Release Notes
PainLog is actively maintained and improving every week. Here's what we've shipped — and what we're building next. We keep this honest: real changes, plainly described.
Have an idea or hit a bug? Use Send feedback inside the app, or email [email protected] — it shapes what we build next.
🛠️ Now building
What's next is being shaped by our design partners and your in-app feedback — what we're exploring now:
- Trends & insights. See patterns across your entries — frequency, severity, and triggers over time — at a glance.
- Doctor-ready summaries. A one-page overview built for the appointment, not just the raw log.
- PainLog on the App Store. The key App Store requirements are now in place — we're working toward bringing PainLog to your home screen as a native app.
Another quick follow-up: your Appearance choice now reaches a couple of spots it missed, and several light-mode details that were harder to read than they should be are now easier on the eyes.
- Your Appearance choice now reaches every corner of the screen. On iPhone, scrolling past the very top or bottom of a page could briefly flash a background that didn't match your Light or Dark choice — it now follows the app instead of just the phone. We also tightened up last release's Account title fix at its source, so the same kind of glitch can't quietly reappear on a future screen.
- Muted text and a few colored details are easier to read in Light mode. Secondary text throughout the log — labels, meta info, empty-state messages — along with a couple of red and green badges and the active filter pill, were harder to read against their backgrounds than they should be. All of them now meet a clearer contrast standard. Dark mode is unchanged.
A quick follow-up to "Your Account, Your Settings": the Appearance choice now reaches the log itself, and an app update arriving while you're in the middle of something no longer reloads the page under you.
- Dark mode now reaches the log. Your Appearance choice (Light, Dark, or System) now applies to the main log, entry details, the entry form, the export sheet and the feedback form. We owe you a correction: the last release said PainLog "used to follow your device's setting" — that was true of the sign-in, setup and Account screens, but the log itself had always stayed light whatever your phone was set to. It follows your choice now, and the dark palette was checked for readable contrast on every screen before it shipped. If you chose Dark on a light phone, the date pickers now match the app too instead of the phone.
- The Account page title is readable in light mode. On phones set to light, the "Account" title had been rendering near-black on its dark bar since the last release. Fixed.
- An update won't reload the page out from under you. When a new version of PainLog is ready, the app used to reload immediately on every screen except the entry form — including while you were typing a sign-in code, confirming it's you, or in the middle of deleting your account. It now waits until you're back on the log, or until the short undo window after deleting an entry has passed, then reloads once.
A real Account page behind a new ☰ menu, password recovery right on the sign-in screen, a Light/Dark/System appearance choice, and a much tidier header. Changing your password from inside the app comes in the next release.
- Forgot your password? You can now reset it. Tap "Forgot your password?" on the sign-in screen, enter the code we email you, and choose a new password. Until now there was no way to do this from the app. If you sign in with Google there's no password to reset — the app says so plainly and points you back to Google sign-in.
- A real Account page. Open the new ☰ menu and tap Account to see the email you're signed in with and how you sign in, download all your data, sign out, or find the Delete account option — with a direct line to [email protected] if you need a person.
- Download all your data, anytime. The full-account export now lives on the Account page. If it's been more than a few minutes since you signed in, you'll confirm it's you first — right there, without leaving the page.
- Choose Light, Dark, or System. PainLog used to follow your device's setting with no way to override it. Appearance is now in the ☰ menu, and your choice is remembered on that device.
- Resend your sign-up code. If your confirmation code expired before you used it, tap Resend instead of being stuck on that screen.
- Help is one tap away. Every sign-in screen and the Account page now show how to reach [email protected] — so if you're locked out, you're never without a way to a human.
- A cleaner header. Five buttons became two: Refresh and ☰. Export, Account, and Sign out moved into the menu (Sign out is always last).
- You can still export while a deletion is pending. During the 7-day grace period you can browse your records and download them as Text, Spreadsheet, or PDF — but nothing that would change your data.
- A password reset started by us now works. If we reset your password for you, the Sign In button used to simply go dead. It now takes you straight to the code screen.
- Clearer answers when a sign-in method can't work. If you use an authenticator app and ask for an emailed code, you're told why it won't arrive. If you sign in with Google and tap "Forgot your password?", you're told there's no password to reset — instead of a cryptic error either way.
- Keyboard and screen-reader fixes on the new menu and Account page: Escape closes the menu, focus returns to ☰ when it closes, and the Back button is reachable with Tab.
- The "Welcome back" title was nearly invisible in dark mode on some iPhones. It's readable now; we're still investigating why that device behaved differently.
- A Cloudflare performance-measurement script was being added automatically to the painlog.org website (never to the app, where our security policy blocked it). We turned it off. PainLog runs no analytics or third-party scripts, as our privacy policy says.
- Every change is now checked by 270 automated tests before it can ship — the first automated test suite for PainLog, aimed at the parts of the app that have caused problems before.
Three quick follow-up releases in the two weeks after "Your Data, On Your Terms" repaired problems found while verifying it on real accounts — most importantly, account deletion did not work for people who sign in with Google. Release notes are a record of what the app could actually do and when, so here is exactly what was wrong and what changed.
- Account deletion now works if you sign in with Google. From the July release until August 10, a Google sign-in user who tried to delete their account was stopped at the confirm-it's-you step with an error, and the request never went through. If that was you, we're sorry — the emailed route through [email protected] was available the whole time, but self-serve was not. Deletion now completes for every kind of account, and we verified it live on both.
- You'll actually see your cancellation deadline. After requesting deletion, the screen showing your 7-day deadline and how to cancel could vanish before you had a chance to read it. It now stays put until you tap Done.
- No more bounce back to the sign-in screen. Some people were kicked back to sign-in a second or two after signing in. That's fixed.
- No surprise reload after sign-in. The app could refresh itself right after you signed in — occasionally in the middle of a Google confirmation step, which then had to be started over.
- Honest email-code screen. If your account uses Google sign-in only and you chose an email code instead, the app claimed it had sent one when it couldn't. It now explains why no code is coming and offers Continue with Google right there.
- Only your sign-in options are offered. When confirming it's you, accounts without Google no longer see a "Continue with Google" button that could derail the step.
- Clearer prompts when confirming it's you. Cancelling a deletion no longer tells you that you're deleting your account, and the download confirmation explains what it's for.
- Faster return visits. A caching problem meant the app re-downloaded files it should have kept, on every visit. Opening PainLog again — especially on a slow connection — is now quicker.
The biggest release since launch: complete self-serve account deletion with a full export on the way out, a new Account screen, stronger sign-in protections, and account emails that reliably arrive.
- Delete your account, yourself. No emailing us, no waiting: open Account, choose Delete account, and confirm. Deletion is scheduled with a 7-day grace period — change your mind anytime in those 7 days by signing in and tapping Cancel. Once the deadline passes, your entries and your sign-in are permanently erased.
- Take everything with you first. Before anything is deleted, you're offered a complete export of your account — every entry, ready to download. The same full export is also available anytime from the Account screen, no deletion required.
- A new Account screen. Tap Account in the footer to see the email you're signed in with, export your data, read the privacy policy, and manage deletion — all in one place.
- Your authenticator app now protects every door. If you've added an authenticator app to your account, it's now required on every sign-in path — including email-code sign-in.
- Sensitive actions ask you to prove it's you. Exporting or deleting your account requires a fresh sign-in from the last few minutes — so a tab left open on a shared computer can't quietly walk away with your data.
- Email changes must be verified first. Changing your account email now requires confirming the new address before it takes effect — and your current address keeps working until you do.
- Sign-in stays private. The sign-in screen no longer reveals whether an email address has a PainLog account — nobody can use it to learn that you track your health here.
- You'll always be told. Requesting deletion, exporting your data, cancelling, and final completion each send a confirmation email — so if something happens on your account that you didn't do, you'll know right away.
- Account emails that actually arrive. All account email — sign-in codes, verification codes, deletion notices — now comes from [email protected] through upgraded, fully-authenticated delivery. This especially fixes sign-up codes that often never reached iCloud, @me.com, and @mac.com inboxes.
- Deletion was rehearsed before launch. Before turning this on, we ran the complete deletion pipeline end-to-end against our production systems — every stage verified, with monitoring in place (and tested) to catch any failure. Like our recovery drills, it's proven in practice, not just on paper.
Logging an episode often happens at the worst possible moment — so now, nothing can take your words away mid-thought.
- Your draft survives everything. If an app update, session timeout, or dropped connection interrupts you mid-entry, your in-progress entry is kept safely on your device and reopens exactly where you left off, everything intact.
- A polite heads-up, not a rude exit. Before an inactivity sign-out, a "Still there?" banner gives you 30 seconds and a one-tap Stay signed in — replacing the abrupt pop-up.
- Seamless session recovery. If your sign-in quietly expires, PainLog first tries to renew it invisibly; only if that fails are you asked to sign in again — and your entry is restored the moment you're back.
- Long entries don't get cut off. Active syncing now counts as activity, so the session timer won't fire while the app is working on your behalf.
- Updated icons now actually update. A caching quirk could keep an old app icon around forever on devices that had seen an earlier version. Icons and images now refresh themselves automatically.
A security patch for two-factor setup — and the results of our first full disaster-recovery drill, because a backup you haven't tested is just a hope.
- Two-factor setup stays on your device. The setup QR code is now generated entirely in your browser — your security secret is never sent to any third-party service. The manual-entry key is also hidden by default, with a Show button when you need it.
- Two-factor setup works again. A strict security policy on our site was blocking the old QR code image from displaying. Generating it locally fixes setup for everyone — and is safer at the same time.
- Disaster-recovery drill: passed. On July 18 we ran a live restore drill on the production database: recovered a complete point-in-time copy in about 40 seconds using tightly-scoped recovery credentials, verified every record matched the original, confirmed the app could be redeployed alongside it, then securely deleted the test copy. Your data's recovery path is proven in practice — not just on paper. Drills like this are part of our HIPAA-aligned operations and will run on a recurring schedule.
Capture how an episode affected your day — not just how it felt — and hand your care team or lawyer an export that's ready to file. Plus a round of under-the-hood security hardening.
- Functional-impact logging. Record the real-life effects of an episode — missed work, couldn't drive, missed an event — as simple structured fields, including an explicit "no impact" when that's the answer. Out of the way for everyday heart tracking, front and center for injury documentation, and it remembers your preference.
- Export cover sheet. TXT and PDF exports open with your name, the date range, the entry count, and how the data was captured — so the record reads clearly for any provider or reviewer.
- Save-failure alerts. If an entry fails to save, you now see a clear banner with a retry button — never a silent failure.
- Uniform entry history. Entries imported during the early AI-backfill experiment now display and export exactly like every other entry, with a clean "Logged At" timestamp.
- A proper app icon. The heart-and-ECG mark now shows in your browser tab and home screen.
- CSV alignment. Dates containing commas no longer shift spreadsheet columns — every export opens cleanly in Excel or Sheets.
- Your health entries are never stored in the browser's offline cache — protection for shared devices.
- Exports are spreadsheet-safe: cell contents always open as text, never as formulas.
- Stricter transport security (HSTS), duplicate-proof save retries, and a hardened undo-delete that can never lose or duplicate an entry — even if you sign out mid-undo.
- Feedback submissions are rate-limited to keep our email delivery (including your login links) reliable.
PainLog grows beyond the heart: choose what you track, with templates tuned to your condition.
- Choose your tracker. On first run, pick Heart, TBI (concussion & brain injury), or Other — each with symptoms and triggers tuned to that condition.
- Red-flag banners. Condition-specific warning signs (CDC-sourced for TBI) surfaced where they matter.
- In-app feedback. Send bugs, feature ideas, or tracker requests right from the app.
- Per-tracker log view. Focus on one tracker or see them all; every entry is badged by tracker, and exports follow what's on screen.
- AI Backfill retired. We removed the experimental AI note-import feature. Your notes are no longer sent to any third-party AI service — everything stays within our HIPAA-aligned infrastructure.
- Hardened PDF export so your entry text always prints as text, never as executable markup.
A hardening and polish pass: PainLog is faster, more reliable on your phone, easier to use, and more secure under the hood.
- Undo delete. Removed an entry by accident? A quick "Undo" brings it right back.
- Build transparency. The app now shows its exact version, so you always know you're on the latest.
- Easier tapping. Larger touch targets and clearer selected states on symptom and trigger buttons.
- Smoother updates. The app no longer reloads while you're in the middle of an entry.
- Faster, safer foundation. Updated core libraries with a clean security audit.
- Layout. Screens now fill your phone properly — no more narrow, shrink-wrapped views.
- Google sign-in. Resolved a login issue after our move to app.painlog.org.
- PWA refresh. Restored the refresh button when running PainLog as an installed app.
- Server-side validation on every entry, stronger one-time login codes, stricter access controls, and tighter logging — part of our HIPAA-aligned security work.
PainLog launched — a simple, secure way to log chest and heart pain episodes and share clean reports with your doctor.
- Episode logging with a 1–10 scale, symptom and trigger chips, and notes.
- Live timer that counts each episode and auto-stops at 20 minutes.
- AI backfill — paste messy notes and let PainLog structure them for you.
- Exports in TXT, CSV, and PDF, ready for your appointment.
- Secure accounts with email or Google sign-in and passwordless magic-link login.
- Add to Home Screen for a fast, app-like experience on any device.