Privacy Policy

Last updated: April 30, 2026 · Effective date: April 30, 2026

Solmind IT ("we", "us", "our") operates the Vegeketo service ("Service"). This Privacy Policy explains what personal data we collect, how we use it, and the rights you have. We comply with the Personal Information Protection Act (Korea, "PIPA"), the General Data Protection Regulation (EU, "GDPR") where applicable, and other applicable laws.

1. Data We Collect

1.1 Account data: email address, encrypted password, display name, year of birth, gender, country.
1.2 Health-related inputs (provided by you): height, weight, dietary preferences, fasting logs, meal entries, activity. These are processed only at your direction.
1.3 Payment data: name, billing address, transaction ID. Full card numbers are processed and stored only by our payment partners (TossPayments, Stripe). We do not see or store full card details.
1.4 Technical data: IP address, device type, OS, browser, language, access timestamps.
1.5 Communications: emails or messages you send us.

2. How We Use Your Data

We use personal data to:
a) Provide, maintain, and improve the Service;
b) Authenticate users and protect accounts;
c) Process payments and manage subscriptions;
d) Send transactional emails (verification, password reset, receipts);
e) Send marketing communications, only with your consent (you may withdraw consent anytime);
f) Generate aggregated, de-identified analytics;
g) Comply with legal obligations.

3. Legal Basis (GDPR users)

We process personal data on the basis of: (i) performance of contract (Service delivery), (ii) consent (marketing, optional features), (iii) legitimate interests (security, fraud prevention, product improvement), and (iv) legal obligation (tax, accounting).

4. Sharing Your Data

We do not sell your personal data. We share it only with:
a) Service providers acting on our behalf: payment processors (TossPayments, Stripe), email delivery (Gmail SMTP / SendGrid), cloud hosting (located in the Republic of Korea), analytics (anonymized);
b) Legal authorities when required by law;
c) Business transfers in case of merger, acquisition, or asset sale, with notice to you.

5. International Transfers

Our primary servers are located in the Republic of Korea. If you access the Service from outside Korea, your data is transferred to and processed in Korea. For users in the EU/UK, transfers rely on Standard Contractual Clauses or equivalent safeguards.

6. Data Retention

a) Account data: retained while your account is active, deleted within 30 days after account deletion (except as required by law);
b) Payment records: 5 years (Korean Commercial Act);
c) Consumer dispute records: 3 years (E-Commerce Act);
d) Marketing logs: until consent withdrawal, then 6 months.

7. Your Rights

You have the right to:
a) Access the personal data we hold about you;
b) Request correction of inaccurate data;
c) Request deletion of your data ("right to be forgotten");
d) Restrict or object to processing;
e) Data portability (receive your data in a machine-readable format);
f) Withdraw consent at any time.
To exercise these rights, contact us at contactvegeketo@gmail.com. We respond within 30 days.

8. Security

We use industry-standard measures including TLS encryption in transit, hashed passwords (bcrypt), access controls, regular security audits, and limited access to personal data on a need-to-know basis. No system is 100% secure; please use a strong, unique password.

9. Children's Privacy

The Service is not directed to children under 14. We do not knowingly collect data from children under 14. If we learn we have collected such data, we will delete it promptly.

10. Cookies

We use essential cookies for authentication and session management. We may use analytics cookies (with your consent) to understand usage patterns. You can disable cookies in your browser settings; however, some features may not function properly.

11. Changes to This Policy

We may update this Policy from time to time. We will notify you of material changes via email or in-Service notice at least 7 days in advance.

12. Data Protection Officer / Contact

Data Protection Officer: Lee Gwang-jo, CEO of Solmind IT
Email: contactvegeketo@gmail.com
Address: A-101, 8-18 Jangmokdong-gil, Geumseong-myeon, Geumsan-gun, Chungcheongnam-do 32717, Republic of Korea
Phone: +82-70-4070-3369

If you are unsatisfied with our response, you may contact your local data protection authority. Korean residents may contact the Personal Information Protection Commission (privacy.go.kr / 1833-6972).