Privacy Policy

1. Introduction

Njord (“we”, “us”, “our”) is a kitesurfing conditions platform operated by [Company Name]. This Privacy Policy explains what personal data we collect when you use Njord, why we collect it, how we use it, and the rights you have over it.

By creating an account or using the Njord service, you acknowledge that you have read and understood this policy.

2. Data We Collect

Account data (via Clerk)

When you sign up, we collect the following through our authentication provider Clerk:

• First and last name
• Email address
• Profile photo (only if provided via an OAuth provider)
• Encrypted password (never stored in plain text; managed entirely by Clerk)

Spots and preferences

To deliver condition alerts, we store the kitesurfing spots you save and your preferences for each:

• Spot names and geographic coordinates
• Your wind threshold preferences per spot (minimum and maximum wind speed, gust factor, preferred directions)
• Your rider profile (skill level, ride style, body weight, kite quiver)
• Notification preferences (quiet hours, active days, alert frequency)

Usage and analytics data (via Vercel Analytics)

We use Vercel's built-in analytics to understand how the service is used. This data is:

• Anonymised and aggregated — not linked to your identity
• Cookie-free and fingerprint-free
• Limited to page views, session duration, and referrer information

Technical data

Standard web infrastructure data is processed when you connect to our servers, including device type, operating system, browser version, and IP address. IP addresses are processed by Vercel's infrastructure and are not stored by Njord.

3. How We Use Your Data

• To authenticate your account and keep your session secure
• To deliver condition alerts when the wind matches your preferences at your saved spots
• To personalise condition assessments based on your rider profile
• To improve the service based on aggregated, anonymised usage trends
• To comply with applicable legal obligations

We do not sell your personal data. We do not use your data for advertising or profiling beyond the core functionality of the service.

4. Third-Party Services

Njord relies on the following third-party providers. Each is governed by their own privacy policy:

5. Data Retention

• Account, spots, and preference data are retained for as long as your account is active.
• All personal data is deleted when you delete your account.
• Analytics data is aggregated and not linked to individuals; it may be retained indefinitely in that form.

6. Your Rights (GDPR & UK GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your data (“right to be forgotten”)
• Restriction — ask us to limit how we process your data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests

To exercise any of these rights, email us at privacy@njord.app. We will respond within 30 days.

7. Children's Privacy

Njord is not directed at children under the age of 16. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via the email address associated with their account. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of Njord after changes constitutes acceptance of the updated policy.

9. Contact

For any questions, requests, or concerns about this Privacy Policy or how we handle your data, please reach out:

privacy@njord.app