Strava may use your health data — including heart rate, sleep data, and other fitness metrics — to train its AI and machine learning models, subject to your privacy controls and sharing permissions.
Health data is among the most sensitive personal information and using it for AI training raises significant privacy concerns, particularly regarding what future uses those models may be applied to.
Use of health data for AI/ML training implicates GDPR Article 9 (special category data), CCPA/CPRA sensitive personal information provisions, and Washington My Health MY Data Act. Legal teams should verify lawful basis, consent adequacy, and whether AI training constitutes a compatible purpose under applicable law.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
Strava collects highly sensitive personal data including precise GPS routes, heart rate, sleep data, and other health metrics, which may be used to train AI/ML models and contribute to publicly accessible features like the Global Heatmap. Health data from connected devices will not be sold or used for advertising, but activity data can be shared in aggregated or de-identified form and used for AI development. You can adjust your privacy and visibility controls in the Strava app under Settings > Privacy Controls to limit how your data is shared and used.