Privacy notice
Last updated: 2026-09-22
1. Who is responsible for your data
Santiago Daccarett Garza, with address at Río Colorado 408, Col. del Valle, San Pedro Garza García, Nuevo León, C.P. 66220, is the controller of your personal data. In this notice we call it “North Method”.
You can reach us at hola@northmethod.mx and at +52 322 216 5297.
2. What data we handle
Identification and contact data: name, email address, date of birth, language and country.
Billing data: whatever we need to issue your tax receipt, if you ask for one. We do not store card numbers: Stripe processes your payment directly and we never see your card.
Usage data: your training log, the weights and reps you write down, your answers in the app and the messages you send your coach.
Sensitive personal data: to build your plan we need to know about your health. We handle your present state of health, injuries and discomfort by body area, pain and since when, surgeries and conditions you declare, medication, pregnancy, postpartum and breastfeeding, biological sex, body measurements, photos and videos of your progress and technique, and any medical documents you choose to upload.
That data is sensitive under Mexican law, which is why we ask for your express consent separately before collecting it. You can use the app without giving it; what we cannot do is build you a plan without it.
3. What we use it for
Necessary purposes, without which we cannot provide the service: creating and running your account; designing, adjusting and delivering your training plan and, if your plan includes it, your nutrition plan; adapting your plan to your health, your injuries and your cautions, and spotting situations where we must ask you to see a health professional before training; answering you by chat and email; charging your subscription, telling you about charges and issuing receipts; and meeting our tax and legal obligations.
Non-necessary purposes, which you can refuse while keeping the full service: sending you product news and training content, and using what we learn from usage — anonymously and in aggregate — to improve the app.
To object to any non-necessary purpose, just write to us at hola@northmethod.mx. You do not have to give reasons and it costs you nothing.
4. What we do NOT do with your data
We do not sell your data. We do not rent it. We do not use it to train artificial-intelligence models. We do not hand it to insurers or employers.
And, spelled out: nothing about your health ever goes to an advertising platform — not your questionnaire answers, your injuries, your medication, pregnancy or breastfeeding, your measurements, your photos or videos, your medical documents, or what you tell your coach or the assistant.
The only thing we do share with an advertising platform — Meta, and only if you give us permission — is the measurement of our ads on the site's public pages, before you enter the app. It is explained in full under “Cookies and ad measurement”, below.
5. Who sees your data inside North Method
Your coach. Nobody else inside North Method sees your health file. Access is restricted in the database itself, not only on screen.
6. Who we transfer your data to, and why
We use providers to run the service. With each one we have a contract that binds them to handle your data only for what we ask of them. The one exception is Meta, which also uses them for its own purposes: that is why we ask for your permission separately and explain it in full in section 7.
About the artificial intelligence, spelled out. So the assistant answers YOUR case and not the world in general, we send it your file: your first name, your goals, your equipment, your injuries and discomfort, your health cautions and your plan. The provider of that model is Anthropic. By contract, Anthropic does not train its models on what we send, and we remain the owners of what it produces.
We may also transfer your data when a competent authority or the law requires it, in the cases set out in article 36 of the Mexican Federal Law on Protection of Personal Data Held by Private Parties.
| Provider | What for | Where | What it gets |
|---|---|---|---|
| Supabase | Database and file storage | United States | Your whole file |
| Vercel | App hosting | United States | Traffic and technical logs |
| Stripe | Charging your subscription | United States / Ireland | Your name, email and payment details |
| Resend | Sending email | United States | Your email address and the message content |
| Google Workspace | Our own mailbox | United States | Whatever you email us |
| Anthropic | The artificial-intelligence assistant | United States | See below |
| Meta Platforms (Facebook e Instagram) | Measuring our ads on the site's public pages. Only if you accept | United States / Ireland | The identifiers it sets in your browser, your IP address and browser, the public page you are viewing and — if you accept — your email turned into an irreversible fingerprint and the amount of your first purchase. Nothing from your file |
8. How to limit the use or disclosure of your data
You can ask us to stop sending you non-essential communications by writing to hola@northmethod.mx. You can also turn off notifications on your phone and in the app's settings screen.
9. Your ARCO rights, and how to exercise them
You have the right to access your data, to rectify it if it is inaccurate, to cancel it and to object to our using it for certain purposes. You can also revoke the consent you gave us, at any time.
To exercise them, write to hola@northmethod.mx or use “Your data” in the app's settings screen, with: your name and an email where we can reply; a copy of an official ID, so we know it is you and not someone asking for your data; which right you want to exercise and over which data; and, if you are asking for rectification, what should be corrected and the document that backs it up.
We will tell you what we can do within 20 days at most, and if it goes ahead we will carry it out within the following 15 days. Exercising these rights is free.
If you revoke your consent for us to handle your health data, we stop using it — and that means we can no longer build or adjust a plan for you. We are telling you plainly so you know what happens before you ask, not after.
10. How long we keep it
While you have an account with us, and for 24 months after you close it, in case you come back and so we can defend ourselves against any claim. After that we delete or block it. Whatever tax law requires us to keep — invoices and payment receipts — we keep for as long as that law says.
11. How we protect your data
Your data travels encrypted, your file is restricted by rules inside the database itself, and your photos, videos and medical documents live in private storage reachable only with your session or your coach's.
12. If something happens
If a security breach significantly affects your data, we will tell you immediately — what we know, what we are doing and what you can do.
13. How we tell you if this notice changes
If we change this notice, we publish the new version at www.northmethod.mx/privacidad with its date, and we tell you inside the app and by email before it applies. If the change touches your health data or a new transfer, we ask for your consent again.
14. If you are not satisfied
You can turn to the competent authority for protection of personal data held by private parties. Since INAI was wound up, those powers sit with Mexico's Secretaría Anticorrupción y Buen Gobierno.