← Back

Privacy notice

Last updated: 2026-09-22

1. Who is responsible for your data

Santiago Daccarett Garza, with address at Río Colorado 408, Col. del Valle, San Pedro Garza García, Nuevo León, C.P. 66220, is the controller of your personal data. In this notice we call it “North Method”.

You can reach us at hola@northmethod.mx and at +52 322 216 5297.

2. What data we handle

Identification and contact data: name, email address, date of birth, language and country.

Billing data: whatever we need to issue your tax receipt, if you ask for one. We do not store card numbers: Stripe processes your payment directly and we never see your card.

Usage data: your training log, the weights and reps you write down, your answers in the app and the messages you send your coach.

Sensitive personal data: to build your plan we need to know about your health. We handle your present state of health, injuries and discomfort by body area, pain and since when, surgeries and conditions you declare, medication, pregnancy, postpartum and breastfeeding, biological sex, body measurements, photos and videos of your progress and technique, and any medical documents you choose to upload.

That data is sensitive under Mexican law, which is why we ask for your express consent separately before collecting it. You can use the app without giving it; what we cannot do is build you a plan without it.

3. What we use it for

Necessary purposes, without which we cannot provide the service: creating and running your account; designing, adjusting and delivering your training plan and, if your plan includes it, your nutrition plan; adapting your plan to your health, your injuries and your cautions, and spotting situations where we must ask you to see a health professional before training; answering you by chat and email; charging your subscription, telling you about charges and issuing receipts; and meeting our tax and legal obligations.

Non-necessary purposes, which you can refuse while keeping the full service: sending you product news and training content, and using what we learn from usage — anonymously and in aggregate — to improve the app.

To object to any non-necessary purpose, just write to us at hola@northmethod.mx. You do not have to give reasons and it costs you nothing.

4. What we do NOT do with your data

We do not sell your data. We do not rent it. We do not use it to train artificial-intelligence models. We do not hand it to insurers or employers.

And, spelled out: nothing about your health ever goes to an advertising platform — not your questionnaire answers, your injuries, your medication, pregnancy or breastfeeding, your measurements, your photos or videos, your medical documents, or what you tell your coach or the assistant.

The only thing we do share with an advertising platform — Meta, and only if you give us permission — is the measurement of our ads on the site's public pages, before you enter the app. It is explained in full under “Cookies and ad measurement”, below.

5. Who sees your data inside North Method

Your coach. Nobody else inside North Method sees your health file. Access is restricted in the database itself, not only on screen.

6. Who we transfer your data to, and why

We use providers to run the service. With each one we have a contract that binds them to handle your data only for what we ask of them. The one exception is Meta, which also uses them for its own purposes: that is why we ask for your permission separately and explain it in full in section 7.

About the artificial intelligence, spelled out. So the assistant answers YOUR case and not the world in general, we send it your file: your first name, your goals, your equipment, your injuries and discomfort, your health cautions and your plan. The provider of that model is Anthropic. By contract, Anthropic does not train its models on what we send, and we remain the owners of what it produces.

We may also transfer your data when a competent authority or the law requires it, in the cases set out in article 36 of the Mexican Federal Law on Protection of Personal Data Held by Private Parties.

ProviderWhat forWhereWhat it gets
SupabaseDatabase and file storageUnited StatesYour whole file
VercelApp hostingUnited StatesTraffic and technical logs
StripeCharging your subscriptionUnited States / IrelandYour name, email and payment details
ResendSending emailUnited StatesYour email address and the message content
Google WorkspaceOur own mailboxUnited StatesWhatever you email us
AnthropicThe artificial-intelligence assistantUnited StatesSee below
Meta Platforms (Facebook e Instagram)Measuring our ads on the site's public pages. Only if you acceptUnited States / IrelandThe identifiers it sets in your browser, your IP address and browser, the public page you are viewing and — if you accept — your email turned into an irreversible fingerprint and the amount of your first purchase. Nothing from your file

7. Cookies and ad measurement

On the public pages of this site — the home page and sign-up — we may use a measurement tool from Meta Platforms (the company behind Facebook and Instagram) called a “pixel”. It does one thing: tell us which ad brought you here, so we do not spend on ads that do not work. It only works while we have it switched on; there are stretches when we do not use it at all, and then nothing is sent even if you accepted.

It only turns on if you say yes. The first time you arrive we ask you with two buttons of the same size: “Accept” and “Only what's necessary”. If you say no, or say nothing, the pixel does not load and Meta never learns about your visit. Saying no changes nothing: not the service, not the price, not what you can do here.

If you accept, Meta receives: the identifiers the pixel sets in your browser, your IP address, the browser you use and the public page you are viewing; when you finish signing up, also your email turned into an irreversible fingerprint — a string of letters and numbers that cannot be turned back into your email; and if you subscribe with a payment, the amount and currency of that first payment together with that same fingerprint.

That last one leaves from our server when the payment is confirmed, not from your browser. That is why we store your answer on your account: so we can honour it there too. If you said no, or never answered, it is not sent.

Meta also processes that data for its own purposes, so this is a transfer and that is why we ask you: accepting accepts it, “Only what's necessary” rejects it. Meta Platforms is in the United States and Ireland.

What Meta never receives: anything about your health — not your questionnaire answers, injuries, medication, pregnancy or breastfeeding, measurements, photos or videos, medical documents, or your messages with your coach or the assistant. The pixel does not run inside the app: it does not load on any screen of your file, and an automated test stops anyone from putting it there by mistake.

You can change your mind at any time, right here. You can also write to us at hola@northmethod.mx, or use the “Ad measurement” switch in the app's settings screen. If you tell us no after saying yes, we stop sending from that moment; what Meta already received we cannot take out of its systems, and we would rather tell you beforehand than afterwards.

Apart from the pixel, we store in your browser only what the app needs to work: your signed-in session, your language and your screen preferences. That is shared with nobody and cannot be turned off without breaking the app.

Ad measurement is off today.

If you turn it on, Meta receives what this section describes. You can turn it off again whenever you want.

8. How to limit the use or disclosure of your data

You can ask us to stop sending you non-essential communications by writing to hola@northmethod.mx. You can also turn off notifications on your phone and in the app's settings screen.

9. Your ARCO rights, and how to exercise them

You have the right to access your data, to rectify it if it is inaccurate, to cancel it and to object to our using it for certain purposes. You can also revoke the consent you gave us, at any time.

To exercise them, write to hola@northmethod.mx or use “Your data” in the app's settings screen, with: your name and an email where we can reply; a copy of an official ID, so we know it is you and not someone asking for your data; which right you want to exercise and over which data; and, if you are asking for rectification, what should be corrected and the document that backs it up.

We will tell you what we can do within 20 days at most, and if it goes ahead we will carry it out within the following 15 days. Exercising these rights is free.

If you revoke your consent for us to handle your health data, we stop using it — and that means we can no longer build or adjust a plan for you. We are telling you plainly so you know what happens before you ask, not after.

10. How long we keep it

While you have an account with us, and for 24 months after you close it, in case you come back and so we can defend ourselves against any claim. After that we delete or block it. Whatever tax law requires us to keep — invoices and payment receipts — we keep for as long as that law says.

11. How we protect your data

Your data travels encrypted, your file is restricted by rules inside the database itself, and your photos, videos and medical documents live in private storage reachable only with your session or your coach's.

12. If something happens

If a security breach significantly affects your data, we will tell you immediately — what we know, what we are doing and what you can do.

13. How we tell you if this notice changes

If we change this notice, we publish the new version at www.northmethod.mx/privacidad with its date, and we tell you inside the app and by email before it applies. If the change touches your health data or a new transfer, we ask for your consent again.

14. If you are not satisfied

You can turn to the competent authority for protection of personal data held by private parties. Since INAI was wound up, those powers sit with Mexico's Secretaría Anticorrupción y Buen Gobierno.

Medical disclaimer and terms