Privacy Policy

Two ways to use StepMeal

The meal planner itself works without logging in. Logging in is for people who want to keep records.

When you use it without logging in

What you enter is kept in your browser’s storage (localStorage, sessionStorage). It isn’t sent to our server, and we don’t know what it contains.

• It isn’t sent to our server
• It doesn’t sync with other devices
• It disappears when you clear your browser data
• We can’t delete it for you (because we don’t have it)

When you use it logged in

If you log in with a Kakao or Google account, the meal plans you design and your body information are stored on StepMeal’s server. The server uses Supabase, and data is kept in the Seoul region.

You don’t create a separate username or password. We don’t receive your phone number. Your email is passed on because of how Kakao and Google login works, and we can’t narrow that request. But we don’t store it in our service database — we use it only to confirm your login and don’t display it. We don’t send ads or marketing emails.

Stored information is access-restricted at the database level (RLS) so that only you can view it. All communication is encrypted with HTTPS.

We don’t collect allergy information

Under Korea’s Personal Information Protection Act, allergy information counts as “information about health” — that is, sensitive information. We decided not to store it on our server.

We accepted that inconvenience for a simple reason: if we don’t have it, we can’t lose it or misuse it.

Services we rely on

StepMeal doesn’t run its own servers; it uses the two services below. Both companies are US corporations, so we treat this as a transfer of information overseas and let you know.

If you don’t want your information transferred overseas, you can use the service without logging in. However, the access logs created just by visiting the website pass through Vercel.

Kakao and Google aren’t included here. They aren’t services we’ve entrusted with work — they’re the ones giving us information, within the scope you agreed to.

We only look at statistics

To improve the service, we need to know things like “how many people use it” and “what budgets are typical”. But we don’t need to look at individual members’ information to know that.

So we set up a separate view that shows numbers only, and use only that for statistics. We don’t open individual members’ records. Groups with very few people are hidden entirely, since even totals could reveal an individual.

We access member information only when strictly necessary — for example, to deal with an outage or handle a user’s request — and when we do, we record the access along with the reason.

Whenever access was needed, who looked, when, from where, at whose information and why is recorded automatically. The system is built so member information can’t be viewed without leaving that record, and the records are kept for at least 2 years and reviewed every month.

Ads and analytics tools

To keep StepMeal free, we may show ads **only on nutrition guide pages**. In that case, ad companies (such as Google AdSense) may use their own cookies to show ads. There are no ads right now, and if we add them, we’ll name the company in this policy first. We don’t put ad code on screens that show your information — the meal planner and results, the 7-day plan, weight and my records. Your height, weight, allergies and meal plans are not used to choose who sees ads, and are not passed to ad companies.

We do use a visit analytics tool (Vercel Web Analytics) to see which guides are read most. It doesn’t use cookies, and the value used to tell visitors apart is discarded after 24 hours. What remains is roughly the time of the visit, which address was viewed, where you came from, an approximate location (city level) and the device type.

We’ve trimmed things further on our side, too. Visits to the admin screens are excluded from statistics, and the part of an address after the question mark isn’t sent at all. Information that isn’t sent can’t leak.

We use cookies to keep you logged in. If you block cookies in your browser, you won’t stay logged in. If you use an ad-blocking extension, the visit analytics above will be blocked as well.

We may add affiliate links to shopping sites such as Coupang, for example in shopping lists. These are plain links to another site, so the shopping site’s tracking code doesn’t run on our site, and we don’t put member information, body information or meal plans in the link address. Once you follow a link, that shopping site’s privacy policy applies. If you don’t want personalized ads, you can turn them off in your browser’s cookie settings or in Google’s “My Ad Center”.

You can delete it any time

When you delete your account, your meal plans and weight log are erased immediately with no grace period. Since this can’t be undone, you have to type a confirmation word before it runs.

Children under 14

Children under 14 cannot sign up. Because we only offer Kakao and Google login, we have no way to check your age, so you confirm it yourself when you log in.

Privacy officer

For questions about how your personal information is handled, please contact us below. The privacy officer will check and reply personally.

If something goes wrong

If you need advice or dispute mediation about a privacy violation, you can contact the organizations below (Korean public bodies).

Full text

This page is an easy-to-read summary. The full text — covering purposes of processing, retention periods by item, destruction procedures, security measures, and entrusted and overseas-transfer details — is on the Privacy Policy (full text) page.

This policy applies from October 7, 2026 (revised on 2026-10-07: added the scope of ad placement and affiliate links). If it changes, we’ll announce it on this page 7 days before it takes effect (30 days before for changes unfavorable to users).