Privacy policy
Draft for review. This is a starting point written for this app, not legal advice. Have a lawyer review it (and fill in the bracketed details) before you open the site to the public.
Huginn’s Way is run by Huginn’s Way LLC (registered as Huginnsway LLC) (“Huginn’s Way LLC”, “we”, “us”), which is responsible for the personal information described here. Huginn’s Way helps you plan trips. This page explains what information Huginn’s Way keeps, why, and the choices you have.
What we keep
- Your account (if you create one): email address, name, and password (stored by our sign-in provider, never visible to us).
- Your trips: destinations, dates, itineraries, saved options, budgets, notes, packing lists and your travel profile (preferences such as diet or walking distance).
- Tickets and passes you add: details you type and photos or PDFs you upload. Please don’t upload payment cards or identity documents.
- Forwarded emails: when you forward a confirmation, we read the booking details out of it and keep only those details; the email itself isn’t stored, and anything that looks like a card number is removed.
- Group trips: names, votes, ideas, expenses and payment usernames (Venmo, PayPal, Cash App) that group members choose to add.
- Phone alerts and price tracking: a notification token for your device and the trip details needed to check the weather or prices.
- Your location: only when you tap “Use my location” or “Share my exact location” (for example in the Safety tab). It’s used on your device to find nearby help or build a map link, and isn’t saved to your account.
- On your device: your chosen look (theme), trips if you don’t sign in, offline map areas and the saved “help nearby” list are kept in your browser’s storage so they work without signal. Clearing your browser data removes them.
- Feedback you send, and basic technical information needed to run and protect the service: cookie-free visit and page-speed statistics from Vercel Web Analytics (with trip and group IDs removed from addresses), and automatic crash reports (the error message, page and browser type — never your trip contents).
We don’t ask for Social Security numbers, health records or payment card details, and we don’t take payments — bookings happen on the airline, hotel or travel site you choose.
How we use it
Only to provide Huginn’s Way: saving and syncing your trips, building itineraries, sending the alerts you turn on, comparing prices you ask for, and improving the app. We don’t sell your information or use it for advertising.
Services we use
Huginn’s Way runs on Vercel (hosting) and stores data with Supabase (accounts, trips, files) and Upstash (alerts, groups, price tracking). To answer specific requests it sends the minimum needed to: Google Gemini on its paid service (AI plans, the trip assistant and reading tickets — under Google’s paid terms your content isn’t used to train its models) [confirm billing is on for the Gemini API before launch], SerpApi (live prices), Resend (emails), Ticketmaster (events), Open-Meteo and the US National Weather Service (weather), Wikipedia and OpenStreetMap (places and maps), and Frankfurter (exchange rates). Destination photos load straight from Wikipedia/Wikimedia and map tiles from OpenFreeMap, so those sites see your browser’s request the way any website would. Links to booking, car rental and partner sites to booking and partner sites take you to those sites, whose own policies apply; some links may include an affiliate code that earns Huginn’s Way a commission at no cost to you.
Sharing
Your trips are private unless you share them. A share link contains a copy of the plan (never tickets, confirmation numbers or alerts). A group link lets anyone with the link see the shared plan and group details.
Social media: the share buttons (WhatsApp, Facebook, X, Threads, Pinterest, LinkedIn, Reddit, email, text) simply open that service with a link and a short message you can edit — Huginn’s Way doesn’t post for you, doesn’t connect to your social accounts and doesn’t load their tracking scripts. Once you post, that service’s privacy policy applies, and anyone who sees the post can open the link. Postcard images are made on your own device and only leave it if you choose to share or save them.
Your choices
- Edit or delete any trip, ticket or file at any time.
- Delete your account from the Account page — this deletes your trips and files.
- Turn alerts and price tracking off from the trip.
- Use Huginn’s Way without an account; your trips then stay in your browser.
Security and retention
Data is sent over encrypted connections and protected so each account can only reach its own trips. Group links expire about 13 months after their last change; feedback is kept for the latest 500 messages. [Add any other retention periods.]
Age
Huginn’s Way is for people 18 and older. We don’t knowingly collect information from anyone younger; if you believe a minor has created an account, contact us and we’ll delete it. Travelers of any age can be listed on a trip by an adult planning it.
Contact
Questions or requests: Huginn’s Way LLC, mitch.riker@huginnsway.com. [Add any region-specific rights — e.g. California or EU/UK — after legal review.]