Strava's Flyby feature lets other users who were near you during an activity see your identity and activity data, unless you opt out in your privacy controls.
This analysis describes what Strava's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The clause establishes the operational scope of Strava's social and competitive infrastructure, defining which interaction mechanisms and data-sharing features are integrated into the service architecture and available to users.
If you don't actively opt out of Flyby, other Strava users who were near you during a workout can see that you were there and identify you, even if your activities are otherwise set to private — a significant safety risk for solo exercisers.
How other platforms handle this
Tabnine is headquartered in the United States and operates globally. If you are located outside the United States, your personal data may be transferred to and processed in the United States or other countries that may not provide the same level of data protection as your home country. We rely on ap...
We may share personal information with third-party service providers and partners who support our business operations, including identity verification providers, payment processors, analytics providers, marketing partners, and blockchain analytics companies.
We may share information about you and your transactions with Card Networks and our financial services partners. By accepting this agreement, you authorize Stripe to share your information with these entities for purposes including facilitating your use of the Services, complying with applicable law...
Monitoring
Strava has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"We facilitate interactions with other users, such as to compete on segments; participate in clubs, challenges, or events; find, follow, or message other users; and use additional features to interact with each other, such as group activities or Flyby.— Excerpt from Strava's Strava Privacy Policy
(1) REGULATORY FRAMEWORK: The Flyby feature implicates GDPR Art. 6(1)(a) (consent as lawful basis for sharing location proximity data with third-party users), GDPR Art. 25 (data protection by design and by default — an opt-out default for a feature sharing location identity data may not satisfy the 'by default' requirement for privacy-protective settings), and CCPA/CPRA sensitive personal information provisions for precise geolocation. FTC Act Section 5 applies if the default is deceptive relative to user expectations. Some EU supervisory authorities have found opt-out defaults for sensitive features non-compliant with GDPR Art. 25. (2)
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The clause establishes the operational scope of Strava's social and competitive infrastructure, defining which interaction mechanisms and data-sharing features are integrated into the service architecture and available to users.
If you don't actively opt out of Flyby, other Strava users who were near you during a workout can see that you were there and identify you, even if your activities are otherwise set to private — a significant safety risk for solo exercisers.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Strava.