Privacy Policy

This Privacy Policy describes how Greenlink Africa Inc. ("Ninrem", "we", "us", "our") collects, uses, shares, and protects your information when you use our mobile application and website (together, the "Service").

Who we are

Ninrem is operated by Greenlink Africa Inc., a company incorporated in Canada. We are the data controller responsible for your personal information. You can reach us at contact@greenlink.africa.

Information we collect

We collect the following categories of information:

• Account data — your email, name, and avatar URL from Google or Apple Sign-In. Optionally your phone number if you verify it for SMS reminders.
• Photos you upload — body reference photos, fabric swatches, and garment references you provide to generate previews.
• Usage data — preview generation history, credit balance, login timestamps, device type, IP address, and app version.
• Payment data — handled by Stripe. We never see or store your card numbers; we receive a Stripe customer ID and transaction metadata only.

How we use your information

• Authenticate your account and keep it secure
• Generate the AI previews you request
• Manage your credit balance and process purchases
• Respond to support requests
• Prevent fraud, abuse, and violations of our Terms
• Comply with legal obligations (tax, audit, lawful requests)

Categories of service providers

To deliver the Service we share specific data with vetted third parties that act as processors under contractual data-protection commitments. We share the minimum necessary for each purpose. The categories are:

• AI image-processing providers — receive the uploaded photos and the prompts necessary to generate or refine the preview you requested.
• Cloud storage and content delivery — store your uploaded photos and the generated previews and serve them back to your device.
• Payment processor (Stripe) — handles credit-pack checkout and retains payment records under its own privacy terms. We never see or store your card numbers.
• Identity providers (Google Sign-In, Apple Sign-In) — verify your identity during sign-up and login.
• Messaging providers — deliver SMS one-time passcodes and transactional reminders when you opt in.
• Hosting and infrastructure providers — run the application servers that receive your requests.

The current list of specific vendors in each category is published on our Subprocessors page and kept up to date. Material changes to the list are announced via email and an in-app banner.

We do not sell your personal information and do not share it for cross-context behavioural advertising.

AI model training — explicit statement

Your photos are sent to our AI providers only to fulfil the single generation you requested, and are not used to train any AI model — not by us and not by our providers under the data-processing terms we have accepted with them. If this ever changes, we will notify you in advance and ask for your consent.

How long we keep your data

• Account data — kept while your account is active, plus a 30-day safety window after deletion to guard against accidental requests.
• Uploaded photos and generated previews — kept while your account is active, up to 12 months, or until you delete them individually.
• Payment records — retained for 7 years as required by Canadian tax and audit rules (Canada Revenue Agency).
• Support correspondence — up to 3 years for quality and dispute resolution.

Your rights

Regardless of where you live, you can ask us to:

• Access the personal data we hold about you
• Export your data in a portable machine-readable format (JSON)
• Correct inaccurate data
• Delete your account and associated data
• Object to or restrict certain processing
• Withdraw consent you previously gave (without affecting lawful past processing)

To exercise any of these rights, email contact@greenlink.africa from the address on your account, or follow Delete my account. Canadian residents may also complain to the Office of the Privacy Commissioner of Canada.

Children

The Service is not directed to anyone under the age of 18. We enforce a minimum-age declaration at signup and will delete any account we discover belonging to a minor.

International transfers

Several of our providers operate servers in the United States and the European Union. Using the Service means your data may be transferred to and processed outside Canada. We rely on standard contractual protections (including the EU Standard Contractual Clauses where applicable) to safeguard these transfers. See the Subprocessors page for specific vendors and their processing locations.

Security

We use HTTPS/TLS in transit, encrypted storage for uploaded media, scoped API credentials, and role-based access inside our team. No system is perfect; in the event of a breach affecting your data we will notify you and the relevant authorities where required by law.

Changes to this policy

We may update this policy to reflect new features or legal requirements. We will notify you of material changes via email and with an in-app banner at least 30 days before they take effect.

Contact

Greenlink Africa Inc.
Ontario, Canada
contact@greenlink.africa