Char Log privacy policy
What the app stores, what goes online and what you can do about it, in plain words. Last updated 28 October 2026 (fitness portfolio: the trainer link's new name and its own dates).
What Char Log stores
Everything you log: workouts, sets and routines, with the notes, gym names, photos, videos and locations you add to a workout; meals, your own foods and scanned packets; water; weight and waist; your stats (weight, height, age, sex, goal) and daily targets; reminders and settings. If you turn on watch and health apps, also the heart rate, steps, sleep and weigh-ins it brings in (see below).
All of it is kept in the app's storage on your phone. You don't need an account to log. If you sign in with Google, a copy backs up to your account (see below).
What goes online
Without an account, nothing you log is sent to us. There are no ads, no advertising ID and no analytics or tracking, ours or anyone else's, with or without an account.
These things use the internet, only when you use them:
- Barcode lookup: the camera reads the barcode on your phone, and the picture never leaves it. Only the barcode number is sent to Open Food Facts, a free, open food database, to look the packet up. A packet you scanned before is found on the phone, without the internet. What you then log stays on your phone.
- Exercise photos: opening an exercise downloads its photo from GitHub, where the free exercise library is hosted. Like any website, GitHub can see your IP address; nothing about you is sent.
- Talk with AI: builds a message from your workout and stats that you can read first. It leaves your phone only if you tap to open ChatGPT, copy it or share it, and then that app's privacy policy applies.
- Workout location: only if you tap Add location. Your phone's location service (Google's, on most Android phones) works out where you are; Char Log saves the spot with that workout on your phone and sends it nowhere.
Reminders are scheduled on the phone itself, with no server involved.
News from us: the app checks our server about once an hour for a short news card (a new feature, a survey, a challenge). Nothing is recorded about who saw or tapped it. A survey opens in Google Forms, and only if you tap it.
Watch and health apps (only if you turn them on)
On Android, Char Log can work with Health Connect, where apps such as Samsung Health, Fitbit, Mi Fitness and smart-scale apps keep health data. Nothing is read or written until you turn it on in Settings, Watch and health apps, and allow it in Health Connect. Each kind is separate:
- Heart rate: read for the time of each workout you log, to show your average, maximum and time in heart-rate zones with that workout.
- Steps and sleep: read per day, to show your Steps and Sleep trends in Progress.
- Weight: weigh-ins other apps record after you turn it on are added to your weight log, marked with the app they came from; weigh-ins you log are written to Health Connect.
- Workouts: workouts you log are written to Health Connect as strength-training sessions (name, start and end), so your watch's app can show them.
What Char Log reads is kept with your logs on this phone, and in your account backup if you're signed in. It is never shown to your circles, never used for ads, never sold and never shared with anyone else. Char Log's use of information received from Health Connect follows the Health Connect Permissions policy, including its Limited Use requirements.
Turn any of it off in the same place, or remove access in Health Connect's settings. What was already brought in stays in your logs until you delete it.
Your fitness portfolio (only if you make a link)
In Settings, Fitness portfolio, you can make up to three links. Each shows only what you tick (workouts by default; daily food totals, each meal, your weight trend and water only if you choose them) for the last 4 or 12 weeks or dates you pick, plus your first name. Anyone who has the link can open it in a browser, so send it only to the person it's for, such as your trainer.
While a link is live, your phone keeps a small summary of those parts next to your account backup, and our server shows a link's part when it's opened. We keep a code that checks the link (not the link itself), its name, what it shows and when it was last opened, which you see in the app. Stop sharing ends a link at once; when no link is live the summary is deleted. Photos, notes, your gym, location and heart rate are never part of it.
Your account and backup (only if you sign in)
Signing in with Google creates your Char Log account. Our server (Supabase, in Mumbai) keeps your Google email and name, and a compressed copy of everything you log (listed above), so your logs come back when you sign in on any phone.
The backup is private to your account: no other user can see it. It updates a few seconds after you log something and when you leave the app. Workout photos and videos are not in it yet; they stay on the phone.
When you sign out, you choose whether this phone keeps your logs or is cleared. Your backup stays in your account until you delete it.
Circles (only if you join one)
Circles use your account. For circles our server also keeps: your display name and username; for each day, yes or no for whether you logged anything, a workout, food and water (weight only if you turn it on), and your streak count; the circles you are in, invite codes and invites; and what you share in a circle: posts, comments, reactions and @mentions, plus the notifications about them.
Sharing a workout: after a workout you can share a workout card to the circles you tick. It shows the workout's name and number, how long it took, the total weight lifted, the number of sets, any personal records, your best sets and the muscles worked. It never includes your body weight, meals, the gym's name, the time you trained, your location, photos or notes.
Your circle sees your first name, your username, those yes/no ticks, your streak and what you share with it. Posts stay in the circles you shared them with; someone who joins a circle later also sees what was shared there before. Never what you ate or how much, weights you log, photos, videos, notes or locations, unless you share them.
Your profile sections: in Settings, Manage your public profile, you can choose to show your circle this week's muscle map (sets per muscle), the milestones you unlocked and how many workouts you did this month. Each is off until you turn it on. Only the sections you turn on are sent to our server, as numbers only, and only people who share a circle with you can see them. Turning one off deletes it from our server.
Finding you: someone who types your exact username can see your name and username and invite you to a circle; you accept or ignore every invite. There is no search or list of people. You can turn either off in Settings, Manage your public profile.
You can report a person, a circle, a post or a comment, and block anyone (the ⋯ next to it). A report keeps who sent it, who and what it is about, the reason and your note, so we can review it; the person is not told who reported them. Reports of nudity, of a photo or information about you shared without your OK, or of someone who seems too young hide the item for everyone straight away; other reports hide it once two people report it. We review hidden items and remove what breaks the circle rules. Blocking hides you from each other in every circle.
Notifications: if you allow them, your phone gets a code from Firebase Cloud Messaging (Google's service for sending notifications), and our server keeps it with your account. When something happens in your circles, our server sends a short line, such as "Aman reacted to your post", through Google to that code. No logs, body data or posts go with it. Turn each kind off in Circle, ⋯, Notifications; signing out removes this phone's code.
Public profile (only if you turn it on, adults only): in Settings, Manage your public profile, you can make your profile public. Then anyone signed in to Char Log, not the open web or search engines, can see your name, username, picture, bio and follower counts, follow you, and see posts you share with Everyone. You can pause it, hide it from search, or go back to private at any time; going private turns your Everyone posts into followers-only. With a private profile, people ask to follow you and you approve each one. Followers see posts you share with Followers. Who follows you and whom you follow is visible only to you. Your weight, body numbers, meals, photos, gym, workout times and location are never part of your profile or of posts beyond your circles.
Invite reward: if you join a circle with someone's invite while you're new to circles, our server keeps who invited you and when, so that once you've logged on 3 days you both get an extra streak freeze. Nothing you logged is part of it.
Daily ticks are deleted after 35 days and notifications after 90 days. Removed posts and comments are kept privately for up to 180 days, as Indian law requires, and then deleted.
To delete your account: Settings, Delete my account (at the bottom), or email us. Your account, your backup, your posts, comments and reactions, and everything stored with them are deleted; your logs on this phone stay unless you also use Delete everything.
Circle rules and complaints
Before you share anything, you agree to the circle rules:
- Be kind. No bullying, harassment or hate.
- No nudity or sexual content.
- Only share photos of other people with their OK.
- Be yourself. Don't pretend to be someone else.
- Nothing that puts children at risk.
Grievance officer (India's Information Technology Rules, 2021): Satvik Jain, charlogdev@gmail.com. We acknowledge a complaint within 24 hours and resolve it within 7 days.
Keeping it safe
Your logs live in the app's private storage on your phone, which other apps can't read.
Everything the app sends over the internet goes over an encrypted connection (HTTPS).
Our hosting provider encrypts stored data, and only your own sign-in can reach your backup. Without an account we keep nothing on servers, and your logs stay on your phone until you delete them or uninstall the app.
Phone backup
If backup is on for your phone, Android may include Char Log's data in your own Google account backup, so it can come back on a new phone. That backup belongs to your Google account and is under your control; we can't see it.
Workout photos and videos are left out of that online backup to keep it small. They stay on this phone, and moving to a new phone by cable or Wi-Fi brings them along. Photos are saved without their hidden location data; videos are kept as your camera recorded them.
Your choices
- See and fix anything you logged, right in the app.
- Take a copy: Settings, Your data, Export my data (a JSON file plus spreadsheet files). Restore it on a new phone from the same place. Workout photos and videos aren't in the export yet.
- Bring your history from another app: Settings, Your data, Import workouts from another app. The file is read on your phone and never uploaded; the workouts it adds are treated like the rest of your logs (and back up to your account if you're signed in). Undo it for 7 days from the same place.
- Delete it: Settings, Your data, Delete everything. If you're signed in, this deletes your account's backup too. Uninstalling the app removes its data from the phone, not your backup.
Unless you sign in, we hold nothing of yours; if you do, see above. You can contact us with any question or complaint.
Age
Char Log is made for ages 13 and up. Under 18, daily targets are set for a growing body, with no calorie cut. Age is used only to set targets, and we don't ask for proof of it.
Health
Targets, tips and estimates are not medical advice. If you have a health condition, are pregnant or are struggling with food or your body, talk to a doctor or dietitian first. Tele-MANAS is free, 24x7, in your language: call 14416.
When this changes
If anything else ever needs to leave your phone (cloud backup, for example), this policy will be updated first and the app will ask you.
Contact
Char Log is made by Satvik Jain, an independent developer in India.
Questions or complaints, including under India's Digital Personal Data Protection Act, 2023: charlogdev@gmail.com