Privacy Policy

This policy explains what personal data Nordic Method collects, why we collect it, who helps us process it, and what rights you have. We have tried to keep it short and readable. If anything is unclear, email us at hello@nordicmethod.app.

1. Who we are

Nordic Method is operated by Nordic Ecolab, a company registered in Norway (organisation number 937 234 163), registered address Akersveien 24E, 0177 Oslo, Norway. Nordic Ecolab is the data controller for the personal data described in this policy. You can reach us at hello@nordicmethod.app.

2. What we collect

  • Account data — your name, email address, and which sign-in provider you used to create your account.
  • Quiz answers and scores — your answers to our self-assessment quiz about procrastination habits and wellbeing, and the scores calculated from them. These answers can feel personal. They are not medical records, but we treat them with the same care as sensitive personal data under the GDPR.
  • Reflections and mood check-ins — the personal reflections and journal entries you write in the app, and your mood check-ins.
  • Goals and progress — the goals you set and your lesson and micro-task completion history.
  • Device timezone — so daily lessons and reminders arrive at a sensible local time.
  • Push-notification tokens — if you turn on reminders, we store a device token from Firebase Cloud Messaging so we can deliver notifications. Reminders are optional.
  • Payment data — payments are processed by Stripe. We never store your card number.
  • Analytics and ad-attribution data — usage analytics via PostHog (hosted in the EU), ad click IDs such as gclid and fbclid when you arrive from an ad, and data kept in your browser's localStorage. Analytics requests are routed through our first-party proxy at g.nordicmethod.app.

3. A note on purchase records

To attribute purchases to the right ad campaign and to help detect fraud, we store some metadata together with your payment record at Stripe: your email address, an analytics identifier, ad click IDs (if you arrived via an ad), your IP address, and your browser's user agent. We want to be upfront about this, because it links your purchase to how you found us.

4. How we use your data

Two kinds of processing happen, on two different legal bases. Service processing (legitimate interest / performing what you asked of us) always runs: when you finish the quiz and give us your email, we store your result, email it to you as promised, and record the essential lifecycle facts of the relationship (quiz completed, purchase made) so we can send you relevant service communication and stop sending it when it no longer applies. Every such email includes an unsubscribe link. Marketing analytics (cookies, ad-click attribution, session measurement) run only with your consent via the banner — declining it never affects the service itself.

  • To provide the service: lessons, micro-tasks, your journal, mood check-ins, goals and progress tracking.
  • To personalize your plan based on your quiz answers.
  • To send you push-notification reminders — only if you turned them on.
  • To process payments and manage your subscription.
  • To measure which ads and features work, and to improve the product.
  • To prevent fraud and to comply with legal obligations.

5. Legal bases

Under the GDPR we rely on: performance of a contract (providing the app you signed up for), consent (push notifications, and analytics or attribution where consent is required), and legitimate interests (fraud prevention, security, and improving the service).

6. Who processes your data

We use a small number of service providers ("processors") that handle data on our behalf under data-processing agreements:

  • Google Firebase — hosting, sign-in, database, and push notifications.
  • Stripe — payment processing.
  • PostHog (EU-hosted) — analytics and the messaging emails we send.

We do not sell your personal data.

7. How long we keep your data

We keep your data while your account is active. If you delete your account, we delete the data described in the next section.

8. Your rights

Under the GDPR you have the right to access, rectify, erase, and export (data portability) your personal data, and to object to certain processing.

The fastest way to delete your data is in the app: Settings → Delete account. This deletes your account data, quiz submissions and reflections, and sends a deletion request to our analytics provider.

For any other request, email hello@nordicmethod.app. You also have the right to lodge a complaint with a supervisory authority — in Norway, that is Datatilsynet.

9. Changes to this policy

If we make meaningful changes to this policy, we will update the effective date at the top and, for significant changes, let you know in the app or by email.

10. Contact

Questions about privacy? Email hello@nordicmethod.app. See also our Terms of Service and Subscription & Refund Policy.