Privacy Policy

Overview

Pain Pilot ("we", "us", "our") is a personal health tracking tool that helps you log pain, symptoms, medications, and appointments, and share organized reports with your healthcare providers. We take your privacy seriously: your health data belongs to you, is tied to your account, and is never sold to third parties or used to train AI models.

What we collect

• Account information — email address, authentication identifiers, optional display name.
• Health data you enter — pain entries (severity, locations, symptoms, triggers, sleep, mood, stress, energy, menstrual cycle day if enabled), journal entries, diagnoses, medications, appointments.
• Approximate location-derived weather (optional) — if you grant location, we fetch local pressure/temperature/humidity to attach to a pain entry. Coordinates are not stored.
• Subscription status — plan, trial dates, and billing state from Stripe. We never receive or store your card number.
• Technical logs — minimal request and error logs needed to operate and secure the service.

How we use your data

We use your data only to provide the service: to show you your own entries, generate AI-powered pattern insights and PDF doctor reports on your behalf, send the reminders you have enabled, and process subscription payments. We do not use your health data for advertising, profiling, or to train third-party AI models, and we do not sell it.

AI processing

When you open AI Insights, a compact summary of your recent pain log (last 60 entries, last 90 days) is sent to our AI processing provider (routing to Google Gemini) solely to identify patterns and return them to you. The request is transient: providers do not retain the content to train their models. We do not send your email, name, or any directly identifying information with the request.

Third parties (sub-processors)

• Supabase — managed database, authentication, and storage.
• Stripe — subscription billing and payment processing.
• AI processing provider — routes AI Insights requests to language model providers (currently Google Gemini).
• Open-Meteo — public weather API queried by your device when you attach weather to an entry.

Each sub-processor is contractually limited to operating the service on our behalf. We do not share your health data with anyone else.

Storage, security, and retention

Your data is stored in a secure managed Postgres database with row-level security policies so that only your authenticated account can read or write your entries. All traffic is encrypted in transit (TLS). We retain your data for as long as your account is active. When you delete your account, your profile and all linked entries (pain logs, journals, diagnoses, medications, appointments) are permanently deleted within 30 days. Billing records may be retained by Stripe for as long as required by tax and financial regulations.

Your rights

You can view, edit, export (as a PDF doctor report), and delete individual entries from inside the app at any time. You can permanently delete your account and all associated health data from Settings → Delete account. Depending on your jurisdiction (e.g. GDPR in the EU/UK, CCPA in California), you also have the right to access, correct, port, or restrict processing of your personal data, and to lodge a complaint with your local data protection authority. Email support@mypainpilot.app to exercise any of these rights.

Children

Pain Pilot is not directed at children under 13 (or under 16 in the EU/UK) and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

International transfers

Pain Pilot is operated globally. Your data may be processed in countries outside your own, including the United States and the European Union. Where required, our sub-processors rely on standard contractual clauses to protect international transfers.

Not medical advice

Pain Pilot is a tracking tool. It is not a medical device and does not provide medical diagnosis, treatment, or advice. AI-generated insights are statistical observations, not clinical conclusions. Always consult a qualified healthcare professional for medical decisions and never disregard professional advice because of something you read in the app.

Changes to this policy

We may update this policy as the service evolves. Material changes will be announced in the app or by email. The "Last updated" date at the top of this page always reflects the current version.

Contact

Questions, requests, or complaints about this policy? Email support@mypainpilot.app.