Privacy Policy
Jongwoo Lee ("we"), who operates MealPair (the "Service"), handles your personal information in accordance with the Personal Information Protection Act of Korea and other applicable laws. This policy explains what we collect, why, and the choices you have. If this English version and the Korean version differ, the Korean version prevails.
1. Information we collect and why
| Category | Information | Purpose |
|---|---|---|
| Sign-up and sign-in | Email address, sign-in provider (Apple, Google or email) identifier; for email sign-in, a password stored encrypted by our authentication provider (we cannot see it) | Identify you, manage your account, prevent abuse |
| Profile | Nickname, language, time zone, units, start of day | Provide the Service and display settings |
| Health and body (some optional) | Sex, birth year, height, weight and weight history, activity level, target weight and calorie targets | Calculate recommended intake, show weight trends and calibrate targets |
| Meal records | Meal photos, text you enter, meal times, AI-estimated food names, calories and nutrients, favorites, journal | Record meals, analyze nutrition, provide insights and weekly reports |
| Pair features | Pair connections, shared meals, messages, reactions, reports and blocks | One-to-one sharing, user safety and handling reports |
| Notifications | Device push token, notification settings | Send pair activity and report notifications |
| Collected automatically | Access logs, error logs, app version, device type | Troubleshooting, security and service improvement |
Health and body information is processed only when you enter it; you can log meals without it. We do not track you for advertising and we do not sell personal information.
2. AI analysis
When you log a meal photo or text, the photo, text and analysis language are sent to our AI analysis provider (Google LLC's Gemini API) to estimate calories and nutrients. Photos have location and other metadata removed before they are sent. Account information such as your name or email is not sent. The app explains this and asks for your consent before your first analysis, and records the time and version of your consent. If you do not consent, you cannot log meals by photo or text analysis, but you can still use favorites, weight logging, pairs and other features. Analysis results are estimates and do not replace medical advice.
3. Retention
- We keep your information until you delete your account. When you request deletion, access stops immediately and your records, photos and items you shared with pairs are deleted.
- To prevent the same sign-in from immediately re-registering while deletion is processed, we keep a one-way hash of your sign-in identifier for 30 days, then delete it.
- Exported record files are deleted when they expire.
- Copies in system backups are deleted when the backup retention period ends.
- Where the law requires retention, we keep the information separately only for that period.
4. Service providers and international transfers
We use the following providers to operate the Service. Some process data outside Korea. Data is transferred over encrypted connections when you use the Service and kept for the periods in section 3. If you do not want your data transferred abroad, you can stop the transfer by deleting your account, but you will no longer be able to use the Service.
| Recipient | Country | Data | Purpose |
|---|---|---|---|
| Okta, Inc. (Auth0) | United States | Email, sign-in identifier, encrypted password | Authentication |
| Google LLC (Gemini API) | United States and others | Meal photos, text, analysis language | AI nutrition analysis |
| Google LLC (Cloud Storage) | Republic of Korea (Seoul region) | Meal photos | Photo storage |
| Oracle Corporation (Oracle Cloud) | Japan | All information in section 1 | Servers and database |
| Apple Inc., Google LLC, 650 Industries, Inc. (Expo) | United States | Push tokens, notification content | Push notifications |
| Cloudflare, Inc. | United States and others | Visits to this website | Hosting this website |
5. Sharing with third parties
We do not share your personal information with third parties without your consent or a legal basis. Meals, messages and reports you choose to share with a pair are visible to that person.
6. Deletion
When the retention period ends or the purpose is fulfilled, we delete the information without delay. Electronic files are deleted so they cannot be recovered, and stored photos are deleted from storage.
7. Your rights
You can view and edit your information, export your records and delete your account in the app at any time. If you cannot use the app, follow the account deletion instructions or contact us below to request access, correction, deletion or suspension of processing. We will act without delay.
8. Children
The Service is for people aged 14 and older. We do not knowingly collect personal information from children under 14.
9. Security
We use encryption in transit (HTTPS), least-privilege access, token verification, an external authentication provider so we never store passwords, and secure on-device storage for tokens.
10. Privacy officer
Name: Jongwoo Lee · Email: mealpair@axlaunch.com
Residents of Korea may also contact the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118) or the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972).
11. Changes
We will announce changes to this policy in the app or on this page at least 7 days before they take effect, and at least 30 days before for changes that materially affect your rights.