Privacy
UI Ninja Inc uses account, project and support information to provide UI Ninja. This notice describes the current beta service.
Information we process
Account information includes your email address and session identifiers. Supabase handles password authentication. Project information includes screens, flows, properties, uploaded resources, licenses, history and operation receipts.
The contact form collects your name, email address and message. It sends those details to our private support inbox. Do not include passwords or access tokens in a support message.
How we use it
We use this information to authenticate accounts, save projects, produce requested files, enforce access and plan limits, recover interrupted operations and answer support requests.
We do not sell your project content or use it to train AI models. The Assistant currently uses placeholder replies; no external AI endpoint receives project content through that feature.
Service providers
Supabase provides authentication, database and private file storage. Cloudflare serves the public pages and runs the private API and email delivery. These providers can process information across their networks.
We do not add advertising trackers to UI Ninja. Providers can process technical request information to operate and protect their services.
Browser storage
The app stores login transport, authorized project views, media and unresolved requests on your device. Password sessions expire twelve hours after sign-in. Signing out removes login state, but cached project views, media and pending work can remain in browser storage.
Retention and removal
Free plans will be deleted after 90 days of inactivity. This means 90 consecutive days without an account sign-in. Removal is handled manually; the service does not run an automatic inactivity-deletion job.
Projects remain in Trash until restored or permanently deleted. Permanent deletion starts removal of project content and files. Minimal operation records can remain to prevent repeated effects or recovery of deleted data. Provider backups and logs follow the providers’ retention processes.
Browser caches are separate from server storage and are not automatically erased by an account-deletion request.
Contact and account requests
Use the contact form to ask about your information, request a correction or request account deletion. We confirm account ownership and handle these requests manually.