PainSense is run by Timurtek LLC ("we", "us"). Everything you log in PainSense is health information, so this policy explains it separately, as Washington's My Health My Data Act and similar laws in other states (such as Nevada and Connecticut) require. It applies to the PainSense app on the web, iOS and Android. Our generalprivacy policy covers everything else. Questions:hello@timurtek.com.
The health data we collect
- Pain episodes: how intense the pain is, when it started and how long it lasted, where in the body it hurts, what it feels like, symptoms, possible triggers, what helped, how it affected your day, medication names you note, and any notes you write.
- Pain issues: the recurring pains you track (for example, migraines or a knee), with their names, typical body areas and pain types.
- Voice and video notes you choose to record (Pro). They play back through links that expire after a few minutes.
- Beta sign-ups: if you sign up to test PainSense, how often your pain comes back and, if you choose to say, what kind of pain you have. We ask your consent on the form, use it only to choose testers, and delete it after the trial.
- What follows from it: the trends, patterns and reports PainSense calculates from your entries, and the fact that you use a pain tracker, which on its own can say something about your health.
Where it comes from
Only from you, when you type, tap or record it in the app, or answer the beta sign-up form. We don't buy health data, receive it from other companies, read it from other apps or devices, or infer it from your location. PainSense doesn't use your location at all.
Why we collect it and how it's used
- To save your entries and show them back to you: Home, History and your issues.
- To calculate your trends and patterns (Insights) and create the PDF reports you ask for.
- To sync your log across your devices and keep it backed up.
- To keep PainSense working and secure, for example fixing a save that failed. Crash reports contain the type of error, never what you logged, and aren't linked to your account.
That's all. We don't use it for advertising, analytics, profiling, or to train AI models, and nobody reads your entries. If we ever want to use your health data for anything new, we'll ask for your permission first.
Your consent
The first time you use the app, we explain this and ask for your consent before you log anything. You can withdraw it at any time (see your rights below).
Who handles it for us
We don't share your health data with third parties. These service providers ("processors") handle it only to run PainSense for us, under contracts that limit them to that:
- Google Firebase (Google Cloud): stores your account, entries and recordings, and runs the app's servers. Data is stored in the United States.
- Stripe (web), and RevenueCat with Apple or Google Play (phones): handle Pro subscriptions. They receive your subscription and account identifiers, never what you log.
We have no affiliates that receive health data. We'd disclose your data to anyone else only if you export or share it yourself, or if the law requires us to (for example, a valid court order).
We don't sell your health data
We don't sell, rent or trade your health data, and we don't allow anyone who handles it for us to do so. We don't use geofencing.
Your rights
- Access: see all your data in the app at any time, or download it as CSV or JSON in Settings, free. You can also email us to confirm what we hold and get the list of everyone who handles it.
- Delete: choose Delete account in Settings, or email us. We delete your account, entries and recordings straight away, along with your records at Stripe and RevenueCat. Copies in backups expire within six months. More about deleting your account.
- Withdraw consent: PainSense can't work without storing what you log, so withdrawing consent means deleting your account and data. You can do it in Settings, or email us.
- Correct: edit or delete any entry in the app.
Requests by email are free, and we answer within 45 days (if we need longer, up to another 45 days, we'll tell you why). We may need to confirm the request comes from your account.
If we refuse a request: appeals
If we decline a request, you can appeal by replying to our answer or emailinghello@timurtek.com with the subject "Health data appeal". We'll tell you in writing what we decided and why within 45 days. If we still refuse, you can contact your state attorney general. In Washington:file a complaint with the Washington Attorney General.
Changes
If we want to collect new kinds of health data or use it for a new purpose, we'll update this page and ask for your consent in the app first.