service, understanding usage trends, Users and Visitors preferences and resolving technical issues.

We use Facebook Pixel tracking technology to measure and optimize conversion and create custom audience for our advertisement campaigns. We may also share email addresses with Facebook to improve the effectiveness of our ads and sponsored content targeting, as necessary for operation and provision of the Service. Visit Facebook’s Privacy Policy for more information.

We use Fabric to track performance, stability, and usage of mobile applications. Fabric complies with the Google Privacy Policy.

The payment processors we work with are:

We will take all steps reasonably necessary to ensure that Personal Data is treated securely and in accordance with this Policy. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorized access. When possible, encryption is used, both in transit and storage.

All third parties that process Personal Data on our behalf are required to keep that data secure.

Curelator will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes and enforce our legal agreements and policies.

Curelator will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security of or to improve the functionality of our Service, or we are legally obligated to retain this data for longer periods.

Your information, including Personal Data, may be transferred to and maintained on computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

Curelator will take all the steps reasonably necessary to ensure that your Personal Data is treated securely and in accordance with this Privacy Policy, and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.

We employ third-party service providers to help us with the development, maintenance, hosting, backup and other services required to operate the Service. Some of these third parties may have access to or process a minimal set of Personal Data necessary to perform their function. Our contracts with service providers require them to preserve the confidentiality of Personal Data that is shared with them.

Curelator may also, at a User’s request or with a User’s express consent, share their Personal Data, including medical and behavioral information, with the User's physician, clinician, other healthcare provider or any other individual or entity that the User instructs Curelator to so inform.

Although Curelator will never share any User Personal Data, except for the purposes set forth in this Policy, Curelator may, from time to time, disclose Anonymized Information or aggregate information relating to particular diseases or disorders, behaviors or modifications as part of our research and to researchers doing work for or on behalf of Curelator, sponsors, or other business partners. Any such disclosure to such third parties is bound by the privacy protections set forth herein.

Curelator will disclose User Personal Data outside the scope of these provisions only as required to do so by law or compelled by court or government or administrative agency of competent jurisdiction. Personal Data from Users may be subject to Federal and local laws that require Curelator to disclose this data in certain circumstances.

Curelator reserves the right to transfer our user databases together with any Personal Data contained in them, to any third-party acquiring our assets after notice and the opportunity for a User to request that Personal Data not be transferred. Should Curelator or our assets ever be sold, acquired, merged, liquidated, reorganized, or otherwise transferred, we will place a prominent notice on the homepage of the N1-Headache website.

We do not knowingly collect Personal Data from anyone under the age of 18 without consent from a parent or guardian. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we will take reasonable steps to remove that Personal Data from our servers in a timely manner.

Our Service is not designed for, or intentionally targeted at, children under 13 years of age. It is not our policy to intentionally collect or maintain Personal Data about anyone under the age of 13.

The Service Users retain ownership of their Personal Data.

In certain circumstances, you have the following data protection rights:

You can modify some of your Personal Data through the use of our Service at any time. If you are unable to perform these actions yourself, please contact us to assist you at

When processing is based on your explicit consent, you can withdraw this consent at any time, by either closing your account or writing an email to This may affect the features offered by the Service.

If you wish to be informed about what Personal Data we hold about you, or if you want it to be removed from our systems, please contact us. Please note that we may ask you to verify your identity before responding to such requests.

We retain the information we collect about and from you only for as long as necessary to fulfill a business purpose or comply with legal and administrative requirements. If your account becomes inactive, we will keep your Personal Data for a period of 7 years after which you will be notified one month prior to deletion of your account and Personal Data.

You can also opt-out of our commercial communications and email surveys by following the instructions given at the bottom of such communication, or by writing an email to

You have the right to contact a Data Protection Authority if you have a concern about your privacy rights or our collection or use of your Personal Data. Nonetheless, Curelator shall not have liability for disclosure of any User Personal Data obtained or disclosed due to errors in transmission or the unauthorized acts of third parties. Users are hereby reminded that transmission of information via the Internet or over mobile networks is not completely secure. Despite our best efforts, no matter how extensive, Curelator cannot and does not guarantee the security of User data transmitted to and from Curelator or over mobile networks; any transmission is at User's own risk.

California's Shine the Light law provides California residents with the right to receive disclosures about any sharing of their personal information with other companies during the preceding calendar year.

If you are a California resident and you provided your Personal Data to Curelator, then, once each calendar year, you may submit a written request for information about the information we shared, if any, with other companies for their use in direct marketing. To submit your written request, please send a written request to:

Curelator, Inc.
210 Broadway, Floor 201
Cambridge, MA 02139

with “Request for California Privacy“ in the letter subject line. You must include sufficient detail for us to locate your file; at a minimum, your name and postal address or ZIP Code.

Upon receiving your request, we will send you a list of the categories of Personal Data disclosed to third parties for third-party direct marketing purposes during the immediately preceding calendar year, along with the names and addresses of these third parties.

We reserve our right not to respond to requests sent more than once in a calendar year, or requests submitted to an address other than the one posted in this notice. Please note that the California Shine the Light law does not cover all information sharing. Our disclosure only includes information covered by the law.

Curelator does not track its Users over time and across third party websites to provide targeted advertising and therefore does not respond to Do Not Track (“DNT”) signals.

We may modify or amend this Privacy Policy at any time. Any modification or amendment to this Privacy Policy will be applied to Personal Data immediately. We encourage you to review this Privacy Policy regularly to stay informed about how we are processing and protecting Personal Data.

If you have any questions, comments, concerns or complaints about this Policy, please contact us by email at or by a written request to:

Data Protection Officer
Curelator, Inc.
210 Broadway, Floor 201
Cambridge, MA 02139