diff --git a/PluralKit.Core/Database/Migrations/39.sql b/PluralKit.Core/Database/Migrations/39.sql
new file mode 100644
index 00000000..37ea0eec
--- /dev/null
+++ b/PluralKit.Core/Database/Migrations/39.sql
@@ -0,0 +1,7 @@
+-- database version 39
+-- add missing privacy constraints
+
+alter table systems add constraint systems_name_privacy_check check (name_privacy = ANY (ARRAY[1,2]));
+alter table systems add constraint systems_avatar_privacy_check check (avatar_privacy = ANY (ARRAY[1,2]));
+
+update info set schema_version = 39;
\ No newline at end of file
diff --git a/PluralKit.Core/Database/Utils/DatabaseMigrator.cs b/PluralKit.Core/Database/Utils/DatabaseMigrator.cs
index 9b0a39c0..d0f8a4e3 100644
--- a/PluralKit.Core/Database/Utils/DatabaseMigrator.cs
+++ b/PluralKit.Core/Database/Utils/DatabaseMigrator.cs
@@ -9,7 +9,7 @@ namespace PluralKit.Core;
 internal class DatabaseMigrator
 {
     private const string RootPath = "PluralKit.Core.Database"; // "resource path" root for SQL files
-    private const int TargetSchemaVersion = 38;
+    private const int TargetSchemaVersion = 39;
     private readonly ILogger _logger;
 
     public DatabaseMigrator(ILogger logger)