Privacy Policy

Last updated: September 27, 2026

Ninja ("Ninja", "we", "us") is a platform that cafés, restaurants and game lounges ("cafés") use to take orders, bookings and payments, and to run their business. Each café has its own customer app and website, in its own name, powered by Ninja. This policy explains what information is collected through Ninja, how it is used and shared, and the choices you have.

Who is responsible for your information

• If you are a café's customer (you order, book or collect points at a café that uses Ninja), that café decides how your information is used and is responsible for it. Ninja processes it on the café's behalf, to provide the service the café has chosen. Questions about how a particular café uses your information are best sent to that café; we will help it answer.
• If you run a café or work at one (an owner, manager or staff account), and for this website, Ninja is responsible for the information described here.

Information we collect

From customers

• Account details: your first and last name, email address, phone number and password. If you sign in with Google or Apple, we receive your name and email address from them (Apple may share a private relay address instead).
• Orders and bills: what you order, where (a table, a room, pickup), notes you add, totals, discounts and promo codes, and how you paid.
• Bookings and sessions: the places you hold or book, when, for how long, and who joined you.
• Loyalty: points earned and spent, and your tier.
• Device information: a notification token so the app can tell you when your order is ready or your booking is about to lapse, and basic technical data (device type, app version) used to keep the service working.
• Guest orders: if you order without an account, a random identifier kept on your device so the café can match your orders to you; the name and phone number you give, if any.

From cafés and their staff

• Owner and staff account details (name, email, phone, role, the branches they work at).
• What the café puts into Ninja to run its business: menus, prices, stock, suppliers, expenses, shifts, attendance and pay records.
• Billing and subscription details for the café's Ninja plan.

How information is used

• To create and secure accounts and sign you in.
• To send your order to the café, show you its progress, and keep your bill.
• To hold and time your bookings and sessions.
• To run the café's loyalty programme.
• To send notifications you asked for, such as an order being ready.
• To process payments, through the café's payment provider.
• To keep the service reliable and secure, to prevent fraud and abuse, and to fix problems.
• To meet legal obligations, such as keeping records of sales.

We do not sell personal information, and we do not use it to show you advertising.

Who information is shared with

• The café you order from or book with sees your orders, bookings, points and the contact details it needs to serve you.
• Service providers that help us run Ninja, under contracts that limit their use of the information to that purpose:
  • Google Sign-In and Sign in with Apple, if you choose to sign in with them (Google's privacy policy, Apple's privacy policy).
  • Firebase Cloud Messaging, for notifications (Firebase privacy).
  • Paymob, when a café takes online payments; your card details go to the payment provider directly and never through Ninja.
  • Google's Gemini, for the café owner's assistant in the admin app, which may read the café's business data (such as sales and stock) to answer the owner's questions.
  • The hosting and email providers our servers and messages run on.
• Authorities, when the law requires it, or to protect the rights, safety and property of our users, cafés or Ninja.
• A successor, if Ninja or a café's business is sold or merged, subject to this policy.

How long information is kept

Account information is kept while the account is open. Orders, bills and payment records are kept as long as the café needs them and the law requires for sales records. When a café stops using Ninja, its data is kept for a limited period so it can be exported, then deleted, except where the law requires us to keep it longer.

Deleting your account

You can delete your customer account at any time from the app: You → Settings → Delete account. Your profile is removed; records the café must keep by law (such as bills) are kept without being linked to your account. You can also ask us to delete it by writing to privacy@ninjapp.net from the email address on the account. See how to delete your account.

Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your information, and to object to or restrict how it is used. You can change your name and phone number in the app at any time. To exercise any other right, contact the café, or us at privacy@ninjapp.net.

Security

Each café's data is kept apart from every other café's, in its own database and sign-in realm. Connections are encrypted, passwords are never stored in readable form, and access to personal information is limited to the people who need it.

International transfers

Our servers and some of our providers may be in countries other than yours. Where information moves between countries, we rely on the safeguards the law provides for such transfers.

Children

Ninja is not meant for children under 13, and we do not knowingly collect their information. If you believe a child has given us information, contact us and we will delete it.

Changes to this policy

We may update this policy. We will post the new version here with its date, and tell you in the app or by email when a change is significant.

Contact

For privacy questions: privacy@ninjapp.net. For anything else: hello@ninjapp.net.