Belted

Belted privacy policy

Last updated: 8 November 2026 (the app was renamed from Chalk to Belted; nothing else changed) · This policy applies to Belted for Android version 7.9.5 and later, in two forms: the Google Play app (app.belted) and copies shared directly (za.chalk.lifts). Where the two differ, it says so below. Parts marked From 7.9.6 apply once that version reaches your phone.

The short version

• Belted is a training and food log that keeps your records on your phone.
• There is no Belted account, no Belted server holding your training history, no advertising and no analytics.
• Something leaves your phone only when you use a feature that needs it: a food lookup, voice in a workout, a share, a report you send, or a backup you save to a place you pick. Each is described below.
• We never sell your information or use it for ads.

Who is responsible

Belted is made by an independent developer in South Africa. It is published on Google Play under the developer name Belted (formerly Twelve Reps Studio). Jermaine, who runs it, is responsible for this policy and for handling your information. Contact: [email protected], for privacy questions, support and deletion requests.

What stays in Belted on your phone

The following stay in Belted on your phone, and we can't see any of them:

• profiles, workouts, routines, plans and programmes;
• check-in answers, including areas you mark as sore or painful;
• the daily log (below);
• food diary, food plans and prices;
• body weight and measurements;
• goals, settings and pictures you add;
• workouts you import from Hevy, Strong or FitNotes files.

Belted’s records, achievements and suggestions are worked out on your phone too.

How you feel today: the daily log

The “How do you feel today?” sheet lets you tell Belted about your day. Every part of it is optional:

• sleep: hours slept, and whether you slept badly, OK or well;
• energy: low, OK or high;
• stress: low, some or high;
• soreness: parts of your body that feel sore today, and parts that feel fresh.

Belted uses these answers only on your phone, to adjust its read on how recovered you are. They are kept with your other Belted records and are included in your Belted backups. Belted never sends them to us.

You can also say your answers, for example “Slept six hours, legs sore, feeling good.” Saying it here uses only your phone’s offline speech recogniser, so what you say stays on the phone. If your phone doesn’t have an offline recogniser, Belted tells you and doesn’t use an online one; you tap instead.

Pictures

• Workout photos and custom backgrounds. Pictures you take in Belted, or pick with Android’s photo picker, are copied into Belted’s private storage. Belted turns them upright, makes them smaller and saves them as JPEG. A picture taken through Belted may not have a separate copy in your gallery. Belted never needs access to your whole gallery: the picker gives it only the pictures you choose.
• What Belted records about each picture:
  • when it was added to Belted, and which workout it belongs to;
  • fingerprints used to find it again: a SHA-256 code, the file size and pixel size of Belted’s copy, and the SHA-256 code, size and file name of the picture you picked.
  Belted doesn’t read or keep location (GPS) or other picture details, and doesn’t recognise faces.
• Backups don’t contain the pictures. A Belted backup holds each picture’s details and fingerprints, not the picture itself. Restoring a backup doesn’t bring a missing picture back by itself.
• Photo copies you save. In Settings → Backups → Photos you can save copies of your pictures to a folder you choose. Belted puts them in a “Belted photos” folder there, with a small list (chalk-photos.json) of each file’s name, its fingerprint, and the Belted ids of its photo, profile and workout. No names, dates or captions are in that list. If the folder you choose syncs to a cloud service, the copies go to that service under its terms.
• Finding pictures again. After a restore, a reinstall or a move to another copy of Belted, you can let Belted look in a folder you choose, or pick the pictures yourself.
  • Belted reads only what you allow, and only fingerprints pictures that could be one of yours (by size or name).
  • It reconnects a picture by itself only when the fingerprint matches exactly. Anything less certain is shown to you to confirm.
  • You may need to choose the folder again on a new phone or after reinstalling.
• Profile pictures are small and stored with the profile, so they are inside backups.
• Older pictures. Belted versions before 7.1 saved pictures in a “Chalk” album (Pictures/Chalk) in your gallery, and they stay there. A different copy of Belted may not be able to read them, and you may need to pick them again.
• Deleting. Removing a picture from a workout deletes Belted’s private copy. Belted never deletes or changes pictures in your gallery or in a folder you saved copies to.

When something leaves your phone

Food lookups (Open Food Facts)

Scanning a barcode, or tapping “Search shop products”, needs signal. Belted sends a request over HTTPS to Open Food Facts (openfoodfacts.org), a non-profit food database based in France. The request contains:

• the barcode, or the words you searched for;
• for name searches, the country you set in Belted, as part of the web address (for example za.openfoodfacts.org);
• Belted’s name and version.

Like any website, Open Food Facts also receives ordinary connection details, such as your internet address. Belted doesn’t attach your history, measurements, photos or diary. Open Food Facts’ own privacy policy applies to what it receives. Foods you log are then saved in Belted, so the same barcode works offline next time.

Voice

Voice is optional and off for new profiles. There are two kinds, and they work differently:

• Private (on the phone only): the daily log’s “Say it” uses only your phone’s offline speech recogniser. Nothing you say leaves the phone.
• Everyday voice: logging sets in a workout, and “Hold to say it instead” on a report, use your phone’s speech service (for example Google or Samsung). Belted tries it online first, then offline. Depending on your phone and settings, the speech service may send the audio to its provider’s servers, where that provider’s terms apply. Belted can’t guarantee this kind stays on the phone.

Either way, Belted receives only the text and never saves audio recordings. The microphone is used only while Belted shows that it is listening. Typing a phrase to practise doesn’t use the microphone.

Things you share

Some things are made on your phone for you to share:

• the workout share picture (time, volume, sets, records and gym, on a colour or your own photo);
• “Share as text” (each set, warm-ups, effort, notes and records);
• the weekly-streak sticker;
• routines, workouts, programmes and food lists sent as Belted files;
• CSV exports.

Belted hands each one to Android’s share list, and you pick the app it goes to. Belted doesn’t send it anywhere itself. Once you send it, it is under your control and the terms of the app and people you sent it to. You see the picture or text before you share it.

Reports and feedback

A report contains:

• your message (typed, or spoken using everyday voice, above);
• the name you enter;
• a reference;
• the phone model, screen size, and Android and Belted versions;
• recorded steps, if you include them.

Recorded steps are the screens you were on and the labels of what you tapped. Labels can include:

• names you gave routines, foods or people;
• error messages;
• the choices you tapped in the check-in or the daily log, such as a sore area, how you slept or your stress level;
• inside a workout, the weights and reps you entered.

Words you type into text boxes aren’t recorded. Outside a workout, only the fact that you entered something is recorded. You can read the steps, and leave them out, before sending.

• By email (the usual route): Belted opens your own email app with the report written in, addressed to us.
  • Opening the email app isn’t sending. Nothing goes until you press Send there.
  • Belted can’t tell whether you sent it, so it keeps a copy on your phone (Settings → Saved reports) until you delete it.
  • If you send it, we also receive your email address, the usual email details and anything you add.
  • If no email app is available, Android may offer other apps to share it with. That app, and wherever you send it, have their own terms.
• By form (only in directly shared copies of Belted that are set up for one; none is at the moment): the report goes to the feedback form service (Google Forms) and to us.
  • If sending fails, it waits on your phone and tries again later.
  • Reports written before sending was set up are sent only if you say so.
  • You can see and delete waiting reports in Settings.

The Google Play review card (Google Play app only)

Once, after you save a workout with a new record (from your third workout on), Belted may ask Google Play to show its rating card. Google decides whether the card appears.

• If you rate or review Belted there, what you write goes to Google Play, not to Belted, under Google Play’s terms. Belted can’t see your rating and isn’t told whether you left one.
• A review is normally public on the Play Store.
• While Belted is in testing, Google passes the rating and comments to us privately in Google Play Console instead, with the details Google attaches to them.
• You can change or delete a review in Google Play.

The directly shared copy has no review card.

Updates

The Google Play app gets updates from Google Play. A directly shared copy can be set to read a small update file from Google Drive, at most once a day. That request contains no information about you beyond ordinary connection details.

Links you open

“Ask why” can open a web search in your browser when you choose to. That site receives the search.

We don’t sell data, don’t share it with advertisers, and don’t track you across apps or websites. We don’t control how outside services keep or transmit data. Each of these works under its own privacy terms:

• Open Food Facts;
• your speech service;
• your email provider;
• Google Forms, Google Play and Google Drive;
• apps you share to;
• any storage service you choose.

Backups and exports

• Belted backups hold your Belted records, including the daily log, but not workout photos. They stay inside Belted, plus a folder you choose if you set one. Automatic backups (if you turn them on) go to that folder on the schedule you pick. A folder that syncs, for example a Google Drive folder, sends them to that service under its terms.
• Files you export or share go only where you send them.
• Android’s own backup. If your phone backs up apps to your Google account:
  • Android can include Belted’s data (but not workout photos or Belted’s own backup copies) and restore it to the same Belted app.
  • Google says this backup is end-to-end encrypted on Android 9 and later when your phone has a screen lock.
  • A phone-to-phone transfer may include photos, depending on the phone.
  • This happens under Google’s and your phone maker’s terms, and you control it in your phone’s settings.
  • It doesn’t move data between the Google Play app and a directly shared copy. Use a Belted backup and saved photo copies for that.

Health Connect From 7.9.6

Permissions

• Camera: scanning barcodes and taking photos, only when you start either.
• Microphone: voice, only while Belted is listening.
• Internet: the outside services above.
• Vibrate and keep awake: taps when you tick a set or set a record (off with Settings → Workout → Vibrate), rest-timer alerts, and keeping the screen on during a workout if you ask.
• Health Connect From 7.9.6: only the types listed in the Health Connect section, and only those you grant.

Belted doesn’t ask for access to your whole gallery or storage. Pictures come through Android’s photo picker or the camera, and folders through Android’s folder picker. Both give Belted only what you choose.

Security

Belted keeps its records and photo copies in its private app storage, and uses HTTPS for every request it makes itself. Email, sharing, cloud storage and speech services have their own security. We don’t claim that local records, ordinary email or exported files are end-to-end encrypted. Keep your phone and the places you save backups protected.

Health and fitness information

Much of what you keep in Belted can be sensitive health information, which South African law treats as special personal information. That includes:

• workouts and check-in answers;
• the daily log;
• food records, measurements and progress photos;
• Health Connect data.

It stays on your phone except in the copies described above. We receive health information only if you choose to send it to us, for example in a report.

Belted is a training and nutrition aid. It is not a medical device and doesn’t diagnose, treat, cure or prevent any medical condition. For medical advice, diagnosis or treatment, see a qualified health professional.

Children

Belted is meant for adults. It isn’t directed at children, and we don’t knowingly receive information from children.

Keeping and deleting

• On your phone: your records stay until you delete them. Profile → Danger zone deletes a person’s data. Backups made before that, including Recent backups inside Belted, still hold it. Recent backups inside Belted go when newer ones replace them or Belted is uninstalled; backups saved to a folder stay until you delete them. Uninstalling Belted removes its data and private photo copies, but not:
  • backups or photo copies you saved to a folder;
  • pictures older versions saved in Pictures/Chalk;
  • Android’s backup in your Google account;
  • workouts written to Health Connect;
  • things you shared;
  • reports already sent.
• Reports we receive: we read each one and deal with it. Within 3 months of that, we delete the personal details that came with it: your name, email address and phone details. What the report was about may be kept without those details, as a record of what changed in Belted and why.
• Testing feedback from Google Play: we use it to improve Belted and keep it no longer than the report details above. The copy Google holds is under Google’s control.
• Sooner deletion: email [email protected] with the report’s reference (shown when you send it), or enough for us to find it. We can’t delete copies you keep yourself, or that your email provider or another service holds.

Your rights

Under South Africa’s Protection of Personal Information Act (POPIA) you can:

• ask what personal information we hold about you;
• ask us to correct or delete it;
• object to how we use it.

Because Belted keeps your records on your phone, we usually hold only reports you chose to send. Email [email protected]. You can also complain to the Information Regulator of South Africa.

The website (belted.app)

belted.app is hosted by Cloudflare. It counts visits with Cloudflare Web Analytics, which uses no cookies and doesn't follow you across sites or build a profile of you. It records page views, the site that sent you, your country, and your type of device and browser, all as totals. The website doesn't ask for your name or email address. What you type into the feedback form, and any screenshot you add, is sent to Belted's inbox and handled as described under Reports above.

Changes

When Belted’s data practices change, this page is updated with a new date before the change reaches the app, and Belted mentions it in “What’s new”. If Belted ever offers an online add-on (for example sync or friends), it will be off unless you turn it on. This policy will say exactly what it sends before it’s available.