My understanding is that Charles (man in the middle attacks) will only work with apps that don’t use certificate pinning. If an app uses that, I’m not aware of a way around without jailbreaking.

https://www.raywenderlich.com/1484288-preventing-man-in-the-...