Local records and optional accounts
Core pain and symptom entries are saved on your device without an account. Cloud journal sync is disabled in the current version. The app does not separately encrypt the journal database; protection also depends on your device security and backups.
Creating an account sends credentials over HTTPS. The server stores a password hash or a verified provider identity. Profile details are optional and require a separate agreement before upload. The API is hosted by Tencent Cloud in Seoul, South Korea. See the privacy policy for processors and retention.
Exports and recovery have different jobs
A visit summary is a selected text account for a conversation. CSV helps you inspect pain entries in a spreadsheet. JSON exports pain records, symptoms and settings. Export is not automatic cloud backup, and the current app does not provide a JSON restore workflow.
A recovery code helps reset a password account; it does not restore your local diary. Keep it securely outside the app. A password reset replaces the code and invalidates existing sessions. We cannot retrieve a lost code.
Deleting an account does not delete every copy
Settings → Delete account removes the online account, profile, server records and push registrations after identity confirmation. Local diary entries remain available without login. To remove them, use the separate clear-data action.
Previously exported or shared copies remain where you put them. For privacy requests, use the support page or the published contact email. Do not put medical records, passwords or identity documents into a general support request.
Further reading
MedlinePlus · PainProduct guidance by Muqi Pain Journal. Not a clinical review.