Privacy Policy for NinjamZap
Last Updated: November 11, 2025 | Effective Date: November 11, 2025
Introduction
NinjamZap ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application NinjamZap (the "App").
By using the App, you agree to the collection and use of information in accordance with this policy.
Information We Collect
1. Information You Provide
Account Information (Optional):
- When you create an account, we collect: email address, display name, profile information (optional: location, birth date)
OAuth Authentication (Optional):
- When you sign in with Google, Microsoft, or Facebook, we receive: your name, email address, profile picture (if available), OAuth provider user ID
Guest Mode:
- Guest users do not provide any personal information
- Only a temporary username is used (stored locally on device)
2. Information Automatically Collected
Audio Data:
- Microphone access is required for music jamming
- Audio is transmitted in real-time to NINJAM servers
- Audio is NOT stored or recorded by NinjamZap
- Audio streams are deleted immediately after transmission
Usage Data:
- App usage statistics
- Crash reports and diagnostics
- Performance metrics
Device Information:
- Device type and model
- Operating system version
- App version
- Unique device identifiers (for crash reporting)
How We Use Your Information
- Providing Services: Connecting you to NINJAM servers, transmitting audio streams for real-time jamming, enabling chat functionality, managing user accounts (optional)
- Improving the App: Analyzing usage patterns, fixing bugs and crashes, optimizing performance, developing new features
- Authentication: Verifying user identity (optional), managing OAuth sessions, secure API communication
- Communication: Responding to support requests, sending important app updates, notifying about service changes
Data Storage and Security
Storage
Backend Storage (Optional Accounts Only):
- User account data is stored on secure MongoDB Atlas servers
- Files are stored on AWS S3
- All data is encrypted in transit (HTTPS/TLS)
- Data at rest is encrypted
Local Storage:
- Guest mode preferences stored on device only
- App settings cached locally
- No personal information stored for guest users
Security Measures
- Industry-standard encryption (TLS 1.2+)
- Secure password hashing (bcrypt)
- OAuth 2.0 for third-party authentication
- Regular security audits
- Minimal data collection principle
Data Retention
- Account data: Retained until account deletion
- Guest data: Deleted immediately upon app closure
- Logs and analytics: Retained for 90 days
- Audio streams: Never stored (deleted immediately)
Third-Party Services
NINJAM Servers
- NinjamZap connects to third-party NINJAM servers (e.g., ninjamer.com, ninbot.com)
- These servers are operated by independent entities
- Your audio and chat data is transmitted to these servers
- We are NOT responsible for third-party server privacy practices
- Please review the privacy policies of servers you connect to
OAuth Providers
When using social login, you also agree to:
Analytics and Crash Reporting
- We may use Firebase Analytics and Sentry for crash reporting (optional)
- These services collect anonymized usage data
Data Sharing and Disclosure
We do NOT sell your personal information.
We may share your information in these situations:
- NINJAM Servers: Your audio stream and username are shared with servers you connect to. This is essential for the service to function.
- Service Providers: Cloud hosting (AWS, MongoDB Atlas), authentication providers (Google, Microsoft, Facebook), analytics services (if implemented)
- Legal Requirements: When required by law, to protect rights and safety, in response to valid legal requests
- Business Transfers: In case of merger, acquisition, or asset sale
Your Privacy Rights
Guest Users
- No account data is collected
- Use the app anonymously
- Delete local data by uninstalling the app
Registered Users
You have the right to:
- Access: Request a copy of your data
- Correction: Update incorrect information
- Deletion: Request account deletion
- Export: Download your data
- Opt-Out: Disable analytics (if available)
To exercise these rights: Email [email protected] or use in-app settings: Account → Privacy
Children's Privacy
NinjamZap is rated 4+ and suitable for all ages.
- We do not knowingly collect personal information from children under 13
- Guest Mode is recommended for younger users
- Parental supervision is recommended
- If you believe a child has provided us with personal information, contact us
International Users
Data Location: Servers located in the United States (AWS US-East-1), MongoDB Atlas (US region). Data may be transferred internationally.
GDPR Compliance (EU Users): Right to access, rectification, erasure. Right to data portability. Right to object and restrict processing. Lawful basis: Consent and legitimate interest.
CCPA Compliance (California Users): Right to know what data is collected. Right to delete personal information. Right to opt-out of sale (we don't sell data).
Cookies and Tracking
Mobile App: No cookies used in the native app. Device identifiers used for crash reporting. OAuth tokens stored securely on device.
Web Services (if applicable): Session cookies for authentication. Analytics cookies (optional).
Changes to This Privacy Policy
We may update this Privacy Policy periodically. We will notify you of changes by updating the "Last Updated" date, posting a notice in the app, and sending an email notification (registered users). Continued use of the app after changes constitutes acceptance.
Data Breach Notification
In the event of a data breach: affected users will be notified within 72 hours, notification via email and in-app alert, details of breach and remediation steps provided.
Contact Us
If you have questions about this Privacy Policy:
Email: [email protected]
GitHub: github.com/jacinside/ninjamzap-core
Response Time: We aim to respond within 48 hours
Consent
By using NinjamZap, you consent to this Privacy Policy.
Guest Mode Users: By tapping "Continue as Guest," you agree to the transmission of audio data to NINJAM servers.
Registered Users: By creating an account, you agree to the collection and processing of your account information.
Summary
What we collect: Email (optional, for accounts), audio (transmitted, not stored), basic device info.
What we DON'T do: Sell your data, store your audio, track you across apps, require registration.
Your control: Use Guest Mode for full privacy, delete account anytime, review and export your data.
NinjamZap is an independent project and is not affiliated with Cockos Inc. or the official NINJAM project.