Huginn Privacy Policy

Draft for legal review. Version 2026-10-draft. Last updated 9 October 2026.

Huginn Sports Intelligence ("Huginn", "we", "us") is run by [legal entity name], [address]. This policy explains what we collect, why, who we share it with, and the choices you have. Contact: mike.lund@huginnsi.com.

Huginn is in closed alpha. Accounts are by invitation only.

Who this covers

• Coaches and other staff who use Huginn to analyse results and plan training.
• Athletes who have a Huginn account to see their own information.
• Athletes without an account, whose public competition results appear in Huginn.

What we collect

Public competition data

We collect results published by the International Ski and Snowboard Federation (FIS) and similar public sources: athlete name, FIS code, nation, gender, birth year or date, and results (date, event, venue, discipline, placing, scores, times and points). We use this to calculate statistics and our own measures, such as the Muninn level.

Information coaches add

Coaches can record information about athletes on their team:

• goals and notes on progress;
• tricks being learned, training logs and the surface used (trampoline, airbag or water ramp, snow);
• days trained together;
• availability. This is a short reason code only (for example injured, sick, school, or another program). We do not ask for or store medical details.

Account information

• your email address and name;
• your role (coach or athlete), and for athletes, which FIS athlete record the account belongs to;
• when you accepted these terms, and when you sign in.

Usage and security information

• the pages and data you request, the time, your IP address and your browser type. We use this to keep the service secure, enforce usage limits and fix problems;
• a sign-in cookie that keeps you signed in. We do not use advertising or tracking cookies.

How we use it

• to provide Huginn: statistics, analysis, goals and training tools;
• to sign you in and keep accounts secure;
• to prevent scraping and misuse;
• to improve the service.

We do not sell personal information, and we do not show advertising.

Who can see what

• Coaches see public competition data, and the information they and other coaches on the same athlete's team have entered for that athlete.
• Athletes with an account see only their own results, Muninn level, finals data and goals. They do not see other athletes' information.
• Huginn administrators can see everything, to run and support the service.

Service providers

We use a small number of providers to run Huginn:

• [Railway] for hosting and the database;
• [Resend] for sending sign-in emails;
• [Cloudflare / other: to confirm].

These providers process data only on our instructions. [Confirm where data is stored, e.g. United States.]

Children and teenagers

• Huginn does not allow accounts for anyone under 13. FIS competition starts at age 13.
• Athletes aged 13–17 may have an account only if a parent or guardian has agreed. They confirm this when they accept the invitation.
• Public competition results for athletes under 18 appear in Huginn because FIS publishes them.

How long we keep data

• Account data is kept while the account is active. After deletion, sign-in records are removed within [30] days.
• Usage and security logs are kept for [12 months].
• Public competition results are kept as part of the historical record.

Your choices and rights

You can ask us to:

• show you the information we hold about you;
• correct it;
• delete your account, and the goals and coach notes attached to it;
• stop using your information for a particular purpose.

Email mike.lund@huginnsi.com. We will reply within [30] days. Depending on where you live (for example the EU, the UK or California), you may have more rights under local law, including the right to complain to a data protection authority.

[Lawyer to review: the legal basis for processing public results of EU/UK athletes (legitimate interest), and whether a representative or a data processing agreement is needed.]

Security

Sign-in links work once and expire quickly. Passwords are not used. Sign-in sessions and links are stored only in hashed form. Access to the data is limited and logged. No system is perfectly secure; if we learn of a breach that affects you, we will tell you as the law requires.

Changes

If we change this policy in a way that matters, we will tell account holders by email or when they next sign in.