Effective date: 2026-05-25 · Version 1.0
Mímir Lens is operated by Mímir Sports AB (org.nr 559575-1164, Ringvägen 9A, Landskrona, Sweden), which is the data controller for the personal data described here. For any privacy request, contact info@mimirlens.com or info@mimirlens.com. Full company details are on our Company Details page.
| Category | Examples |
|---|---|
| Account | Email address, name, password (stored only as a bcrypt hash) |
| Profile | Sport, skill level, playing hand, goals, role (player/coach) |
| Uploaded video & audio | Short shot/rally clips you upload, and Game-mode rally recordings — which include microphone audio captured during play. These can show identifiable people and are treated as sensitive. Shot and rally uploads are not retained after analysis — only a content hash and the resulting scores/feedback. Game-mode rally clips are kept for up to 48 hours for replay/download, then deleted. If you use the trim studio's "put match video online" option, the full match recording (including between-point time) is stored for the same 48-hour window. |
| Movement & pose measurements | To track play, our GPU pipeline derives movement data from Game-mode video: player positions, swing timing, estimated handedness and approximate height/build ratios. These are used to attribute shots and assess tracking quality within your own matches; they are not used to identify you across sessions or matched against anyone else's data. |
| Phone number (optional) | Only if you choose SMS as your two-factor login method; used solely to send login codes. |
| Training footage (opt-in) | Only if you enable "Help improve tracking" in Profile → Data & Privacy (off by default): your Game-mode rally clips, kept past the 48-hour window to train our own shuttle & player tracking models. Turning the setting off deletes every stored training clip. |
| Analysis results | Mímir ratings, per-dimension scores, coaching feedback, rally timelines, gear recommendations |
| Payments | Subscription/credit records and Stripe customer identifiers (card details are handled by Stripe, not stored by us) |
| Optional location | Approximate location for "find nearby players", only if you opt in; you can disable and delete it at any time |
| Technical | Push-notification endpoints, limited security logs (e.g. salted hashes of IP addresses for admin-access auditing) |
| Purpose | Legal basis (Art. 6 / Art. 9) |
|---|---|
| Providing the analysis service and your account | Performance of a contract (Art. 6(1)(b)) |
| Processing your uploaded video (including by our AI provider) to generate feedback | Your explicit consent, given at sign-up (Art. 6(1)(a) and Art. 9(2)(a) where the footage reveals sensitive data). You may withdraw consent at any time by deleting your account. |
| Retaining Game-mode training footage to improve our tracking models | Your explicit consent, given via the opt-in "Help improve tracking" setting (Art. 6(1)(a) and Art. 9(2)(a) where applicable). You may withdraw it at any time by turning the setting off, which deletes the stored footage. |
| Payments and fraud prevention | Contract and legal obligation (Art. 6(1)(b)/(c)) |
| Service-related notifications | Legitimate interests / contract |
| Marketing and lifecycle emails (welcome, monthly recap, coach onboarding) | Legitimate interests, with a one-click opt-out in every such email (Art. 6(1)(f)) |
| Security logging | Legitimate interests (Art. 6(1)(f)) |
We use a small number of trusted service providers who process data on our behalf under data processing agreements:
| Processor | Purpose | Location |
|---|---|---|
| Anthropic | AI analysis of uploaded video frames. Under our API terms, Anthropic does not use this data to train its models. | United States |
| RunPod | GPU video tracking for Game-mode and rally analysis (shuttle/ball and player tracking). Clips are processed transiently to produce tracking data and are not retained by the provider as part of the service. | United States |
| Stripe | Payment processing | United States |
| Resend | Transactional and lifecycle email delivery | United States |
| Twilio | SMS delivery of two-factor login codes (only if you choose SMS 2FA) | United States |
| Railway | Application hosting and database | Cloud infrastructure |
We do not sell your personal data.
Some processors above are located in the United States. Where personal data is transferred outside the EU/EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs) together with the providers' supplementary measures. In particular, frames extracted from your uploaded video are transmitted to Anthropic in the United States solely to generate your analysis.
Under the GDPR you have the right to access, rectify, erase, restrict, and object to processing of your data, and the right to data portability. Specifically:
/api/player/export./api/player/delete-account. This cascades to your analyses, payments, and related records.Mímir Lens is not directed at children under 13. Where the age of digital consent in your country is higher than 13 — it is up to 16 in parts of the EU/EEA — that higher age applies instead (GDPR Art. 8).
Users under 18 must have permission from a parent or legal guardian before using the Service, and the guardian must agree to our Terms on the minor's behalf. Where the user is a minor, the guardian gives consent to the processing described in this notice — including the processing of uploaded video and audio — and is responsible for any purchases made through the account. The optional "Help improve tracking" training-footage setting should not be enabled on a minor's account without the guardian's informed agreement.
Parents and guardians may contact info@mimirlens.com at any time to access, correct, export, or delete a minor's account and data. If we learn we have collected data from a child under 13, or from a minor without the required guardian permission, we delete it.
Separately, you may only upload footage of other identifiable people with their consent — and footage of anyone under 18 only with their parent or guardian's consent. Obtaining that permission is the responsibility of the person doing the filming, not ours (see Terms §2.2). If you appear in footage on the Service and want it removed, contact info@mimirlens.com.
We use no advertising or analytics trackers. Everything stored in your browser is strictly necessary for the Service — see the Cookie & Local Storage Notice for the full list.
We use HTTPS/HSTS in transit, hashed passwords (bcrypt), signed session tokens, and least-data security logging. No system is perfectly secure, but we take reasonable technical and organisational measures appropriate to the risk.
We may update this policy from time to time. The effective date at the top reflects the current version; for material changes affecting your rights we will notify you by email or in-app.
Privacy questions or requests: info@mimirlens.com.