Charis privacy
Last updated July 6, 2026 · back to the globe
The short version: your friends list lives on your device, not on our servers. We can't read it, sell it, or lose it — we never have it.
Your friends and your history
Everything you enter — names, cities, contact handles, notes, and your log of catch-ups — is stored in your browser's local database (IndexedDB) on your device. It is not uploaded anywhere. The Export backup button saves that data to a file you keep; imports read it back. Deleting the app's site data deletes your data.
Google Contacts import (optional)
If you use the Google import button, your browser fetches your contacts directly from Google into that same on-device database, using read-only permission. The contact list never passes through or rests on our servers. You can revoke Charis's access at any time at myaccount.google.com/permissions.
Nudges (optional)
If you turn on nudges, we store on our server: a push token for your device and the text of your scheduled reminders (for example, “Wonder what Sam is up to in Kyoto these days?”) with their timing. That is the only friend-related information that ever reaches us, and it exists solely to deliver your notifications. Turning nudges off deletes it.
Usage analytics
We collect anonymous usage events (for example “a friend was added” or “a reminder was tapped”) through PostHog to understand what's working. These events never include your friends' names, cities, or handles.
What we don't do
- No accounts, no passwords, no profiles of you.
- No selling or sharing of data with anyone.
- No reading your address book without an explicit action from you.