Privacy policy

Effective: 19 September 2026

Provider and data controller: Beijing Muqi Technology Co., Ltd. Contact us through the support form at https://pain-journal.cc/support.

You can keep a journal without an account. Journal entries are saved on your device. This app does not separately encrypt the journal database; access also depends on your device security and backups.

If you create an account, the server stores your account identifier, a password hash for password accounts, and profile information you choose to provide. Optional Google or Apple sign-in verifies your identity with the selected provider. Cloud journal sync is not enabled in the current app.When you enable Android account notifications, our server and Google FCM process your device registration and language. iOS account notifications, when available and enabled, use Expo and Apple APNs. Notification messages do not contain journal notes, pain locations or severity. Local reminders do not require an account.

You decide whether to share or export your records. Files and messages you share are then handled by the receiving app or recipient. Deleting your account removes its profile, server records and push registrations. Local journal entries remain available without an account and can be cleared separately in Settings.

Password accounts use password and recovery-code hashes. Recovery codes are shown when issued; keep yours safely outside the app. A password reset replaces the code and invalidates existing sessions. We cannot retrieve a lost recovery code.

Website language: we use the approximate country supplied by Cloudflare from the connection IP to suggest a supported language. If unavailable, we use your browser language. Choosing a language stores a first-party preference cookie for one year; your choice takes priority. This does not request precise device location or create a separate IP-location database. Cloudflare’s processing is described below.

Hosting and providers. The API is hosted by Tencent Cloud in Seoul, South Korea. Cloudflare provides website and API traffic delivery and security and can process IP addresses and request metadata. When you enable Android account notifications, our server and Google FCM process your device registration and language. iOS account notifications, when available and enabled, use Expo and Apple APNs. Google and Apple handle sign-in when you select them. These providers may process data in other countries. We do not sell personal data, run advertisements or use cross-app tracking.

Purposes and choices. Account information is used to provide the account service. Optional profile information is processed with your agreement and can be cleared. Push registration requires your choice and OS permission. Security controls protect the service from abuse. You can keep using the local journal if you decline optional account features.

Retention. Account data remains until you delete the account. Support requests and replies are deleted 90 days after the last reply or submission. Expired sign-in nonces are removed automatically. We do not maintain separate application database backups in this initial deployment. Hosting and network providers may keep their own security records under their policies; their retention is not controlled by the app. Local data and your own exports remain until you remove them.

Your rights. Depending on where you live, you may request access, correction, a copy, deletion, restriction or objection to processing, withdraw consent, and complain to your local privacy authority. Use the support form without including your health history. We may need to verify account ownership before acting. Withdrawing consent does not affect earlier lawful processing.

Children and changes. This service is not directed to children under 16. Contact us if a child has provided account data without appropriate authorization. We will update this page when practices change; the effective date identifies the current notice.

Public website analytics: we use our self-hosted Umami (static.toask.ai) to count page visits and referral sources. It does not collect diary records, form text, accounts, URL parameters or session recordings, and sets no advertising cookies. IP address and browser information are processed for approximate location and pseudonymous visit counting; raw IP addresses are not stored in the analytics database. Do Not Track and Global Privacy Control disable collection. This applies to this website, not the native diary.