Privacy Policy

1. Who we are

Ninja Tab is operated by Ninja Tab Ltd., based in the United Kingdom.

If you have any questions about this policy or how we handle your data, contact us at: seb@tab.ninja

2. Information we collect

We collect only the information needed to operate the service.

Account information

When you create an account we collect:

• Your email address
• Your nickname

Your email address is used to authenticate your account and send login links.

Tab and expense information

When you create or participate in a tab we store information related to the expenses recorded in that tab. This may include:

• Tab name
• Expense descriptions
• Amounts and currencies
• Itemised bill details
• How expenses are split
• Participant nicknames
• Participant email addresses if they register

Participants who do not create an account may still appear in tabs using only a nickname.

Analytics and usage information

We use analytics tools to understand how the service is used and to improve the product. These tools may collect information such as:

• Pages visited
• Device and browser information
• Approximate location
• Interactions with the site

On the web we use Google Analytics and PostHog. On the mobile app we use PostHog for analytics and Sentry for crash and error reporting. Sentry may collect device information, app version, and a stack trace when the app encounters an error.

3. How we use your information

We use the information we collect to:

• Provide the Ninja Tab service
• Allow users to create and manage shared expense tabs
• Authenticate users
• Improve reliability and performance
• Understand how the service is used
• Support product development and marketing

We do not sell personal data.

4. Images of receipts and bills

Users may upload images of receipts or bills when recording expenses in a tab.

When using the mobile app, you may be prompted to grant access to your device's camera (to take a photo of a receipt) and your device's photo library or files (to select an existing image). These permissions are used solely to allow you to upload receipt images when recording expenses. We do not access your camera or photo library for any other purpose.

These images may be sent to a third-party service to help extract information such as totals, items, or amounts from the receipt.

Receipt images may be stored on our servers so that they can be viewed or downloaded by participants of the tab as part of the expense record.

We may also retain copies of uploaded images in order to diagnose technical issues, improve receipt processing, and debug problems with the service.

Information extracted from receipt images may not always be accurate. Users are responsible for reviewing and confirming any automatically extracted information before relying on it when recording expenses.

Users are responsible for the content of images they upload and should avoid including sensitive personal information that is not relevant to recording the expense.

5. Device permissions (mobile app)

The Ninja Tab mobile app may request the following device permissions:

• Camera — to take photos of receipts or bills when recording an expense.
• Photo library / storage — to select existing images from your device when uploading a receipt.
• Internet access — to communicate with Ninja Tab servers.

You can revoke any permission at any time through your device settings. Revoking camera or photo library access will prevent you from uploading receipt images but will not affect other features.

6. Legal basis for processing

Under UK GDPR we process personal data on the following legal bases:

• Contract — To provide the Ninja Tab service requested by users.
• Legitimate interests — To operate, analyse, and improve the service.
• Consent — Where required for analytics or cookies.

7. Data sharing

We share limited data with service providers that help us operate the service, including:

• Google Analytics — web analytics
• PostHog — product analytics (web and mobile)
• Sentry — crash and error reporting (mobile app)
• Infrastructure and hosting providers

Service providers process data on our behalf and are required to protect it. We do not sell personal data to third parties.

8. International transfers

Some service providers may process data outside the United Kingdom. Where this occurs we rely on appropriate safeguards such as contractual protections or recognised data protection frameworks.

9. Data retention

We keep personal data for as long as it is necessary to operate the service. Account information and tab data may be retained while accounts remain active so that users can access and manage their tabs and expense history.

Because tabs may involve multiple participants, removing one user's account may not remove all records of their participation in shared tabs.

If you would like your data removed from the service, you can request deletion by contacting us at seb@tab.ninja.

10. Your rights

Under UK GDPR you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to certain types of processing
• Request a copy of your data

To exercise these rights, contact us at seb@tab.ninja.

11. Children's privacy

Ninja Tab is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at seb@tab.ninja and we will delete it.

12. Security

We take reasonable steps to protect personal data using secure infrastructure and access controls. Data is transmitted using encrypted connections (HTTPS/TLS). However, no system can be completely secure.

13. Changes to this policy

We may update this privacy policy occasionally. When we do, the date at the top of this page will be updated.

14. Contact

For privacy-related questions please contact:

seb@tab.ninja