Last updated: 22 October 2026
Charted Technologies Limited ("Charted Technologies", "we", "us"), trading as Charted Fitness, is the data controller for personal data collected through the Charted Fitness application, based in Ireland. Contact: support@chartedfitness.com.
Charted Technologies Limited is registered in Ireland under company number 828810.
Account data: email address and password (or, if you sign in with Google, your name, email, and profile photo as shared by Google).
Health and profile data: sex, age, weight, height, activity and training level, goals, pace, target weight and date, and — if you choose to provide them — whether you are pregnant or breastfeeding or have a history of an eating disorder. These last two are used only to show appropriate safety guidance and warnings.
Steps from Apple Health or Health Connect: in the Charted Fitness iPhone and Android apps, if you choose to connect Apple Health or Health Connect, we read your step count for the current day, and nothing else. We use it to estimate the calories you burn walking. It is kept on your device for that day's calculation; we don't write anything to Apple Health or Health Connect, and we never sell this data, use it for advertising, or share it with third parties. You can stop syncing in the app at any time, and remove access in the Health app or in Health Connect.
Usage data: food logs, weigh-ins, custom foods you create, and check-in history you generate while using the Service.
Wish list: if you use the App wish list, we keep the wishes you write (a title and any detail you add) and the wishes you back, linked to your account. A new wish is visible only to you until we have read it. Wishes we choose to show to everyone appear with their text and vote count, never your name or email address.
Billing data: if you subscribe, our payment processor Stripe collects your payment details directly — we never see or store your card number. We do receive your name, email, and transaction history from Stripe to manage your subscription.
Technical data: our hosting provider (Vercel) automatically logs IP addresses, device/browser information, and standard server request logs for every visitor, as virtually all hosted web applications do. We don't use this for tracking or profiling — it exists for operating and securing the Service.
Weight, health status, and dietary information are "special category" data under GDPR. We only process this data with your explicit consent, given when you enter it into the Service.
To provide the Service (calculate your targets, log food, track progress); to maintain your account; to communicate with you about your account (e.g. password resets); to send you occasional nutrition-science or product emails if you've signed up for our newsletter; to read the wishes you send us and, if we build one you made or backed, to email you to say so; and to improve the Service. We do not sell your data, we do not share your health data with employers, insurers, or advertisers, and we do not use it for advertising or to train third-party AI models.
Charted Fitness's adaptive coaching and meal-composition suggestions are generated from the calorie/macro/nutrient data you log, using standard nutritional formulas and simple rule-based logic — not a black-box model making decisions about you. A person always remains in the loop: suggestions are informational, and you decide whether to act on them.
Contract necessity — to provide the Service you sign up for. Explicit consent — for special category health data (weight, pregnancy/breastfeeding status, eating disorder history), which you can withdraw at any time by deleting the relevant entry or your account, and for newsletter emails, which you can withdraw by unsubscribing at any time. Legitimate interest — for improving the Service (e.g. understanding aggregate usage patterns), and for emailing you when a wish you made or backed on the App wish list has been built (one email per wish, with a link in every email to stop these emails), balanced against your right to privacy; you can object to this processing at any time using the contact details below.
Your data is stored with Supabase, our database and authentication provider, on infrastructure located in the United States. The Service itself is hosted on Vercel, also a US company, which processes technical data (see Section 2) in the course of serving the app to you. Because we are based in Ireland/EU, both involve an international transfer of your data outside the EEA; each is safeguarded through Standard Contractual Clauses. Supabase's Data Processing Addendum, covering these safeguards, is published at supabase.com/legal/dpa.
We share data only with the service providers needed to run Charted Fitness: Supabase (hosting, database, authentication), Vercel (application hosting), Stripe (payment processing — if you subscribe, Stripe Payments Europe, Limited, an Irish company, is the Stripe entity responsible for your data, with the same Standard Contractual Clauses safeguard for any processing outside the EEA), Google (only if you choose Google sign-in), Apple (only if you choose Sign in with Apple in the iPhone app: Apple tells us your email address, which may be a private relay address, and your name the first time), Open Food Facts (only your food search text is sent to look up nutrition data — no account or personal data is sent to Open Food Facts), Anthropic, PBC, a US company (only if you scan a photo of food, a nutrition label or a workout plan: the photo is sent to Anthropic to be read and is not stored by us, and no name or email address is sent with it), and Resend, a US company that sends our emails (your email address and the email itself, such as account, trial and waitlist messages). We do not sell or rent your personal data to third parties.
We retain your data for as long as your account is active. If you delete your account, we delete your personal data, including your wishes and votes, within 30 days, except where we are required to retain limited records by law — this includes billing and transaction records, which Irish law generally requires us to keep for 6 years for tax and accounting purposes. Encrypted backups of the database are retained on a rolling basis for disaster-recovery purposes and age out on their own schedule, separate from this 30-day window; a backup is never restored to reinstate a deleted account.
Under GDPR, you have the right to: access the data we hold about you; correct inaccurate data; request erasure; request a copy of your data in a portable format; restrict or object to processing; and withdraw consent at any time. To exercise any of these, email support@chartedfitness.com. You also have the right to complain to the Irish Data Protection Commission (dataprotection.ie) or your local supervisory authority.
We use only essential cookies required to keep you signed in (authentication session cookies). We do not use advertising or third-party tracking cookies.
Charted Fitness is not intended for anyone under 16. We do not knowingly collect data from children under 16.
Data is encrypted in transit, and access to your data in our database is restricted using row-level security so that only you (and, where necessary, our authenticated systems) can access it. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
We may update this policy from time to time. Material changes will be notified via the Service or by email at least 14 days before they take effect, matching the notice period in our Terms of Service.
Questions or requests regarding your data: support@chartedfitness.com