Privacy Policy
Last updated: 27 October 2026
1. Who we are and what this policy covers
This policy explains how Ninja Timer (“Ninja Timer”, “we”, “us”) handles personal information through the Ninja Timer app, websites, competition tools, training features, Live Results, broadcasts, head-to-head features, analytics, media tools, support channels and related services. It is intended to be read alongside feature-specific notices and any event organiser privacy notice.
Our privacy contact is ninjatimerinfo@myyahoo.com. This policy must be tailored to the entity’s actual practices and reviewed against the Privacy Act 1988 (Cth), Australian Privacy Principles and any other applicable laws.
2. Information we may collect
• Account and contact information: name, email, username, organisation and account/security settings, where supplied.
• Athlete and event information: athlete names or display names, bibs/identifiers, divisions, check-in status, event/course details, scores, times, rankings, personal bests, split times, training history and competition records.
• Content and media: notes, comments, feedback, uploaded/imported files, photos, videos, logos, certificates, reports and course/gym maps, where the relevant feature is used.
• Technical and usage information: device and app version, operating system, browser, approximate diagnostic information, logs, crash reports, feature usage, access times and IP address where collected by our services or providers.
• Support and communications: messages, enquiries, complaint details and information needed to resolve issues.
• Broadcast and sharing information: public event codes, link/access activity, published results and display configuration, where applicable.
• Payment and licensing information: transaction status, plan, licence, billing contact and records. Payment card data may be handled directly by a payment provider rather than by us.
• AI-related inputs and outputs: prompts, questions, competition context and generated responses where an AI-assisted feature is used. The actual collection depends on whether the feature operates locally or through a connected provider.
• Information supplied by an organiser, gym, school, league or guardian: athlete/event records entered on behalf of participants, subject to the organiser’s authority and applicable law.
We do not intend to collect sensitive information unless a feature or circumstance makes it necessary and there is a lawful basis. Users should not place medical details, precise home addresses, dates of birth or other sensitive information in general notes, public results or AI prompts unless expressly required and appropriately authorised.
3. How information is collected and held
Information may be entered directly by you, entered by an authorised organiser/coach/guardian, generated by use of the Services, received through an integration, or collected by hosting and service providers. Some data may remain on your device using local storage. Other data may be transmitted to a backend, cloud database, website host, media service or third-party provider to enable synchronisation, public results, broadcasting, support or other online features.
Before publication, Ninja Timer must document the actual systems used, including app storage, backend/database, website hosting, media storage, analytics, crash reporting, messaging, payment and AI providers; the categories each provider receives; security measures; and relevant storage/processing countries. Do not publish an assumed list as fact.
4. Why we use information
• Provide timers, scoring, event administration, training, athlete history, analytics, reports and user support.
• Operate optional live results, shared links, public leaderboards, head-to-head challenges and broadcast/display features that an authorised user enables.
• Save and synchronise data where supported, troubleshoot issues, maintain service security and prevent abuse.
• Identify possible data entry, timing, scoring or configuration anomalies for human review.
• Respond to requests, manage licences and subscriptions, comply with law, resolve disputes and protect users and service integrity.
• Understand aggregate feature adoption and product performance, improve usability and plan development.
• Provide AI-assisted responses or recommendations when the relevant feature is used and its data handling has been disclosed.
• Send service notices and, where permitted, marketing communications subject to applicable consent and opt-out requirements.
5. Public results and broadcasting
Live Results, public leaderboards, QR codes, share links and broadcast systems can make selected information visible beyond the app, potentially to anyone with the link or access to a display. Publicly displayed information may be copied, photographed, cached, indexed, recorded or reshared by others. Removing it from Ninja Timer may not remove independent copies.
Organisers must decide what information is appropriate to publish, confirm their authority and permissions, and avoid publishing sensitive information. Where practicable, provide clear choices about public display and avoid exposing information that is not necessary for the event. For child athletes, organisers should apply additional care, comply with applicable consent and child-safety obligations, and consider private display or a non-identifying alternative.
6. Children and young people
Ninja Timer may be used in gyms, schools, camps and youth competitions. Organisers, schools, gyms and guardians must ensure they have the authority and any notices, permissions or consents required to provide a child’s information and enable publication or media use. We may introduce age-appropriate defaults, guardian controls and limits on public sharing as the platform develops.
We do not intend to use children’s information for unrelated advertising or profiling. If you believe a child’s information has been provided or published without appropriate authority, contact ninjatimerinfo@myyahoo.com promptly. We will assess the request and take appropriate steps, subject to legal and recordkeeping requirements.
7. AI and automated processing
Some AI features may process questions, event configuration, results or training-related context to generate suggestions, summaries or alerts. Current Ninja IQ functionality described in the supplied app code includes local/offline responses and rule/anomaly checks; future AI features may work differently. This policy must be updated before any external AI service receives personal information.
Where an external AI provider is used, the feature notice should explain what information is sent, the provider’s role, whether prompts/outputs may be retained or used to improve provider services, the applicable retention controls and any international processing. Do not assume that all AI processing is local or that providers never retain data.
AI-generated outputs may be inaccurate and are not final judging decisions, medical advice or a substitute for qualified coaching. If automated processing is used to make, or materially support, a decision that could significantly affect an individual’s rights or interests, we will assess and disclose the processing and available review processes as required by applicable law.
8. When we disclose information
We may disclose information to service providers who help operate the Services; to an organiser or organisation that manages the event or account; to viewers where a user enables public sharing; to professional advisers; to payment or app-store providers; and to regulators, law enforcement or other parties where required or authorised by law. Information may also be transferred as part of a genuine business sale, restructuring or similar transaction with appropriate safeguards and notices where required.
We do not sell personal information as a standalone data-broker product. Any use for targeted advertising, cross-service tracking or unrelated commercial purposes must be separately assessed, disclosed and supported by a lawful basis before implementation.
9. Overseas disclosures
Some providers may store or process information outside Australia. Before publication, identify the likely countries for relevant hosting, support, analytics, AI, payment and media providers where practicable, and explain the safeguards and accountability arrangements. Do not promise that information stays in Australia unless verified.
10. Retention and deletion
We retain personal information only for as long as reasonably necessary for the disclosed purposes, legal obligations, security, dispute resolution and legitimate recordkeeping. Retention periods may differ between local device data, event records, public results, media, support tickets, logs and backups. Before launch, publish a retention schedule or meaningful criteria for each category.
You may request access to, correction of or deletion of personal information using ninjatimerinfo@myyahoo.com. We will verify the request and respond in accordance with applicable law. Deletion may be limited where an organiser controls the record, information is required for legal or competition integrity purposes, a backup has not yet cycled out, or retention is otherwise lawful. Where possible, we will explain the reason and any alternative, such as de-identification or restricting public display.
11. Access, correction and complaints
To request access or correction, or to complain about privacy handling, contact ninjatimerinfo@myyahoo.com and describe the information and concern. We will acknowledge and investigate the complaint within a reasonable period, request additional details if needed, and explain the outcome. If you are not satisfied, you may be able to complain to the Office of the Australian Information Commissioner (OAIC) or another relevant regulator.
12. Security and incidents
We use reasonable measures appropriate to the information and risk to protect personal information against misuse, interference, loss and unauthorised access, modification or disclosure. Controls may include access restrictions, authentication, secure transmission where implemented, backups, logging and provider security review. No system can be guaranteed completely secure. We will assess suspected breaches and notify affected people and regulators where required by law.
13. Cookies and analytics
The website or online Services may use cookies, local storage, logs or similar technologies for essential operation, preferences, security, analytics or performance. The exact technologies and choices depend on the website and providers actually deployed. Browser settings may allow you to block some cookies, but doing so may affect functionality. If non-essential analytics, advertising or tracking technologies are used, provide the required notice and consent/opt-out choices.
14. Third-party services and links
Third-party websites, app stores, payment systems, hosting, media or AI services have their own privacy practices. This policy does not replace those policies. We will identify relevant providers where required and assess their data handling before enabling them in a way that affects personal information.
15. Changes and contact
We review this policy as the product and law evolve. We will update the effective date and provide notice or obtain consent where required. Material changes to data use, public sharing or AI processing should be communicated clearly before the new processing begins where required. Contact: Ninja Timer at ninjatimerinfo@myyahoo.com