Last Updated: August 2026
This Privacy Policy describes how ninja-tch ("we", "our", or "us") collects, uses, and shares information about you when you use our mobile application and related services (collectively, the "Service").
Your messages are never sent to any server. They travel directly between two phones over Bluetooth Low Energy. We receive data in exactly one situation: when you choose to report or block someone. That is the only time anything leaves your device for us.
ninja-tch does not require you to create an account or provide any personal information to use the app. The app is designed to work immediately without any sign-up or registration.
While you are simply chatting, we collect nothing. There is no analytics, no telemetry, and no server involved in delivering a message. Messages are exchanged directly between devices over Bluetooth Low Energy.
Apple's App Store guidelines require apps carrying user-generated content to provide a way to report objectionable content and block abusive users. When you use either control, we receive:
Blocking someone files the same report automatically, because Apple requires that blocking also notify the developer of the offending content.
The following is stored locally on your phone and is not transmitted anywhere:
Message content itself is still not persisted. It exists only while the app is showing it.
The device identifier is a random 8-character value generated on your phone. It is not linked to your name, account, email address, phone number, contacts, or location. It is not shared with any third party, is not used for advertising, and is not used to track you across apps or websites. Its only purpose is to make blocking durable and to let us ban a device that sends objectionable content.
Reported content and the identifiers attached to it are used for one purpose: reviewing reports and enforcing the terms of use. Reports are reviewed within 24 hours. Devices that send objectionable content are banned and can no longer use the app.
We do not use this data for advertising, profiling, or any purpose unrelated to safety.
We do not share, sell, or rent your data to third parties.
Reports are stored using Google Firebase (Cloud Firestore), which hosts the data on our behalf. No other third party receives it.
Ordinary messages are transmitted directly between two devices via Bluetooth Low Energy. They do not pass through any server, cloud service, or third party. This remains true for every message you do not report.
Reports are stored on Google Cloud infrastructure and are readable only by us. The app cannot read reports back — the reporting endpoint accepts submissions and nothing else.
Reports are retained for as long as safety enforcement requires, so that repeat offenders can be identified. Message content that was never reported is never stored anywhere but on the two devices involved.
To request deletion of reports associated with your device, email derushev.aleksei@gmail.com and quote the device ID shown in the app's SAFETY menu. We cannot locate your data without that ID, because we hold nothing else that identifies you.
You can request access to, or deletion of, reports associated with your device ID using the contact details above.
You can uninstall the app at any time. Uninstalling removes everything stored on your device, including the device identifier and your blocklist. Reports already delivered to us are retained as described above.
You must be at least 13 years old to use ninja-tch. The app carries messages from strangers who are physically near you. The content filter reduces exposure to objectionable language but cannot guarantee that everything you receive is inoffensive, which is why reporting and blocking controls are attached to every message you receive.
ninja-tch requires Bluetooth permissions to function. These permissions are used solely for discovering nearby devices and establishing BLE connections for messaging. No location data is collected, stored, or transmitted.
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.
If you have any questions about this Privacy Policy, please contact us:
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we hold and to request its deletion. The only data we hold is described in section 2.3. We do not sell personal information. To exercise these rights, contact us using the details above and quote your device ID.
If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including access, rectification, erasure, and objection. The lawful basis for processing report data is our legitimate interest in keeping the Service safe and in meeting the platform obligations that apply to apps carrying user-generated content.
Because we hold no information that identifies you beyond a random device identifier, please quote that identifier when exercising any of these rights.