Privacy
No ads, no analytics, no accounts. Food logs stay on your device. API keys are encrypted at rest. BYOK cloud AI or on-device inference on Android.
Chompass is an ad-free calorie tracker forked from Fud AI. Use it as an installable browser PWA or as an Android app.
Summary
- No ads: No AdMob or other advertising SDKs.
- No analytics: No usage tracking, crash analytics, or telemetry SDKs.
- No accounts: No sign-in, cloud sync, or central user database.
- Local storage: Food logs, weight history, profile, and Coach chat stay on your device.
- Bring your own AI key: Keys are encrypted at rest on your device, then sent only to the provider you choose (not through a Chompass server).
- On-Device (Private): On Android, optional Gemma 4 keeps food text and photo analysis on the device; nothing is uploaded for that path.
API keys
| Client | How keys are stored |
|---|---|
| Android | EncryptedSharedPreferences with an AES-256 master key in the Android Keystore. The keychain file is excluded from cloud backup and device transfer. |
| PWA | Web Crypto AES-GCM with a non-extractable wrapping key; ciphertext in IndexedDB. |
Encryption protects keys sitting on disk. It does not protect against malware, a rooted device, or a compromised browser page that can run as the app. Clearing app or site data removes stored keys.
Web app (PWA)
The Chompass PWA runs in any modern browser and stores diary data in IndexedDB. Same BYOK stance as the Android app: no account, no analytics, cloud AI only to the provider you configure. There is no cloud sync between clients. Move data with diary / body-metrics JSON export and import. Chromium-based browsers generally offer the best install and media APIs; Firefox and Safari work with some gaps.
Data on your device
The Android app stores locally: food entries and photos, weight and body-fat history, optional water log, profile and goals, Coach history, and widget snapshots. The web app stores the equivalent diary, metrics, and settings in the browser.
Delete All Data (Settings) wipes app storage only. On Android it does not remove records previously synced to Health Connect. Manage those in the Health Connect app.
Network requests
Chompass contacts external services only when you use a feature that needs them:
| Feature | What is sent | Where |
|---|---|---|
| AI food analysis / Coach | Meal text, images, or chat context you submit | Your configured AI provider |
| Barcode scan | Scanned barcode | Open Food Facts public API |
| Health Connect | Nutrition, weight, body fat, height (write); sleep, HR, hydration, steps, energy (read) if enabled | Google Health Connect on-device |
| App updates | (none) | Manual via Codeberg releases |
Optional background sync (off by default) only reads Health Connect on-device; it sends nothing off the device.
Chompass does not sell or share your health data for advertising.
Meal sharing
Shared meals use a chompass:// deep link (Android) or a hash URL on the web app, with base64-encoded nutrition JSON. Links leave your device through the app or messenger you choose.
Contact
Source and issues: codeberg.org/fitguy/chompass.
Canonical copy also lives in the repository as PRIVACY.md.