Skip to content

Privacy & security

Health data is not a growth metric. Logbook exists so one person can keep an honest record without handing it to an app company.

The short version

  • One person, one database

    Logbook is a single-user app with its own database. There's no shared service collecting other people's logs, and no sign-up page.

  • Enforced by the database

    Row-level security in Postgres means the database itself only returns rows that belong to the signed-in user.

  • No analytics

    No tracking scripts, ad pixels or third-party analytics. Nothing is sold or shared.

  • Yours to take

    History exports to CSV at any time, and the report prints to PDF. No lock-in.

Where the data lives

What Where Notes
Events, interventions, notes, custom lists A Supabase Postgres database Hosted by Supabase, encrypted in transit and at rest.
The account Supabase Auth, same project Email and password. Passwords are hashed by Supabase; the app never stores them.
The app itself Cloudflare Pages Pages and the server code that checks sessions. No health data is stored there.
Events logged offline The browser's local storage Held only until the connection is back, then sent and cleared.
Theme choice The browser's local storage Just "light" or "dark".

Who can read what

  • Every page needs a session. Apart from the sign-in page, the server checks the session on every request and redirects to sign-in if it isn't valid. The check asks Supabase to verify the session, instead of trusting the cookie on its own.
  • The database enforces ownership. Every table holding personal data has row-level security policies keyed on the signed-in user, so even a bug in the app can't read someone else's rows.
  • No public sign-up. Accounts are created by the owner in the Supabase dashboard. There's no registration form to find.

What Logbook doesn't do

  • It doesn't send data anywhere except its own database.
  • It doesn't use analytics, advertising or tracking.
  • It doesn't share or sell anything, because there's no one to share it with.

What this is not

Not a medical device

Logbook is a personal tracking tool. It is not a medical device, it does not diagnose, alert or recommend treatment, and it is not a substitute for professional medical advice. The stats and the report show what was logged and what tended to go together; decisions belong with your care team.

Questions or a security concern?

Email john@stetter.io.