Privacy Policy
Last updated: September 2026
1. Data Controller
Controller: Norte Training
Contact: [email protected]
2. Summary
- We do not sell your data or use it for advertising.
- Your data is not used to train AI models.
- We use your data to create, adjust, and track your training plan.
- You can delete your account and all your data from within the app.
3. What data we process
3.1 Account data
Email, name, profile photo (if you sign in with Google), internal user identifier, and sign-in method.
3.2 Athletic profile
Level, disciplines you practice, weekly availability, performance benchmarks and thresholds (e.g. FTP, paces, or CSS), goals and races.
3.3 Training and wellness data
Planned and completed sessions, duration, distance, training load (TSS), perceived effort (RPE), feelings, weekly check-ins, and notes. Some of this data may reveal health information and is therefore treated as a special category of data (Art. 9 GDPR).
3.4 Connected services
Strava, Polar, Suunto, and Intervals.icu: if you connect them, we receive the activities you authorize us to read: type, date, duration, distance, elevation, heart rate, power, pace, and GPS track. We store the access tokens needed to sync. You can disconnect each service at any time from within the app.
Google Calendar: we create, update, and delete events with your training sessions. We only access events created by Norte; we never read or store any other events from your calendar. Our use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. If you disconnect Google Calendar or delete your account, we delete Norte's future events from your calendar and revoke access.
3.5 AI coach conversations
Messages you send in the chat and generated responses.
3.6 Location
With your permission, we use your device's precise location (GPS) to show you the weather forecast for your sessions. It is obtained only while the app is in use, never in the background, and you can withdraw permission at any time from your device settings.
3.7 Notifications
Device identifier to send you push notifications, if you enable them.
3.8 Subscription
Contracted plan, status, and subscription history. Payments are processed by Stripe: we never see or store your full card details.
3.9 Technical data
IP address, device model, operating system, app version, server error logs, and AI service usage logs (number of queries and consumption), for security, diagnostics, and cost control purposes.
3.10 Coach relationship
If you accept a coach's invitation in Norte, they will be able to view your athletic profile, plan, and training data. You can unlink at any time.
3.11 Web and waiting list
Email and registration source if you join the waiting list, and browsing data as per section 13.
4. Purposes and legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Create and manage your account and provide the service | Performance of a contract (Art. 6.1.b) |
| Process training data to personalize your plan | Explicit consent (Art. 9.2.a) |
| Send data to AI providers to generate plans and responses | Explicit consent (Arts. 6.1.a and 9.2.a) |
| Sync with connected services | Consent when connecting each service (Art. 6.1.a) |
| Show weather based on your precise location | Consent (Art. 6.1.a) |
| Send push notifications | Consent (Art. 6.1.a) |
| Send service emails | Performance of a contract (Art. 6.1.b) |
| Manage subscriptions and billing | Contract and legal obligation (Arts. 6.1.b and 6.1.c) |
| Security, abuse prevention, and cost control | Legitimate interest (Art. 6.1.f) |
| Manage the waiting list | Consent (Art. 6.1.a) |
| Web analytics | Consent via cookie banner |
You may withdraw consent at any time without affecting prior processing. Without consent to process your training data and send it to AI providers, we cannot generate personalized plans, which is Norte's core feature.
5. Artificial intelligence and automated decisions
Norte generates your plans, adjustments, analyses, and chat responses using Google Gemini. We send only the necessary data: your athletic profile, goals, training history, check-ins, and messages. Under Google Cloud's contractual terms (paid tier), this data is not used to train AI models.
This processing constitutes profiling, but does not produce legal effects or significantly affect you: the plan is a proposal you can modify, ask to adjust, or choose not to follow.
Norte is not a medical service. Its recommendations do not replace advice from a healthcare professional. Consult a doctor before starting a training program, especially if you have any health condition.
6. Who we share your data with
We do not sell your data or share it for advertising purposes.
Providers processing data on our behalf under a data processing agreement:
| Provider | Function | Location |
|---|---|---|
| Google Cloud and Firebase (Google Ireland Ltd.) | Servers, database, authentication, notifications | EU / USA |
| Google (Gemini API) | Artificial intelligence | USA |
| Google Calendar API | Training session sync | USA |
| Stripe | Payments and subscriptions | EU / USA |
| Resend | Email delivery | USA |
| Sentry | Server error logging | USA |
| Tavily | Race search (only the text you type in the search box) | USA |
Services you connect yourself: Strava, Polar, Suunto, Intervals.icu, and Google Calendar process your data under their own privacy policies. We only exchange data with them when you connect them.
Your coach, if you link with one (section 3.10). Authorities, when required by law.
7. International transfers
Several providers are located in the United States. In those cases, the transfer is covered by the EU-US Data Privacy Framework, where the provider is certified, or by the Standard Contractual Clauses approved by the European Commission.
8. How long we keep your data
- Account, profile, training, and conversation data: for as long as your account is active.
- After account deletion: deleted within 30 days. Backups are overwritten within 90 days.
- Billing data: for the periods required by law (up to 6 years).
- Technical and error logs: 12 months.
- Waiting list: until you register or, at most, 12 months after launch.
- We may retain aggregated, anonymized data that cannot identify you.
9. How to delete your account
- From the app: Profile → Settings → Delete account.
- From the web, without the app: nortetraining.com/en/delete-account.
- By email: [email protected], from the email linked to your account.
Upon deletion we erase your profile, plans, history, conversations, connected service tokens, and future events created in your Google Calendar. If you have an active subscription, it is cancelled automatically.
10. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction, and portability, and withdraw consent, at any time. Write to us at [email protected]; we will respond within one month.
You can manage some permissions directly in the app: connected services, notifications, and location.
If you believe your rights have not been addressed, you may lodge a complaint with the Spanish Data Protection Authority.
11. Security
All communications are encrypted in transit (TLS) and data is stored encrypted at rest. We apply per-user access control, the principle of least privilege, and secure storage of connected service credentials.
12. Minors
Norte is intended for users aged 18 and over. We do not knowingly collect data from minors; if we detect a minor's account, we will delete it.
13. Cookies (web only)
The nortetraining.com website uses technically necessary cookies and, only if you accept, Google Analytics cookies. You can change your preferences at any time via the cookie banner. The mobile app does not use cookies or Google Analytics.
14. Changes to this policy
If we make material changes, we will notify you in the app or by email before they take effect. The "Last updated" date indicates the current version.