Peloton records detailed physical performance data from your workouts, including your heart rate and power output, every time you use their equipment or app.
Your heart rate, cadence, and workout output data are collected and stored by Peloton, and may be shared with third parties including advertisers — this goes beyond what most users expect from a fitness device.
Cross-platform context
See how other platforms handle Collection of Health-Adjacent Fitness Data and similar clauses.
Compare across platforms →Heart rate and physiological fitness metrics are considered health-proximate data and may be subject to heightened legal protections under emerging US state health data laws and GDPR Article 9.
REGULATORY FRAMEWORK: This provision implicates GDPR Art. 9 (special categories of personal data — health data) enforced by EU/EEA supervisory authorities; Washington My Health MY Data Act (RCW 70.372) enforced by the Washington AG; CCPA/CPRA §1798.121 (sensitive personal information — health data) enforced by the CPPA; and FTC Act Section 5 for deceptive data practices enforced by the FTC. The characterization of heart rate data as health information is increasingly supported by regulatory guidance.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.