Privacy Policy

1. Two different relationships

Merchants and staff. If you open a Ninja AI account, or you work at a business that uses Ninja AI, we decide why we hold your account data. Under the Ordinance, we are the data user for that account data.

Diners. If you order at a restaurant that uses Ninja AI, that restaurant decides what to collect about you and why. The restaurant is the data user for your order and for any customer record it keeps. We process that data so the restaurant can take the order, send it to the kitchen, print or email a receipt, and keep its sales records. To see or correct that data, start with the restaurant. We will help the restaurant when it asks us to.

2. What we collect

Merchant and staff accounts

• Name, username, email address, and phone number
• A password, stored only as a hash
• A staff PIN, stored only as a hash
• Your role in the store, and your language or display preference
• A Wonder user id, if you sign in with Wonder
• A verification code sent to your phone or email when you confirm those details

The restaurant’s own details

Store name, address, phone number, email address, logo, opening hours, and receipt settings.

Orders

• Items, quantities, prices, discounts, service charge, and the total
• The name of the payment method, such as cash or card
• Notes on the order, the table, and the order number

A copy of an open bill may stay on the restaurant’s tablet so the store can keep selling if the network drops. That copy sits on the restaurant’s device until it syncs.

We do not store the full card number, expiry date, or card security code. When a restaurant takes a card on a Wonder terminal, the terminal and the payment provider handle the card. They do not pass the full card number to Ninja AI.

Customer records the restaurant keeps

If the restaurant uses the customer list in Ninja Center, it may enter a customer’s name, gender, date of birth, mobile number, phone number, email address, addresses, photo, notes, store credit, and discount entitlements. The restaurant types this in. The POS app does not include this customer list.

Guest ordering

A table QR code does not create a diner account. People at the same table can see the orders for the current sitting. The next party at that table does not see the previous party’s orders.

If you place a takeaway or pickup order, we collect the name and phone number you enter, the pickup time, and any note you type. If a receipt is emailed, we use the email address given for that receipt.

Devices

For a tablet running Ninja POS we store a device id, device name, model, and IP address. We use these so tablets in the same restaurant can find each other and share open bills.

The website and dashboard

When you browse getninja.ai or sign in to Ninja Center, our servers may record the IP address, browser type, the page requested, and the time. We store your language choice in the browser. A cookie remembers whether the dashboard sidebar is open. A sign-in cookie keeps you logged in.

We do not use advertising cookies, and we do not connect Ninja AI to advertising or social networks such as Google Ads, Facebook, or Twitter. We do not collect facial images or biometric templates.

Menu tools

If a merchant scans a menu or asks for a translation, the menu text or image is sent to an AI provider so it can return the result. This is the restaurant’s menu content.

3. How we use personal data

• To create and run merchant and staff accounts
• To take orders, print kitchen tickets and receipts, and show the bill
• To email a receipt when one is requested
• To let tablets in one store share open bills, including while a tablet is offline
• To verify a phone number or email address
• To answer messages sent to support.apac@bindo.com
• To keep the service secure and to investigate misuse
• To meet a legal duty

We do not sell personal data. We do not rent it. We do not give diner details to advertisers.

4. Who we share it with

• The restaurant. Its staff can see the orders and customer records for their own stores.
• Supabase, which hosts the database and account sign-in.
• Wonder, which sends verification codes and operates the in-store card terminal.
• An AI provider, only when a merchant uses menu scanning or menu translation.
• An email service, only when a receipt is sent by email.
• A buyer of the business, if Bindo Labs Limited or Ninja AI is sold or merged. Personal data may transfer with the business.
• Authorities and advisers, when the law requires it, a court orders it, or we need to protect the rights, property, or safety of the company, a restaurant, or another person. This includes what is necessary to investigate fraud.

These providers may process data outside Hong Kong. We do not name a single storage country here, because each provider runs its own infrastructure.

A link from a restaurant’s page to another website is covered by that website’s own policy.

5. How long we keep it

We keep merchant and staff account data while the account is in use. We keep orders and customer records while the restaurant uses Ninja AI, and afterwards for as long as we need them to finish the service, handle a dispute, or meet a legal duty.

If a merchant asks us to close the account, we delete or de-identify the personal data we no longer need for those purposes. Copies of bills on a restaurant’s own tablets are under that restaurant’s control.

6. Security

We store passwords and staff PINs as hashes, and we send data over encrypted connections. No method is perfect. Keep passwords and PINs to yourself. The restaurant should control who can use its tablets.

7. Your rights

You may ask what personal data we hold about you, and you may ask us to correct it. Email support.apac@bindo.com. We will reply within 40 days, which is the period set by the Ordinance.

If you ordered as a diner, contact the restaurant first. The restaurant decides what is on your order and in its customer list. If the restaurant asks us to correct or delete data we hold for it, we will do so.

We may ask you to confirm who you are before we act. We may refuse a request where the Ordinance allows it, and we will tell you why.

We do not pass your details to other companies for their marketing. If we email a merchant about Ninja AI itself, the merchant can tell us to stop.

8. Children

Ninja AI is a tool for businesses. We do not knowingly open an account for a child.

9. Changes

We post changes on this page and change the date at the top. A change that affects how we use personal data takes effect 30 days after we post it, unless the law requires a shorter time.

10. Law

This policy is governed by the laws of the Hong Kong Special Administrative Region. The courts of Hong Kong have exclusive jurisdiction. The English text prevails if another language disagrees with it.

11. Contact

Bindo Labs Limited. Email: support.apac@bindo.com. Write to that address for a privacy request. We have not published a postal address on this page.