Ninja - skolehjelpenPrivacy policy
Last updated: 2 November 2026
This is an English translation. If there is any difference, the Norwegian version applies.
In short: Ninja has no ads, no analytics tools and no tracking. Without a family account, everything is stored only on the device. With a family account, we store only what is needed for the family account to work.
Who is responsible?
Geir Birkeland is the data controller for personal data in the app Ninja - skolehjelpen. Send questions about privacy to support@ninja-app.no.
Without a family account
The names children enter, stars, progress and practice time are stored only on the device. We have no access to any of it. If you delete the app, everything is gone.
With a family account
When a parent creates a family account, we store:
- the parent's email address, for login with a one-time code
- the children's first names, as the parents enter them
- stars, progress, practice time and which subject and grade the child practises
- rules set by the parents: daily time limit, pause and an optional child code
- words of the week, vocabulary and dictation entered by the parents
- which devices are connected to the family, and when they were last used
- for subscriptions: Apple's transaction number, product and expiry date
We never receive names, card numbers or other payment details from Apple.
Why we use the data
The data is used only to provide the family account: showing progress across devices, managing practice time and sending words of the week to the children's devices. The legal basis is the agreement with the parent when the family account is used (GDPR Article 6(1)(b)).
Read-aloud
Text that does not already have an audio file in the app, such as words of the week and dictation, is sent to ElevenLabs or Google to be converted to audio. Only the text itself is sent, never names or anything else about the child. The audio files are stored in our own storage and reused.
Who processes the data for us?
| Provider | What | Where | Agreement |
|---|---|---|---|
| Supabase | Database, login and storage for the family account | EU | Data processing agreement |
| ElevenLabs | Read-aloud of text (text only) | May be outside the EEA | Data processing agreement |
| Google Cloud | Read-aloud of text when ElevenLabs does not respond (text only) | May be outside the EEA | Data processing agreement |
| Apple | Purchase and renewal of the subscription | Apple's own terms apply | Apple privacy |
We have data processing agreements with the providers that process data on our behalf. If data is processed outside the EEA, this is done on a lawful transfer basis, such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework. The basis is set out in the agreements linked above, where you can read or download a copy. We never sell data and do not share it with others.
How long we store data
Data is stored as long as the family account exists. If you delete a child, the child's data is deleted. If you delete the account under For foreldre → Familiekonto → Slett konto, everything we have stored is deleted, except Apple's transaction number and expiry date, which are kept without any link to the family. Stars on the devices remain until the app is deleted.
Children
Ninja is made for children, but the family account is created and managed by a parent. Purchases, settings and links out of the app are behind a parental gate.
Your rights
You can request access to, correction of and deletion of data about you and your children. Write to support@ninja-app.no. You can also complain to the Norwegian Data Protection Authority, Datatilsynet.
Changes
We update this policy when the app changes. The date at the top shows the latest change.