1) Scope
This unified Privacy Policy covers the Ninja Track iOS app and the Ninja in Brazil web application and website. “We”, “us”, and “our” refer to Medovyy LLC DBA Ninja in Brazil. Our mailing address is listed on the Contact page.
2) iOS App (Ninja Track)
- Data collection: The app does not collect, transmit, or store any personal data. All data remains on your device.
- Notifications: The app may request permission to send local notifications only. No device token is collected and no remote push is used.
- Tracking and ads: No tracking, advertising identifiers, third‑party advertising, or analytics are used.
- Web views: The iOS app does not open web views.
- Children’s privacy: The app is not directed to children; use is intended for a general audience 13+.
- App Store privacy summary: “Data Not Collected.”
3) Website and Web App
The web experience is account‑based and stores limited data in our database. We target users globally.
- Account and identity: We authenticate using your GitHub account. We store your GitHub account identifier and your email address.
- Purpose of use: To provide core functionality of the service, maintain accounts, and communicate essential updates. We do not sell data and do not show ads.
- Analytics: We use Vercel Analytics in a mode that does not identify individual users.
- Cookies: We use only essential cookies necessary for the site to function.
- Newsletter: If you opt in, we send email via Kit (kit.com). You can unsubscribe at any time via a link in each email.
- Processors/Sub‑processors: Vercel (hosting and analytics), Vercel Postgres (database), GitHub (OAuth), and Kit (email). We use these providers solely to operate the service.
- Security: Data is encrypted in transit and at rest. Access is restricted on a need‑to‑know basis.
- Retention: Account data is retained while your account is active. If you delete your account, production data is removed and backups age out within 45 days.
- Deletion: You can delete your account and associated data via the web app. Backup copies are purged automatically after the 45‑day retention window.
4) Legal Bases and Rights
Where required (e.g., GDPR, UK GDPR, LGPD, CCPA/CPRA), we process personal data primarily to provide the service you request and to maintain security. Depending on your region, you may have rights to access, correct, delete, or export your data, and to object or restrict certain processing. To exercise rights, use the Contact page.
5) Sharing
We do not sell personal information. We share data only with the processors listed above to operate the service, and otherwise as required by law.
6) International Transfers
Your information may be processed in countries where our providers operate. We use appropriate safeguards where required by law.
7) Changes
We may update this Privacy Policy periodically. Material changes will be posted here with an updated “Last updated” date.
8) Contact
Medovyy LLC DBA Ninja in Brazil — see our Contact page for the current mailing address and support channels.