Privacy policy
Version 1.1 · Last updated 3 October 2026
Trex shows Bangkok fuel prices on this website and in the iOS and Android apps, with no accounts. This policy explains the little personal data we receive, which almost all comes from feedback you choose to send, what we do with it, how long we keep it, and your rights.
Who we are
Trex is run by Issarapong Poesua, the data controller under Thailand's Personal Data Protection Act B.E. 2562 (PDPA). You can reach us at [email protected].
The short version
- No accounts, no ads, no analytics and no tracking.
- Your fuels, fill size and language stay on your device.
- We only receive personal data when you send us feedback.
- Every feedback item is deleted within 18 months.
What stays on your device
My fuels, your fill size and your language are saved on your phone (in the apps) or in your browser's local storage (on the website). They're never sent to us, except that your My fuels list is attached when you send feedback.
Deleting the app or clearing your browser's site data removes them.
What we receive when you send feedback
Sending feedback is optional. When you send it from the app or the website, we receive:
- Your message and the type of feedback you picked.
- Your email, only if you type it in.
- An install ID: a random code your app or browser creates once, on your device. It isn't linked to your name, phone number, or Apple or Google account, and it isn't your advertising ID. We can't use it to find out who you are.
- Your device model, operating system version, app version and build, and language setting (locale).
- The screen you sent it from, and your My fuels list.
- For a wrong-price report: the price Trex showed, its label and time, and the price you saw at the pump.
- A hash of your IP address: we turn your IP address into a one-way code with a secret key (HMAC) and keep only that code, never the IP address itself.
Why we use it
- To read your feedback and reply, if you gave an email.
- To fix wrong prices and bugs. The device and app details tell us what went wrong.
- To prevent spam and abuse, and to limit how many messages one device or network can send. That's what the install ID and IP hash are for.
Lawful basis
We rely on legitimate interests (PDPA section 24(5)): running a reliable price service, fixing the errors you report and keeping the feedback form free of abuse. We keep only what we need, and you can object at any time.
We only email you to reply, and only if you gave us your email. We never use feedback for marketing.
Who processes it, and where
Feedback is stored in a Supabase database, and the website and API run on Vercel. Both process the data for us in Singapore, under their data processing agreements and the safeguards in them, as PDPA section 29 requires for transfers outside Thailand.
Our hosting provider may briefly log technical data such as IP addresses and request times, for security. We don't sell or share feedback with anyone else.
How long we keep it
- The IP hash: deleted after 30 days.
- Feedback marked as spam: deleted 30 days after it's marked.
- Your email and install ID: removed 180 days after your feedback is closed.
- Every feedback item, whatever its status: deleted 18 months after you sent it.
Your rights
Under PDPA sections 30–36 you can ask us to:
- Give you a copy of your data (access).
- Correct it.
- Delete it.
- Stop using it (objection).
- Pause how we use it (restriction).
- Give it to you in a machine-readable format, or send it to someone else (portability).
Email [email protected] with the email address you used. If you didn't leave one, tell us roughly when you sent feedback and what it said, so we can find it. We reply within 30 days.
If you're not happy with our answer, you can complain to Thailand's Personal Data Protection Committee (PDPC).
Security
Data is encrypted in transit (HTTPS) and at rest by our providers. Only a few Trex team members can see feedback, after signing in, and the database restricts access as well.
No ads, analytics or tracking
Trex has no ads and no analytics or tracking tools. It doesn't use your advertising ID and doesn't share data with advertisers or data brokers.
Children
Trex is a general information service and isn't made for children. We don't knowingly collect children's data. If you think a child has sent us personal data, email us and we'll delete it.
Changes to this policy
When we change this policy, we update the version and date at the top. We announce significant changes in the apps and on the website, and if we ever want to use data in a new way, we'll describe it here before we start collecting it.
Contact
Issarapong Poesua · [email protected]