Trakki Privacy Policy

Last updated: 24 September 2026

Trakki is a nutrition tracker made by Silksome LLC, a limited liability company registered in the State of Wyoming, United States (filing number 2026-001987179), of 30 N Gould St Ste N, Sheridan, WY 82801, United States ("Silksome", "we", "us"). We're the data controller for the information this policy describes, which means we decide how it's used.

This policy covers the Trakki app and the Trakki pages of silksome.com. It explains:

• what we collect and why;
• who else sees it;
• where it's kept;
• how to delete it.

If you live in Washington or Nevada, our Consumer Health Data Privacy Policy also applies to you. It explains the extra rights those states give you over your health data.

#The short version

• We collect what you tell Trakki so it can build and run your plan. Much of it is about your health.
• We don't sell your data or use it to show you ads. The app has no analytics, advertising or crash-reporting software, and nothing tracks you across other apps or websites.
• Some AI providers see the specific things they need to answer your requests, such as a meal photo or a message to the coach. They don't use it to train their AI.
• Your data is stored in the European Union.
• You can delete all of it yourself, from Settings, whenever you like.

#1. What we collect

#Account

• Email address. Your account is set up under this address.
• Sign in with Apple or Google. If you sign in this way, Apple or Google gives us your email address and an account ID. We never receive your password.
  • Apple or Google may also send us your name, and Google may send a link to your profile picture. Trakki never asks for these, never shows them, and nothing in the app uses them. They stay in your account record until you delete your account.
  • If you use Apple's Hide My Email, we only ever see the email address Apple creates to forward messages to you.
• Email and password. If you sign up this way, the service we use for sign-in stores your password in a scrambled form. Nobody at Trakki can ever see it.

#Your profile

• Sex, date of birth, height and weight.
• How active you are, including your daily movement.
• Your goal, target weight and how fast you want to reach it.
• Your diet style and preferred cuisines.
• Any foods, ingredients or allergens you tell us to avoid.

We use your sex, date of birth, height and weight in a standard formula (the Mifflin-St Jeor equation) to work out your daily calorie and macronutrient targets. Nothing else in the app uses them.

#Your settings

We save the choices you make in Settings, such as:

• metric or imperial units;
• how many meals a day you plan;
• your water target;
• which extra nutrients you track;
• other options, such as rolling over unused calories, adding back calories from exercise, and leftovers.

#What you log

Your meals and their nutrition, what you drink, your weight, your waist measurements and your streaks. We also keep the date and local time of each entry.

#Meal plans

The meal plans Trakki creates for you. This includes the dishes, their ingredients, steps and nutrition, and which day each dish is planned for.

#Photos

• Meal photos, when you scan food.
• Progress photos, if you choose to take them.

Your photos are kept in private storage that only your account can access. There are no public links to them.

Before a photo leaves your phone, Trakki resizes it and saves it as a new image. This removes hidden details a camera can store in a photo, such as where it was taken.

Progress photos are never sent to an AI provider.

#Coach conversations

• The messages you send the in-app coach, and its replies.
• Facts about you that the coach offers to remember and you accept. A fact is only saved if you tap to accept it.

#Records of AI requests

Each time you scan a meal, message the coach or create a meal plan, we keep a record of the request, including:

• what you typed, or where the photo is stored;
• which AI model answered, and how long it took;
• the AI model's answer;
• how much processing it used, and what it cost us.

We use these records to apply usage limits, fix wrong answers, and track what Trakki costs to run. They're linked to your account and deleted with it.

#Subscription

Whether you have an active subscription, which plan you're on, and when it ends. We never see your card number, billing address or other payment details. They stay with Apple or Google. See section 4.

#Technical and security logs

When your phone connects to our servers, our systems record some technical details. This helps us keep Trakki secure and fix problems. The details are:

• your IP address;
• your type of device, operating system or browser;
• the time of each request;
• when you sign in or out.

These logs are deleted automatically after a short time, and never kept for more than 90 days. See section 6.

#Messages to us

If you email us, we keep the emails so we can answer you and have a record of what you asked.

#Health-related data

Much of the information above is about your health, such as your body measurements, weight, diet, allergies and what you eat. We collect it only because you entered it. We only use it to create the plan and results you asked for, and never for anything else. Section 3 explains the consent we ask you for.

#What you need to give us

To create an account and a plan, you need to give us an email address and the basic profile details listed above. Everything else is optional, including photos, coach conversations and most settings. Without these basic details, Trakki can't work out your targets or do its job.

#2. What we don't do

• We don't track you. Trakki has no software for analytics, advertising, measuring ad performance or reporting crashes. We don't collect your device's advertising ID, your contacts or your location.
• We don't send push notifications. The only notification Trakki shows is one reminder two days before a free trial ends, if you allow notifications. It's scheduled on your own phone, so we don't run a push notification service, and no push or device ID is ever sent to us or anyone else.
• We don't sell your data or use it for ads. We don't sell or rent your personal data, and we don't build advertising profiles. We don't share your data so you can be shown ads across different apps and websites (called "cross-context behavioural advertising" in California law). We don't give personal data to other companies for their own marketing.
• We don't use your data to train AI. Neither we nor our AI providers use your content to train AI. See section 4.
• We don't make important decisions about you automatically. Trakki works out your targets automatically. But it never makes a decision that has a legal or similarly significant effect on you.
• "Do Not Track" signals. Browsers can send "Do Not Track" or "Global Privacy Control" signals to ask not to be tracked. Trakki doesn't track you across other apps or websites, and doesn't let anyone else do so, so these signals have nothing to switch off. We treat everyone as having opted out of tracking.

#3. How we use your data, and our legal basis

This table explains what we do with your data and why. If you're in the UK, EU or EEA, the law requires us to have a legal reason (a "legal basis") for each use. The last column shows ours.

Your explicit consent. Before your health-related data reaches our servers, the account screen asks for your consent to use it: the sentence above the button names the data and why we use it, and creating your account gives that consent. We keep a record of when you gave it and which version of this policy it applied to. You can withdraw your consent at any time by deleting your account, which deletes the data.

Trakki can't work without this data, so you can't withdraw consent and keep using the app. Withdrawing consent doesn't make it unlawful for us to have used your data before you withdrew.

#4. Who else processes your data

We use a small number of other companies to run Trakki. Each one gets only what it needs to do its job, and none of them can use your data for its own purposes.

#Supabase: database, sign-in and photo storage

Supabase stores your data in the European Union. Every table in our database has rules that only allow each row to be seen by the account it belongs to.

#OpenRouter, Google and OpenAI: AI

OpenRouter sends our AI requests to the right AI model. Two AI companies currently see your content:

• Google answers photo and text food scans;
• OpenAI answers the coach and writes meal plans.

Between them, they receive only what the AI needs to see:

• the meal photo or description, and the app's language, when you ask Trakki to identify food;
• your message to the coach, plus the parts of your log it needs to answer, your country and the app's language;
• your targets, diet style, foods to avoid, country and the app's language, when it writes a meal plan. Your country is the one your app store account is set to, or your phone's region setting, so dishes match what people eat there.

These requests come from our servers, not from your phone. They never include your email address, your name or your account ID.

How long AI companies keep your data:

• OpenRouter doesn't store what our requests contain.
• Google and OpenAI don't use it to train their AI.
• Google and OpenAI may each keep a request for a limited time, only to check that their service isn't being misused, and then delete it. OpenAI keeps it for up to 30 days.

We choose which AI model handles each feature on our side, so this can change without an app update. If we change AI provider, we'll update this policy.

#Resend: email

Resend sends our sign-in and password-reset emails. It receives your email address for that purpose only.

#RevenueCat: subscriptions

RevenueCat keeps track of whether you have an active subscription. It receives:

• your Trakki account ID, which is a random code;
• your purchase history;
• basic information about your device and app store.

It doesn't receive your email address, your food log, your photos, or anything about your health. Unlike the companies above, RevenueCat runs inside the app on your phone. See "What your phone contacts directly" below.

#Expo: app updates

When Trakki opens, it asks Expo's servers whether a newer version of the app is available. That request tells Expo your IP address, what kind of device you have and which version of Trakki you're using. It doesn't include your account ID or anything you've entered.

#Apple and Google: payment

Apple and Google are the sellers of your subscription, so they take your payment. They only tell us that you have a subscription and when it ends.

#What your phone contacts directly

Usually the app talks to our servers, and our servers talk to everyone else. Four things work differently. Each one shows your IP address to a company other than us:

• Open Food Facts. When you scan a barcode, your phone looks up the product directly in the Open Food Facts public database. Open Food Facts is a French non-profit. It sees your IP address and the barcode you scanned, and nothing else about you. If you don't want to send that request, don't use the barcode scanner. Every other way of logging food goes through our servers.
• RevenueCat. Your phone contacts RevenueCat directly to get prices, make purchases and check your subscription. Once you're signed in, we give RevenueCat your Trakki account ID so your subscription follows you to a new phone. This happens even if you never subscribe, because the app needs to know what to charge and whether you've already paid.
• Expo. Your phone makes the update check described above when Trakki opens.
• Apple and Google, when you sign in. Sign in with Apple uses Apple's own sign-in screen. Sign in with Google opens a browser window to Google. We never see the password you type into either.

Photo scans, the coach and meal plans all go through our servers. Your phone loads your photos from our storage using links that stop working shortly after they're created.

#Other times we share data

• When the law requires it. We share data with authorities only when we're legally required to, for example because of a valid court order. We'll tell you first, unless the law or the order forbids it.
• To protect people. We may share data when it's needed to protect someone's safety, or to protect Trakki against fraud or misuse.
• If our business changes hands. If Silksome merges with another company, is bought, or sells its assets, your data may be transferred as part of the deal. We'll tell you before that happens. The promises in this policy will still apply to your data unless you agree otherwise.

#Who at Silksome can see your data

Only the people who run Silksome can see your data, and only when they need to. That means answering a support request you sent, fixing a problem, investigating misuse, or meeting a legal obligation.

#5. Where your data is stored

Your account, log, photos and coach history are stored in the European Union.

Silksome is a United States company, so we access that data from outside the EU. So do the other companies we use, apart from our storage provider. These are OpenRouter and the AI companies it uses, RevenueCat, Resend and Expo, which are all based in the United States.

If you're in the UK, EU or EEA, this counts as sending your data to another country. We protect these transfers with the European Commission's Standard Contractual Clauses, which are approved contract terms for this purpose. Where UK law applies, we also use the UK Addendum to those clauses. If you ask, we'll send you a copy of the relevant clauses.

Open Food Facts is in France, so a barcode lookup made in the EU stays in the EU.

#6. How long we keep your data

We keep your data for as long as you have an account.

#When you delete your account

We immediately delete:

• your account and your sign-in details;
• your profile and settings;
• your entire food log, water log and streaks;
• your weight and measurement history;
• your saved foods and dishes;
• your meal plans;
• your coach conversations and the facts the coach remembered;
• the records of your AI requests;
• every photo you've uploaded.

Deletion is permanent. We don't keep a hidden copy, and there's no grace period during which we could restore your account. Our encrypted backups are deleted within 30 days.

#What's kept for longer

• Your subscription. Apple or Google manages your subscription, under their own policies. Deleting your Trakki account doesn't cancel it. Cancel it in your app store first. See the Terms, section 4.
• RevenueCat's purchase record. RevenueCat keeps a record of your purchases after your Trakki account is deleted. The record is under the random ID we gave it, not your name or email. Email support@silksome.com and we'll ask RevenueCat to delete it.
• Resend's delivery logs. For a short time, Resend keeps records of the sign-in emails we sent you. These include your email address.
• Copies kept by AI companies. Google and OpenAI may keep a request for a limited time after it's made, to check for misuse, as described in section 4. OpenAI keeps it for up to 30 days.
• Technical and security logs. These are deleted automatically within 90 days at most. Deleting your account doesn't delete them straight away, so for a short time afterwards they may still contain your account ID and IP address.
• Emails you sent us. We keep these for as long as we need to deal with your request and keep a record of it.
• Records required by law. We keep these for as long as the law says we must. We also keep overall totals that can't identify anyone.

On your phone. Signing out clears your session and everything Trakki saved on your phone, such as your log, coach conversation, unfinished drafts and anything waiting to sync. Uninstalling the app removes everything else.

#7. Your rights

You can delete all your data from inside the app, in Settings → Account → Delete my account. You don't need to email us, and we won't try to talk you out of it. If you no longer have the app, see how to delete your account without the app.

You can see and change almost everything you've told Trakki in the app itself. You also have the right to:

• get a copy of your data;
• correct data that's wrong;
• object to, or limit, how we use it;
• take your data to another service;
• withdraw your consent.

To use any of these rights, email support@silksome.com from the email address on your Trakki account. This lets us check the request is really from you. If someone else is asking on your behalf, we'll need proof that you've given them permission.

We'll reply within 30 days. It's free, and you don't have to tell us why you're asking.

Everyone who uses Trakki has these rights, wherever you live, not only people in places where the law requires them.

#If we say no

If we say no to your request, we'll tell you why. To appeal, reply to our decision with "Appeal" in the subject line, and we'll answer within 45 days. If we still say no, we'll tell you how to complain to your state attorney general or your data protection authority.

#Complaints

If you think we've done something wrong, please tell us first at support@silksome.com. We'll let you know we've received your complaint within 30 days, and keep you updated until it's sorted out.

You can also complain to a regulator at any time:

• in the UK, the Information Commissioner's Office (ICO);
• in the EU or EEA, your national data protection authority.

#California

We don't sell your personal information, and we don't share it so you can be shown ads across other apps and websites. We never have. We don't give personal information to other companies for their own marketing. We won't treat you differently for using your privacy rights.

#8. Security

• Encryption. Your data is encrypted, both while it's being sent and while it's stored.
• Your sign-in. Your login details are stored in your phone's secure storage (iOS Keychain or Android Keystore), not in ordinary app storage.
• Photos. Photo storage is private, and each account can only access its own photos.
• Database. Every table in our database has rules that only allow each account to see its own data. If anyone asks for someone else's data, they get nothing back.

No system is completely secure. If a data breach ever affects your data, we'll tell you and the relevant regulators as quickly as the law requires.

#9. Children

Trakki isn't for anyone under 16. If you're younger than 16, please don't use it.

We don't knowingly collect personal data from children. If you think someone under 16 has created an account, email support@silksome.com and we'll delete it.

Trakki tracks calories and body weight. We don't think that's right for teenagers, whatever the law allows, so our minimum age is 16 rather than 13.

#10. This website

When you visit the Trakki pages of silksome.com, the company that hosts our website receives your IP address and details about your browser, so it can show you the page. It keeps them in its logs for a short time.

These pages don't use cookies, analytics, advertising or anything else that tracks you.

#11. Changes to this policy

If we make an important change to this policy, we'll tell you by email or in the app before the change takes effect, and we'll update the date at the top. If a change affects how we use data you've already given us, we'll ask for your consent where the law requires it.

We'll never quietly start collecting more data.

#12. Contact

• Privacy questions, requests and complaints: support@silksome.com
• Formal legal notices: contact@silksome.com, or by post to Silksome LLC, 30 N Gould St Ste N, Sheridan, WY 82801, United States.