Privacy Policy
Last updated: October 29, 2026
Ninja: Goals & Habits ("Ninja", at ninja.yia.one) is operated by Y-Intelligence Agency Inc., Toronto, Ontario, Canada ("we", "us"). This policy explains what we collect, why, and your choices. Ninja is offered to people in the United States and Canada.
What we collect
- Account: your email address. You sign in with a one-time magic link sent to that email; we do not store a password.
- Goal content: your Wheel of Life scores, goals, milestones, steps, check-in messages, AI replies, summaries and weekly reviews.
- Waitlist: if you joined the waitlist on our landing page before sign-up opened, your email, optional goal area, approximate country, and how you found us (referrer and campaign tags in the link). We use this only to contact you about access to Ninja; you can ask us to delete it at any time.
- Sign-up source: if you arrive from a campaign link, the campaign tags (such as utm_source) and the referring site's name are saved with your sign-up event. No IP address or device fingerprint.
- Usage: simple in-app events (for example "completed a step" or "opened checkout"), AI usage counts and costs. We do not store your IP address or device fingerprint with these events.
- AI consent and reports: your AI-sharing choice with its date and wording version, and any AI reply you report to us (the reason, your optional note and a copy of that reply), which we review to improve safety.
- Reminders: push-notification subscription details if you enable them, and your reminder preferences.
- Payments: handled by Stripe. We receive your Stripe customer and subscription IDs, plan, and payment status, but never your full card number.
How we use it
To provide goal setting, reminders and progress tracking; to run the subscription; to keep costs and abuse under control; and to improve the product. We do not sell your personal information and we do not use it for third-party advertising.
Service providers
- Supabase stores your account and goal data (United States).
- Vercel hosts the app, including the Vercel AI Gateway.
- AI model providers (Google, for Gemini models, and OpenAI, for GPT models, reached through the Vercel AI Gateway) process the text of your chat messages, goal and steps, and the profile details you added (such as name, birth year and gender), to generate replies and goal drafts. We send only what is needed for the reply, and only after you agree: Ninja asks for your explicit permission before the first AI use, and you can withdraw it at any time in Settings → AI & privacy. If you decline, nothing you write is sent to an AI provider and the rest of the app keeps working. These providers handle the data under their API terms.
- Stripe processes payments and runs the billing portal.
- Resend sends sign-in and reminder emails.
These providers may process data in the United States or other countries. When you use Ninja, your information may be stored and processed outside your province or state.
Retention and deletion
We keep your data while your account is active. You can ask us to export or delete your account and goal data at any time by emailing us; we will act within 30 days, except for records we must keep by law, such as payment records.
Your rights
Depending on where you live (for example, under PIPEDA in Canada or state privacy laws such as the CCPA in California), you may have the right to access, correct, delete or port your personal information, and to withdraw consent. Email us to make a request; we will not discriminate against you for exercising these rights.
Security
We use encryption in transit, per-user access controls on the database, and limited staff access. No system is perfectly secure, so please keep your email account secure.
Children
Ninja is not intended for people under 18.
Changes
If we make material changes, we will post the update here and notify you in the app or by email.
Contact
Y-Intelligence Agency Inc., Toronto, Ontario, Canada · dan@yonezawa.io
