Privacy Policy — METHOD.
METHOD.
Legal

Privacy Policy

Last updated 17 September 2026

This Privacy Policy explains how Method Endurance Ltd, trading as METHOD. ("we," "us," or "our"), collects, uses, shares, and protects your personal information when you use our website, mobile application, and related services (the "Service"). We are the data controller for that information.

If you do not agree with this policy, please do not use the Service. If you have any questions, contact us at admin@methodendurance.app.

The short version. METHOD. is a training app that works with health and performance data. We treat that data as sensitive, we only process it with your explicit consent, and we use AI to generate your training suggestions. We do not sell your data or use it for advertising. You can withdraw consent, access your data, or ask us to delete it at any time.

1. What information we collect

We collect information that you provide to us, that we generate as you use the Service, and that you choose to import from connected devices and platforms. This includes:

  • Account and contact data: name, email address, username, password, and billing address.
  • Profile and performance data: weight, height, and athlete performance data such as training sessions, power, pace, and related metrics.
  • Health data (sensitive / special category): physiological information such as heart rate, recovery, and other health-related metrics, including data imported from connected devices.
  • Payment data: the information needed to take payment. Card payments are handled and stored by Stripe; we do not store your full card details. Stripe's privacy notice is at stripe.com/gb/privacy.
  • Usage and technical data: information about how you interact with the Service, and basic technical data needed to run and secure it.

2. How and why we use your information

We use your personal information to:

  • create and authenticate your account;
  • provide the core Service, including generating your training suggestions, plans, and feedback;
  • take payment and manage your subscription;
  • send you administrative messages about the Service, your account, and changes to our terms or policies;
  • understand how the Service is used so we can maintain, secure, and improve it;
  • protect against fraud and misuse, and protect someone's vital interests where necessary; and
  • comply with our legal obligations.

3. The legal bases we rely on

Under the UK GDPR and EU GDPR, we must have a valid legal basis for processing your personal information. The bases we rely on are:

  • Performance of a contract — to provide the Service you sign up for, manage your account, and take payment.
  • Legitimate interests — to secure, maintain, and improve the Service and prevent fraud, where this is not overridden by your rights. This does not apply to health data.
  • Legal obligation — where we must process information to comply with the law (for example, keeping accounting records).
  • Vital interests — where processing is necessary to protect someone's life or safety.
  • Consent — for any processing that relies on your permission, which you can withdraw at any time.

Health data. Health data is special category data. We process it only on the basis of your explicit consent, which you give when you choose to provide health data or connect a device that shares it. You can withdraw that consent at any time by contacting us or disconnecting the relevant device, although doing so may mean we can no longer provide some or all of the Service. We do not rely on legitimate interests to process health data.

4. Automated decision-making and AI profiling

The Service uses automated processing, including artificial intelligence and profiling, to analyse your data and generate your training suggestions and plans. This is central to what the Service does, and we carry it out to perform our contract with you and, for health data, on the basis of your explicit consent.

These outputs are decision-support: they are suggestions, not solely-automated decisions that produce legal or similarly significant effects on you, and you remain free to accept, change, or ignore any of them. You have the right to ask us for meaningful information about how the system reaches its suggestions, to ask for human review of a suggestion, to express your point of view, and to object to this processing — by contacting us at admin@methodendurance.app.

5. AI features and providers

Our AI features are powered by third-party AI providers, currently Anthropic. To generate outputs, your inputs and relevant personal information (which may include health data) are sent to and processed by these providers on our behalf. Under our commercial terms with our AI provider, your data is not used to train their models.

We do not use your personal training or health data to develop or train any AI model of our own without your separate, explicit consent.

6. Who we share your information with

We do not sell your personal information. We share it only with service providers who process it on our behalf to run, measure, or advertise the Service, under contracts that require them to protect it. These currently include:

  • Stripe — payment processing;
  • RevenueCat — subscription management; confirms and syncs your subscription status across the Apple App Store, Google Play and our website. RevenueCat receives an app user identifier and purchase and subscription records (such as product, price, currency, purchase, renewal and expiry dates, subscription status, and the platform used), but not your full card details;
  • Supabase — hosting and database;
  • Anthropic — AI processing (see section 5);
  • Mailchimp — email and waitlist communications;
  • Google Analytics (GA4) — website usage analytics, where you have consented to analytics cookies (see section 8);
  • Meta (Facebook/Instagram) — advertising measurement, so we can see whether our Instagram and Facebook ads led to a signup, where you have consented to advertising cookies (see section 8);
  • Cookiebot — records and manages your cookie consent choices;
  • connected platforms you choose to link (for example, Garmin, Strava, or TrainingPeaks), to the extent you authorise the connection.

We may also disclose information where required by law, and we may transfer it as part of a merger, acquisition, financing, or sale of our business, in which case we will tell you and your information will remain subject to this policy or an equivalent one.

7. International data transfers

Some of our service providers are located outside the United Kingdom, including in the United States (for example, our AI provider). Where we transfer your personal information outside the UK, we rely on appropriate safeguards — such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or a UK adequacy decision where one applies — so that your information continues to receive an equivalent level of protection. You can contact us for more detail on the safeguards we use.

8. Cookies and tracking

We use cookies and similar technologies in three categories:

  • Strictly necessary — required to run and secure the Service (for example, remembering your cookie consent choice). These do not require consent.
  • Analytics (statistics) — Google Analytics (GA4), which helps us understand how the Service is used. Set only if you consent.
  • Advertising (marketing) — the Meta (Facebook/Instagram) pixel, which tells us whether someone who saw or clicked one of our ads went on to join the waitlist. Set only if you consent.

We use Cookiebot as our consent management platform. Non-essential cookies are blocked by default and are not set until you actively consent to that category through the cookie banner. You can withdraw or change your consent at any time using the cookie settings link in the footer.

Most browsers offer a "Do Not Track" setting. There is no agreed industry standard for responding to these signals, so we do not currently respond to them; instead, we rely on the consent choice described above.

9. How long we keep your information

We keep your personal information only for as long as we need it:

  • We keep your account, profile, performance, and health data while your account is active.
  • If you close your account or ask us to delete your data, we delete or anonymise your personal training and health data within 90 days, except where we must keep specific records longer.
  • We keep billing and accounting records for 6 years to meet our legal and tax obligations.
  • Where data persists in routine backups, those backups are overwritten on a rolling basis and any residual copies are deleted within 30 days.

10. How we keep your information safe

We use appropriate technical and organisational measures to protect your personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to respond appropriately if something goes wrong.

11. Children

The Service is for adults. We do not knowingly collect data from, or market to, anyone under 18. By using the Service, you confirm you are at least 18. If you believe we hold data about someone under 18, contact us at admin@methodendurance.app and we will delete it.

12. Your rights

If you are in the UK or EEA, you have rights over your personal information, including the right to:

  • access a copy of your information;
  • have inaccurate information corrected;
  • have your information erased;
  • restrict or object to certain processing;
  • data portability;
  • withdraw consent at any time, where we rely on consent (including for health data); and
  • rights in relation to automated decision-making, as described in section 4.

To exercise any of these rights, email us at admin@methodendurance.app. You can also unsubscribe from marketing emails at any time using the link in those emails. If you are unhappy with how we handle your information, you have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk, though we would appreciate the chance to address your concern first.

13. Changes to this policy

We may update this Privacy Policy from time to time. Where changes are material, we will give you reasonable notice. The "last updated" date at the top shows when it was last revised.

14. How to contact us

For any privacy questions, or to exercise your rights, contact us at admin@methodendurance.app or by post at:

Method Endurance Ltd
17 Newton Green
Nailsea, Bristol, BS48 4RF
United Kingdom

You can also read our Terms of Service.

Method Endurance Ltd · 17 Newton Green, Nailsea, Bristol, BS48 4RF, UK · Company number 17248255 · Contact: admin@methodendurance.app