How Chargewise has been checked
We have checked Chargewise against published standards for privacy, security, safety and ease of use. Nothing was rated high risk.
Every check is also weighed against what you need on a hard day: nothing we add should cost you energy, add steps or cause stress.
The reviews were carried out by ANKYR+YRD, the company behind Chargewise, using AI-assisted review with independent cross-checks. A lawyer reviewed the legal and privacy side. These are our own reviews, not certifications by an outside body.
Your data and privacy
A lawyer reviewed Chargewise against data protection law in the Cayman Islands, the UK and the EU, and US health-data rules.
- Nothing is recorded until you have agreed to the Terms and Privacy Notice and confirmed you are 18 or over.
- You can download your data, or delete your account and everything in it, at any time from Settings.
- An account unused for 12 months is deleted, with a warning email a month before.
- Your health data is not sent to any AI service.
We also carried out a data protection impact assessment in the format of the UK regulator (ICO). None of the risks it found is rated high once our safeguards are counted.
Security
We reviewed Chargewise against the two main web security standards from OWASP, the international non-profit for application security.
| Review | When | Result |
|---|---|---|
| OWASP Top 10 (2025) | September 2026 | 13 findings, all fixed |
| OWASP Application Security Verification Standard 5.0.0, Level 2 | October 2026 | 253 requirements: 159 met, 83 not applicable, 11 covered by other safeguards or accepted for simplicity; nothing left open |
On 17 October 2026 two independent outside scans of the live app, MDN HTTP Observatory and Qualys SSL Labs, both gave the top grade, A+.
Safety
We keep a safety log modelled on the NHS standard for clinical risk in health software (DCB0129), and update it every time the app changes.
It lists more than 30 ways Chargewise could mislead you or let you down, with a safeguard for each. None is rated in the two highest risk levels.
Ease of use on a bad day
Chargewise uses plain words, keeps steps to a minimum, offers larger text and a dark mode, and has no streaks, scores or rewards to keep up with.
In October 2026 we checked it against the Web Content Accessibility Guidelines (WCAG) 2.2, level AA. All 20 problems found were fixed and checked again. Some parts, such as screen readers, aren't tested yet; the accessibility statement lists them.
NHS digital technology criteria
We also assessed Chargewise against the NHS Digital Technology Assessment Criteria (DTAC, version 2.0). Chargewise isn't supplied to the NHS, so this is a voluntary self-assessment, not an NHS approval.
Questions
For more detail on any review, or a concern about your data, email privacy@chargewiseapp.net.