These rights give you meaningful control over your personal information and are legally enforceable under California law and GDPR, meaning Peloton must respond to valid requests within defined timeframes.
Consumer impact
Peloton collects sensitive health and fitness data, device identifiers, and precise location information that may be shared with third-party advertising and analytics partners. Users' workout performance, heart rate, and activity data are linked to their profiles and may be used for targeted advertising across platforms. You can opt out of targeted advertising and request deletion of your personal data by visiting Peloton's privacy settings in your account or contacting privacy@onepeloton.com.
What you can do
⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
Delete Your Data
Email privacy@onepeloton.com to submit a data access, correction, or deletion request. Include your full name, account email address, and a description of the right you wish to exercise. Peloton is required to respond within 30-45 days depending on your jurisdiction.
Export Your Data
To request a copy of all personal data Peloton holds about you, email privacy@onepeloton.com specifying that you are making a data portability or access request under CCPA or GDPR.
Applicable agencies
FTC
The FTC can investigate failures by companies to honor consumer data rights requests as unfair or deceptive practices under Section 5 of the FTC Act.
State attorneys general enforce CCPA/CPRA data subject rights and can investigate complaints where companies fail to respond to valid consumer requests.