Release Notes

PainLog is actively maintained and improving every week. Here's what we've shipped — and what we're building next. We keep this honest: real changes, plainly described.

🛠️ Now building

What's next is being shaped by our design partners and your in-app feedback — what we're exploring now:

Shipped
Your Data, On Your Terms Released July 2026

The biggest release since launch: complete self-serve account deletion with a full export on the way out, a new Account screen, stronger sign-in protections, and account emails that reliably arrive.

New
  • Delete your account, yourself. No emailing us, no waiting: open Account, choose Delete account, and confirm. Deletion is scheduled with a 7-day grace period — change your mind anytime in those 7 days by signing in and tapping Cancel. Once the deadline passes, your entries and your sign-in are permanently erased.
  • Take everything with you first. Before anything is deleted, you're offered a complete export of your account — every entry, ready to download. The same full export is also available anytime from the Account screen, no deletion required.
  • A new Account screen. Tap Account in the footer to see the email you're signed in with, export your data, read the privacy policy, and manage deletion — all in one place.
Security
  • Your authenticator app now protects every door. If you've added an authenticator app to your account, it's now required on every sign-in path — including email-code sign-in.
  • Sensitive actions ask you to prove it's you. Exporting or deleting your account requires a fresh sign-in from the last few minutes — so a tab left open on a shared computer can't quietly walk away with your data.
  • Email changes must be verified first. Changing your account email now requires confirming the new address before it takes effect — and your current address keeps working until you do.
  • Sign-in stays private. The sign-in screen no longer reveals whether an email address has a PainLog account — nobody can use it to learn that you track your health here.
  • You'll always be told. Requesting deletion, exporting your data, cancelling, and final completion each send a confirmation email — so if something happens on your account that you didn't do, you'll know right away.
Reliability
  • Account emails that actually arrive. All account email — sign-in codes, verification codes, deletion notices — now comes from noreply@painlog.org through upgraded, fully-authenticated delivery. This especially fixes sign-up codes that often never reached iCloud, @me.com, and @mac.com inboxes.
  • Deletion was rehearsed before launch. Before turning this on, we ran the complete deletion pipeline end-to-end against our production systems — every stage verified, with monitoring in place (and tested) to catch any failure. Like our recovery drills, it's proven in practice, not just on paper.
Never Lose an Entry Released July 2026

Logging an episode often happens at the worst possible moment — so now, nothing can take your words away mid-thought.

New
  • Your draft survives everything. If an app update, session timeout, or dropped connection interrupts you mid-entry, your in-progress entry is kept safely on your device and reopens exactly where you left off, everything intact.
  • A polite heads-up, not a rude exit. Before an inactivity sign-out, a "Still there?" banner gives you 30 seconds and a one-tap Stay signed in — replacing the abrupt pop-up.
Improved
  • Seamless session recovery. If your sign-in quietly expires, PainLog first tries to renew it invisibly; only if that fails are you asked to sign in again — and your entry is restored the moment you're back.
  • Long entries don't get cut off. Active syncing now counts as activity, so the session timer won't fire while the app is working on your behalf.
Fixed
  • Updated icons now actually update. A caching quirk could keep an old app icon around forever on devices that had seen an earlier version. Icons and images now refresh themselves automatically.
Safer Two-Factor Setup & Proven Recovery Released July 2026

A security patch for two-factor setup — and the results of our first full disaster-recovery drill, because a backup you haven't tested is just a hope.

Security
  • Two-factor setup stays on your device. The setup QR code is now generated entirely in your browser — your security secret is never sent to any third-party service. The manual-entry key is also hidden by default, with a Show button when you need it.
Fixed
  • Two-factor setup works again. A strict security policy on our site was blocking the old QR code image from displaying. Generating it locally fixes setup for everyone — and is safer at the same time.
Reliability
  • Disaster-recovery drill: passed. On July 18 we ran a live restore drill on the production database: recovered a complete point-in-time copy in about 40 seconds using tightly-scoped recovery credentials, verified every record matched the original, confirmed the app could be redeployed alongside it, then securely deleted the test copy. Your data's recovery path is proven in practice — not just on paper. Drills like this are part of our HIPAA-aligned operations and will run on a recurring schedule.
Functional Impact & Documentation-Ready Exports Released July 2026

Capture how an episode affected your day — not just how it felt — and hand your care team or lawyer an export that's ready to file. Plus a round of under-the-hood security hardening.

New
  • Functional-impact logging. Record the real-life effects of an episode — missed work, couldn't drive, missed an event — as simple structured fields, including an explicit "no impact" when that's the answer. Out of the way for everyday heart tracking, front and center for injury documentation, and it remembers your preference.
  • Export cover sheet. TXT and PDF exports open with your name, the date range, the entry count, and how the data was captured — so the record reads clearly for any provider or reviewer.
  • Save-failure alerts. If an entry fails to save, you now see a clear banner with a retry button — never a silent failure.
Improved
  • Uniform entry history. Entries imported during the early AI-backfill experiment now display and export exactly like every other entry, with a clean "Logged At" timestamp.
  • A proper app icon. The heart-and-ECG mark now shows in your browser tab and home screen.
Fixed
  • CSV alignment. Dates containing commas no longer shift spreadsheet columns — every export opens cleanly in Excel or Sheets.
Security
  • Your health entries are never stored in the browser's offline cache — protection for shared devices.
  • Exports are spreadsheet-safe: cell contents always open as text, never as formulas.
  • Stricter transport security (HSTS), duplicate-proof save retries, and a hardened undo-delete that can never lose or duplicate an entry — even if you sign out mid-undo.
  • Feedback submissions are rate-limited to keep our email delivery (including your login links) reliable.
Multi-Domain Tracking Released June 2026

PainLog grows beyond the heart: choose what you track, with templates tuned to your condition.

New
  • Choose your tracker. On first run, pick Heart, TBI (concussion & brain injury), or Other — each with symptoms and triggers tuned to that condition.
  • Red-flag banners. Condition-specific warning signs (CDC-sourced for TBI) surfaced where they matter.
  • In-app feedback. Send bugs, feature ideas, or tracker requests right from the app.
Improved
  • Per-tracker log view. Focus on one tracker or see them all; every entry is badged by tracker, and exports follow what's on screen.
Changed
  • AI Backfill retired. We removed the experimental AI note-import feature. Your notes are no longer sent to any third-party AI service — everything stays within our HIPAA-aligned infrastructure.
Security
  • Hardened PDF export so your entry text always prints as text, never as executable markup.
Stability & Security Released June 2026

A hardening and polish pass: PainLog is faster, more reliable on your phone, easier to use, and more secure under the hood.

New
  • Undo delete. Removed an entry by accident? A quick "Undo" brings it right back.
  • Build transparency. The app now shows its exact version, so you always know you're on the latest.
Improved
  • Easier tapping. Larger touch targets and clearer selected states on symptom and trigger buttons.
  • Smoother updates. The app no longer reloads while you're in the middle of an entry.
  • Faster, safer foundation. Updated core libraries with a clean security audit.
Fixed
  • Layout. Screens now fill your phone properly — no more narrow, shrink-wrapped views.
  • Google sign-in. Resolved a login issue after our move to app.painlog.org.
  • PWA refresh. Restored the refresh button when running PainLog as an installed app.
Security
  • Server-side validation on every entry, stronger one-time login codes, stricter access controls, and tighter logging — part of our HIPAA-aligned security work.
First Release Released April 2026

PainLog launched — a simple, secure way to log chest and heart pain episodes and share clean reports with your doctor.

Highlights
  • Episode logging with a 1–10 scale, symptom and trigger chips, and notes.
  • Live timer that counts each episode and auto-stops at 20 minutes.
  • AI backfill — paste messy notes and let PainLog structure them for you.
  • Exports in TXT, CSV, and PDF, ready for your appointment.
  • Secure accounts with email or Google sign-in and passwordless magic-link login.
  • Add to Home Screen for a fast, app-like experience on any device.