Privacy Policy
Trexio
Last updated: 21.09.2026
Effective date: 21.09.2026
1. Who we are
Izoli Data AG ("Izoli Data", "we", "us", "our") operates the mobile application Trexio, previously published under the name "Raw Animal App".
Izoli Data AG
Ittigenstrasse 17
3063 Ittigen
Switzerland
Commercial register / UID: CHE-225.767.165
Represented by: Serhad Erdogan
Email: info@raw-animal.shop
Phone: +41 78 813 90 93
Website: www.trexio.app
Izoli Data AG is the controller of the personal data described in this policy. This means we decide why and how your data is processed.
2. Scope of this policy
This policy applies to the Trexio mobile application on iOS and Android, and to any related websites and support channels we operate.
It does not apply to the app stores themselves. Purchases of Trexio Pro are processed by Apple and Google under their own terms and privacy policies, and downloads and payments are subject to their practices, not ours.
3. Summary of the key points
This is a short overview. The full detail follows in the sections below.
- Trexio is a food diary. Its core purpose requires us to process health-related data: your height, weight, age, what you eat, and anything else you choose to enter such as lab values, waking temperature or pulse.
- We process this data only with your explicit consent, which you can withdraw at any time.
- Photographs you take of meals and nutrition labels are sent to a third-party AI provider (Google, reached through OpenRouter) for analysis. That provider may use these images to train its own models. This is explained fully in Section 7. Please do not photograph anything you would not want used in this way.
- We use anonymised data to improve our own recognition models. This cannot be switched off and is part of using the service.
- We do not sell your personal data, and we do not display advertising or share your data with advertising networks.
- Your primary data is hosted in the European Union (Ireland). Some of our service providers are located in the United States.
- You can delete your account directly in the app. We erase your personal data within 30 days.
- Trexio is for users aged 16 and over.
4. What data we collect
4.1 Data you give us
Account data
First name, last name, email address, and authentication credentials. If you sign in using Google, Apple or Facebook, we receive the identifiers those services provide (typically your name, email address and a user ID). We never receive your password for those accounts.
Profile and biometric data
Age or date of birth, height, weight, sex, activity level, and your nutrition goals. Some of this is required for the app to calculate calorie and macronutrient targets.
Health data you choose to add
Laboratory values, waking temperature, resting pulse, and any other health information you enter voluntarily. These fields are optional. The app functions without them.
Nutrition and food diary data
Meals and portions you log, the times you log them, barcode scans, and the nutritional values we calculate from your entries.
Photographs
Images of meals (Trexio Pro) and images of nutrition tables on packaging. See Section 7 for how these are handled.
Support correspondence
If you contact us, we keep your message and our reply.
4.2 Data collected automatically
Device data
Device model, operating system and version, language, time zone, app version, and device identifiers.
Usage data
Which screens and features you open, how often, and in what sequence. We use this to understand which parts of the app work and which do not.
Location data
If you grant location permission, we process approximate location to return regionally relevant food and barcode results, and for security and abuse prevention. Location is optional — you can decline or revoke this permission in your device settings and continue using the app.
Diagnostic and crash data
When the app crashes or encounters an error, we collect technical error information. This may include an anonymised recording of the screen at the time of the fault, captured through Sentry, so that we can reproduce and fix the problem.
Push notification token
If you enable notifications, we store the token needed to deliver them.
4.3 Subscription and payment data
Trexio Pro is purchased through the Apple App Store or Google Play. We never receive your card number or full payment details. We receive subscription status information (whether a subscription is active, when it renews, which plan) through RevenueCat, together with a pseudonymous purchase identifier.
5. Sensitive data and your consent
Under Article 9 GDPR and Article 5(c) of the Swiss Federal Act on Data Protection, information about your physical health is a special category of personal data. Your weight, height, body measurements, lab values, temperature, pulse and detailed dietary records fall into this category.
We process this data on the basis of your explicit consent, which you give when you create your account and enable the relevant features.
You may withdraw your consent at any time, by deleting the data in question, by turning off the relevant feature, or by deleting your account. Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it. If you withdraw consent for the core health processing, the app can no longer provide its main function.
6. Why we process your data, and on what legal basis
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Create and manage your account | Account data, device data | Performance of a contract (Art. 6(1)(b)) |
| Provide the food diary, calculate calories, macros and micronutrients | Profile, biometric, nutrition data | Explicit consent (Art. 9(2)(a)) and contract (Art. 6(1)(b)) |
| Analyse meal and label photographs | Photographs | Explicit consent (Art. 9(2)(a)) and contract (Art. 6(1)(b)) |
| Advanced analyses (PUFA, Ca:P ratio, amino acids, temperature and pulse) | Health data you enter | Explicit consent (Art. 9(2)(a)) |
| Manage your Trexio Pro subscription | Subscription data, account data | Performance of a contract (Art. 6(1)(b)) |
| Send push notifications | Push token, usage data | Consent (Art. 6(1)(a)) |
| Diagnose crashes and fix errors | Diagnostic data, anonymised screen recordings | Legitimate interest in a functioning product (Art. 6(1)(f)) |
| Product analytics and improvement | Usage data, device data | Legitimate interest in improving the service (Art. 6(1)(f)) |
| Improve our recognition models | Anonymised images and nutrition data | Legitimate interest (Art. 6(1)(f)); data is anonymised and no longer personal |
| Security, fraud and abuse prevention | Device data, usage data, location | Legitimate interest (Art. 6(1)(f)) |
| Comply with legal obligations | As required | Legal obligation (Art. 6(1)(c)) |
For users in Switzerland, the equivalent bases under the Swiss Federal Act on Data Protection apply.
7. AI analysis of your photographs — please read this section
This section describes a processing activity that you should understand clearly before using the photo features.
What happens to a photo
- You photograph a meal or a nutrition label in the app.
- The image is stored briefly in our database (Convex, hosted in Ireland).
- The image is transmitted to Google's Gemini model, accessed through the routing service OpenRouter (both located in the United States), which identifies the foods or reads the nutrition table.
- The result is returned to the app and added to your diary.
What the AI provider may do with your photo
The model provider may use images sent through this service to train and improve its own artificial intelligence models. This means your meal photographs and label photographs may be retained and used by Google and/or OpenRouter for purposes beyond simply answering our request, in accordance with their own terms and privacy policies.
We are disclosing this openly rather than burying it, because it is a meaningful limitation and you should be able to make an informed decision.
There is no way to use the photo features without this happening. If you do not want your images used in this way, use the barcode scanner or manual entry instead, both of which work without sending any image to an AI provider.
What you should avoid photographing
Because images leave our control, we strongly recommend that you do not include the following in photographs you upload:
- Faces, yours or anyone else's
- Documents, medical records or lab reports
- Names, addresses, screens or anything else identifying a person
- Anything in the background you would not want retained
The photo features are designed for pictures of food. Please use them only for that.
8. Use of anonymised data to improve Trexio
We use data generated through the app in anonymised and aggregated form to improve our food recognition, our nutritional calculations and the product generally.
Anonymisation means that the data is stripped of identifiers so that it can no longer be linked back to you. Once anonymised, it is no longer personal data.
Two points to be clear about:
- This applies to photographs and food logging data. It does not apply to your biometric data, your lab values or other health values you enter. We do not use those for model improvement.
- Anonymised data is retained even after you delete your account. Because it is no longer personal data and cannot be traced back to you, it is not affected by deletion requests. Your personal data is deleted as described in Section 11.
This use is a standard part of the service and cannot be switched off.
9. Who we share your data with
We do not sell your personal data. We share it only with the service providers listed below, each of which processes data on our behalf and under contract.
| Provider | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Convex | Primary database and application backend | EU — AWS eu-west-1, Ireland | Data stored in the EU; Standard Contractual Clauses for any access from the US |
| Clerk | User authentication and account management | United States | EU-US Data Privacy Framework (certified), incl. UK Extension and Swiss-US DPF |
| Sentry | Crash reporting, error diagnostics, anonymised session recordings | European Union | Data stored in the EU |
| PostHog | Product analytics | United States (us.posthog.com) | Standard Contractual Clauses |
| RevenueCat | Subscription management | United States | Standard Contractual Clauses |
| Expo | App delivery, builds and over-the-air updates | United States | Standard Contractual Clauses |
| OpenRouter | Routing of image analysis requests | United States | Standard Contractual Clauses |
| Google (Gemini) | AI analysis of meal and label photographs | United States | EU-US Data Privacy Framework and/or Standard Contractual Clauses |
| Apple / Google | App distribution and payment processing | United States and global | Their own terms and safeguards apply |
We also query the public nutrition databases USDA FoodData Central and Open Food Facts to retrieve food and barcode information. These queries contain product information, not your personal data.
Beyond these providers, we may disclose personal data where we are legally required to do so — for example in response to a binding order from a court or competent authority — or where necessary to establish, exercise or defend legal claims. If our business is sold or merged, data may be transferred to the acquirer, in which case you will be informed.
10. International data transfers
Your primary data is stored in the European Union (Ireland). Several of our service providers are located in the United States, as set out in the table above.
Where data is transferred outside Switzerland or the EEA, we rely on:
- the EU-US Data Privacy Framework, where the recipient is certified under it (Clerk; Google); and
- the European Commission's Standard Contractual Clauses, together with the Swiss addendum recognised by the Federal Data Protection and Information Commissioner, for all other transfers.
You should be aware that data stored in the United States may, in certain circumstances, be accessible to US authorities under US law, and that the legal protections available there differ from those in Switzerland and the EEA.
11. How long we keep your data
| Data | Retention period |
|---|---|
| Account and profile data | For as long as your account exists |
| Food diary, nutrition and health data | For as long as your account exists |
| Meal and label photographs (our systems) | Stored briefly for processing, then deleted from our systems |
| Diagnostic and crash data | Up to 90 days |
| Analytics data | Up to 24 months |
| Subscription and transaction records | Up to 10 years, where required by Swiss accounting law (Art. 958f Swiss Code of Obligations) |
| Anonymised data used for model improvement | Retained indefinitely; no longer personal data |
Deleting your account. You can delete your account directly in the app. When you do, we erase your personal data from our active systems within 30 days. The short delay allows us to reverse accidental deletions and to complete any pending support case. Backups are overwritten on their normal cycle.
Two exceptions survive account deletion: records we are legally obliged to retain (principally financial records), and anonymised data as described in Section 8.
If your account becomes inactive, we currently retain your data so that you can return to it. We will give notice before introducing any automatic deletion of inactive accounts.
12. Your rights
Depending on where you live, you have some or all of the following rights.
Everyone
- Access — obtain a copy of the personal data we hold about you
- Rectification — have inaccurate data corrected
- Erasure — have your data deleted
- Withdraw consent — at any time, without affecting past processing
- Complain — to a supervisory authority (see Section 18)
If you are in the EEA or the UK (GDPR)
- Restriction of processing in certain circumstances
- Data portability — receive your data in a structured, machine-readable format
- Object to processing based on our legitimate interests
- Not to be subject to a decision based solely on automated processing producing legal or similarly significant effects. Trexio does not make such decisions.
If you are in Switzerland (FADP)
You have the rights of access, rectification, erasure and data portability, and you may object to processing.
If you are in California (CCPA/CPRA)
- The right to know what categories of personal information we collect, use and disclose
- The right to delete personal information
- The right to correct inaccurate personal information
- The right to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined under the CCPA, and we have not done so in the preceding twelve months.
- The right to limit the use of sensitive personal information
- The right to non-discrimination for exercising your rights
Other jurisdictions
If you live elsewhere and your local law grants you comparable rights, we will honour them. Contact us and we will tell you what applies.
How to exercise your rights
Email info@raw-animal.shop. We respond within 30 days. We may need to verify your identity before acting on a request, to make sure we do not disclose your data to someone else.
13. Children
Trexio is intended for users aged 16 and over. We do not knowingly collect personal data from anyone under 16.
We ask for your date of birth when you register and block registration where the stated age is under 16. This is a reasonable measure, not a guarantee.
If you believe a person under 16 has created an account, contact us at info@raw-animal.shop and we will delete the account and its data.
14. Security
We apply technical and organisational measures appropriate to the sensitivity of the data we handle, including:
- Encryption of data in transit (TLS) and at rest
- Access controls limiting staff access to what is necessary
- Authentication handled by a specialist provider (Clerk) rather than built in-house
- Filtering of diagnostic data to reduce the capture of personal information in error reports
- Regular review of our service providers
No system is completely secure. We cannot guarantee absolute security, and we ask that you use a strong, unique password and keep your device secure.
15. Push notifications
If you enable them, we send push notifications about your goals, reminders and product updates. You can turn these off at any time in your device settings or in the app, without losing any other functionality.
16. Advertising
We do not display advertising in Trexio, we do not integrate advertising networks, and we do not share your personal data with advertisers or data brokers.
17. Health disclaimer
Trexio is a nutrition tracking tool. It is not a medical device and does not provide medical advice, diagnosis or treatment. The calculations, analyses and recommendations it produces are informational only and are based on general nutritional data and on what you enter.
Do not use Trexio as a substitute for professional medical advice. Always consult a qualified healthcare professional before making significant changes to your diet, particularly if you have a medical condition, are pregnant, or are taking medication.
18. Complaints
If you are not satisfied with how we handle your data, please contact us first at info@raw-animal.shop. We would rather resolve it directly.
You also have the right to lodge a complaint with a supervisory authority:
- Switzerland: Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern — www.edoeb.admin.ch
- EEA: the supervisory authority in your country of residence, place of work, or the place of the alleged infringement
- United Kingdom: Information Commissioner's Office (ICO) — www.ico.org.uk
19. Changes to this policy
We may update this policy as the app develops or the law changes. The date at the top shows when it was last revised.
If we make a material change — for example, adding a new category of data, a new purpose, or a new recipient — we will notify you in the app or by email before the change takes effect. Where the change requires your consent, we will ask for it.
20. Contact
Izoli Data AG
Ittigenstrasse 17
3063 Ittigen
Switzerland
Email: info@raw-animal.shop
Phone: +41 78 813 90 93