Strava uses your recorded activity routes to contribute to a publicly visible Global Heatmap that shows where people are exercising around the world.
This analysis describes what Strava's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Even aggregated or 'deidentified' location data has been shown to expose sensitive locations such as military bases or private residences, creating real-world safety and privacy risks.
Strava collects highly sensitive personal data including precise GPS location history, health metrics (heart rate, HRV, VO2max), and biometric data, which is used for AI training, advertising personalization, and aggregated into publicly visible features like the Global Heatmap. Your activity data may be shared with third-party advertising partners, though Strava commits not to use health data for advertising. You can adjust your data sharing and visibility settings by navigating to Privacy Controls in the Strava app settings, and can request data deletion by visiting strava.com/athlete/delete_your_account.
Cross-platform context
See how other platforms handle Global Heatmap and Aggregated Location Data and similar clauses.
Compare across platforms →Monitoring
Strava has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
The aggregation of GPS data into public-facing products raises concerns under GDPR recital 26 regarding the adequacy of anonymisation, and may create liability if deidentification is reversed; risk teams should assess whether opt-out mechanisms are sufficient.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Even aggregated or 'deidentified' location data has been shown to expose sensitive locations such as military bases or private residences, creating real-world safety and privacy risks.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Strava.