Frequently Asked Questions
Answers about how the Chastity Tracker works and how it is operated.
Features
What does the tracker record?+
Locking, unlocking, inspection and orgasm are each recorded with photo, note and assigned device. A live status shows the current wear time, complemented by a calendar heatmap, monthly overview and goal progress.
How do inspections work?+
A chastity inspection is a keyholder request to verify by photo that the device is still locked. You receive an e-mail and push notification with a deadline (one hour by default, and it can be given in minutes) and, if the device requires one, a five-digit code. Before it expires, submit an inspection entry with a photo showing that code — this proves the photo is live and not reused. Whether a device requires a code at all is your keyholder's decision; with it off, the photo alone is enough. You may read the code off a screen, for instance from the push notification on a smartwatch; the seal number must still come from the seal itself. Inspections cover not only the chastity device but also wear categories such as plug, collar or cuffs, and one can run per category at a time. A missed deadline counts as an offense.
What are lock periods and lock requirements?+
Lock periods are set as fixed or open-ended and define a minimum wear time and a required device. The application monitors compliance and reports deviations.
How does the penalty log work?+
The system automatically detects offenses such as missed inspections or wear times falling short. The keyholder then rules in a loop and decides whether an offense is dismissed or penalized.
Can the keyholder assign tasks?+
Yes. A task is an assignment with any number of conditions and a deadline: wear certain devices, stay locked. Where the keyholder sets it that way, the conditions must hold continuously until the deadline — which makes a task a monitored state over a period of time rather than a checkbox to tick off. Alongside the deadline there is a separate "Time to get ready": the point by which you must have started; miss it and the task counts as missed. Optionally a task requires a photo as proof, which the keyholder reviews and either accepts or rejects. What that looks like day to day is covered at length in the blog post on keyholder tasks.
How does a penalty task work?+
A penalty task is a penalty from the penalty log issued as a task rather than as free text. "Task as penalty" leads straight into the task form, so task and verdict are created together in one step. The penalty inherits everything a task can do: conditions, a deadline, a time to get ready and, if wanted, a photo as proof. A completed penalty task closes the penalty by itself instead of staying open in the penalty log until someone remembers it; if the verdict is changed or withdrawn, the penalty task goes with it. A missed penalty task shows in the penalty log what it stood for, so it stays visible that one offense grew out of an earlier one. The AI keyholder can punish this way as well.
How does weight tracking work?+
The sub records their weight via “New entry” → “Weight”, with a photo of the scale as evidence or, if that is not possible, a short note. One value counts per day. The keyholder defines weighing windows and a target weight and can add, correct or delete weigh-ins. The statistics show the history, the target weight and the BMI. Optionally a missed report counts as an offense, and the keyholder can tie the next orgasm to the 3-day average. The details are in the manual.
How do I switch weight tracking on?+
The keyholder does that, per sub: in the sub's “Settings” → “Weight” → “Weight tracking”. It is off by default, and until then the sub sees none of it. Weight, height and BMI are health data, which is why it remains opt-in per sub; the values are stored in the instance's database.
What is the AI keyholder?+
An AI assistant that reads the current state via MCP and issues directives within human-defined free-text rules. It serves a human keyholder as relief from the routine — or a sub without a keyholder as a virtual keyholder, connected under self-set rules. It reads the overall picture, sessions, devices, statistics, records, offenses, context, timeline and weight history; it orders lock periods, lock requirements, inspections, orgasm directives, verdicts, training goals, cleaning rules and weight settings; and it maintains notes, appointments and a health hold as context. Every writing action requires a reason and lands in the action log, and a preview shows in advance what a directive would change. The rules stay in human hands, and the function is opt-in and off by default.
Can multiple categories be tracked separately?+
Yes. Plug, collar, cuffs and other categories run in parallel, each with its own entries, goals and calendar. This keeps different wear dynamics cleanly separated.
What is the code vault?+
The photo of a sealed key safe or code note is stored locked and stays hidden until the keyholder releases it. This stores an emergency code without it being visible ahead of time.
Can a keyholder manage multiple wearers?+
Yes. Keyholder relationships are each scoped to their own relationship, so data and directives stay separate per wearer.
I set the instance up myself — how do I invite my keyholder and hand over the admin rights?+
There is no e-mail invitation: you create an account for her by hand, in the portal under Dashboard → your instance → Tracker users or inside the instance under Users → New user, and pass the credentials on to her. After that you have a choice: the role "user" plus an assignment as keyholder — she directs, you keep administering — or the role "admin" plus demoting yourself to "user", which puts the instance in her hands too. Which one fits when is covered in the blog post on inviting a keyholder.
How do push and email notifications work?+
Push and email notifications report due inspections, deadlines and directives, and can be toggled individually per event type. Push arrives as web push in the installed PWA; on iPhone and iPad this requires the site to have been installed via “Add to Home Screen”. The Technical section explains how the installation works.
Where can I read messages from my keyholder?+
In the inbox. It collects everything that was said to you: penalty texts with their reasoning, comments on inspections, messages about requirements and lock periods, reminders and automatic entries. The bell in the app header shows the number of unread messages (shown as "99+" from a hundred onwards), and the same counter appears as a badge on the app icon. Push and email only deliver — the inbox keeps, even when a mail goes unnoticed; that was felt most with penalty texts, because only the keyholder sees the penalty log. Messages that come from system texts appear in your own language, while free text typed by your keyholder stays unchanged. The dashboard banners remain for what needs doing now; the inbox is for what was said.
Does a keyholder have to wear a device or track themselves?+
No. A keyholder can take on a pure keyholder role and does not have to wear a device. The "No own tracker" mode hides your own tracker area and sends the login straight to the keyholder overview. No data is deleted, and the switch is reversible at any time.
Technical
How do I install the app on iPhone or Android?+
The regular route is installing it as a PWA — no app store needed. Open your own instance in the browser, for example yoursub.chastitytracker.ch and not this website. On iPhone, tap Share in Safari and choose “Add to Home Screen”; on Android, choose “Install app” from the Chrome menu. The Chastity Tracker then sits on your home screen as its own icon, starts without a browser bar, works offline-first and receives push notifications; on Android it also shows up in the app drawer like any other app. There is also a native iOS app as a TestFlight beta; because of the adult content it is not listed in the App Store and is handed out on request only — through the Feedback button on this site or by email to info@trublue.ch, including the email address of your Apple ID. There is no native Android app; on Android the PWA is the way.
How is the tracker operated?+
The application runs as a Docker container on your own server with its own SQLite database; all data lives there and stays under your own control.
Does it cost anything?+
No. The Chastity Tracker is permanently free and non-commercial, with no pricing model — now or in the future. Released under the PolyForm Noncommercial license.
What is the difference between self-hosting and the portal?+
With self-hosting the application runs on your own server, with full data control. The portal (portal.chastitytracker.ch) is a free friendship service on trublue's server — without guarantees, without an SLA and without your own data control, intended for users without their own server.
Does handing over the admin role also hand over the instance?+
No. The admin role inside the app and the portal account are two different things. Whoever registered the instance in the portal keeps control over the instance — creating, deleting, updating it and resetting passwords — even when they are only a "user" in the app. If that is to be in your keyholder's hands as well, the cleanest route is for her to register the instance in the portal herself; after the fact it can be transferred on request to the operator. The same applies to self-hosting: being an admin in the tool is not server access.
How does the local AI work?+
With local processing, an image model runs via Ollama on a server of your own: it reads the inspection code, checks the seal and identifies the device. The photos go only to that server — whether it really is your own machine is the admin's responsibility. The admin sets this up in the app, or alternatively via environment variables when self-hosting; by default the photo check is off entirely.
The automatic photo check has stopped working — how do I switch it back on?+
The automatic photo check is off by default; only an admin of the instance can switch it on, under “Settings” → “Photo checking”. The simplest route is Anthropic (Claude), which the check is tuned for: create an account at platform.claude.com, top up credit and create a key under “API Keys”. In the app, choose “Anthropic (Claude)”, paste the key into the “API key” field, leave the model fields empty, tap “Test setting” and save. The costs run through your own account with the provider. If the check previously worked on a portal instance without a key of your own, it ran on the portal operator's key; that transition ends 30 days after the instance's update to tracker 6.2.5. As long as no check is set up, inspections keep working and your keyholder assesses the photo by eye.
What can automatic device detection do?+
From stored reference images it suggests the device worn when a lock is logged, and during inspections it checks whether the expected device is visible. It is part of the photo check, so it is off by default and runs through whichever AI service the instance admin sets up; an optional CLIP service on your own hardware makes the matching faster.
Do photos stay private?+
That depends on where your instance runs and how it is configured. With self-hosting, all photos sit on your own server; via the portal they sit on trublue's server, in an isolated instance with its own database — convenience in place of your own data control. The automatic photo check is off by default. If your instance admin switches it on, they choose the service: an external provider (Anthropic, OpenAI, Google Gemini, Mistral or another compatible service) with their own API key — the photo then goes there for the check — or their own server with an image model via Ollama, in which case it goes only to that server. If a photo goes to an external provider, a small marker in the app shows you which one. Transition on the portal: instances that existed before this change keep the check via Anthropic with the portal operator's key for 30 days after their update (roughly until 21 October 2026); after that it only runs if their admin sets up a service of their own. Without the photo check, your keyholder assesses every photo by eye. Submitted photos are visible in any case to your keyholder and to every admin of your instance, and if an AI keyholder is connected via MCP, it can retrieve inspection and proof images as well.
What is the Heimdall box?+
Heimdall is a physical key safe that enforces a lock period at the hardware level and only opens once the time has elapsed. It is at MVP stage and experimental.
Is the application multilingual?+
Yes. The app is available in German and English. Each user picks their language in the settings (Settings → Language, or the avatar menu); the choice is saved to your account, follows you across devices, and also sets the language of all e-mail and push notifications, such as inspection reminders.
How do I sign in?+
Sign-in is possible via passkey without a password, using device biometrics or a security key. Users and roles are managed by the instance's admin.
How do I activate and connect the AI keyholder via MCP?+
The AI keyholder is opt-in and off by default; it has to be enabled per instance. When self-hosting, you set the activation yourself through the instance's environment variables. If your instance runs on the portal, request activation by e-mail to info@trublue.ch — stating the instance or subdomain and the user to be managed. You then connect an MCP-capable AI client via a custom connector using your instance's URL with the path /api/mcp; sign-in runs via OAuth, where an admin login grants the AI write access and a normal account gives read-only access. See the MCP part of the manual for the step-by-step guide.