Shinobi (shinobi.fit) is a free, open-source endurance race readiness tool operated by Shinobi ("we," "us," or "our"). This Privacy Policy describes how we collect, use, store, and protect information when you use our website and services.
By using Shinobi, you agree to the practices described in this policy. If you do not agree, please do not use the service.
During the onboarding assessment and subsequent profile updates, you may enter the following information. All fields are optional unless marked otherwise:
If you join the native app waitlist, the form is provided by Tally.so, a third-party form service. Any information you submit through the waitlist form (such as your email address) is collected and stored by Tally.so under their privacy policy. We access this data solely to notify you when the native app launches.
Shinobi does not use analytics services, tracking pixels, fingerprinting, or advertising networks. We do not collect:
Our hosting provider (Vercel) may process standard server access logs (IP address, user agent, request path) as part of normal web hosting operations. These logs are managed by Vercel under their privacy policy and are not accessed or used by Shinobi.
We use the information described above for the following purposes only:
Shinobi collects health and fitness information including cardiovascular metrics (VO2 Max, heart rate, HRV), body composition data (weight, height, body fat percentage), and exercise performance data (pace, power, training volume). This data is classified as sensitive personal information under various privacy laws.
Our commitments regarding health data:
Shinobi does not set HTTP cookies. We use the following browser storage mechanisms:
No third-party cookies or tracking technologies are set by Shinobi. The Tally.so waitlist embed may set its own cookies if you interact with the waitlist form — see Tally.so's cookie policy for details.
Client-side data (localStorage): Your metrics, assessments, and activity logs persist in your browser until you explicitly delete them. There is no server-side backup or recovery. To delete all client-side data:
Waitlist data: Waitlist submissions are stored by Tally.so. To remove your waitlist entry, contact us at the email provided in Section 11 or submit a deletion request directly to Tally.so.
Depending on your jurisdiction, you may have the following rights regarding your personal data:
Each third-party service operates under its own privacy policy. We encourage you to review their respective policies linked above.
We implement the following security measures:
Because Shinobi stores no personal data on its servers, there is no server-side store of your metrics to breach. Waitlist emails are held by Tally.so under their own security program.
Shinobi is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child under 16 has provided us with personal information, please contact us and we will take steps to delete such information.
For privacy-related inquiries, data access requests, deletion requests, or complaints:
We aim to respond to all privacy requests within 30 days, and within 45 days for CCPA requests as required by law.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Effective Date" at the top of this page and post a notice on the Shinobi homepage. Your continued use of Shinobi after any changes constitutes acceptance of the updated policy.
“Privacy is not a feature — it is a constraint. Your data never crosses the wire unless you say so. 忍 endures by keeping nothing.”