To use core Strava features like activity tracking, routes, and segments, you must grant Strava permission to access your device's precise GPS location at all times.
Granting always-on precise location access means Strava continuously tracks your physical movements, which is among the most sensitive categories of personal data and can reveal your home, workplace, and daily routines.
Mandatory precise location collection for core service functionality may conflict with GDPR data minimisation principles (Article 5(1)(c)) and raises questions about whether consent is freely given when refusal prevents service use. This warrants legal review under GDPR, UK GDPR, and applicable US state location privacy laws.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
Strava collects highly sensitive personal data including precise GPS location, health metrics, and fitness activity, which is used for AI model training, advertising, and publicly accessible features like the Global Heatmap. Consumers should be aware that even with default settings, their anonymized or aggregated activity data may contribute to public features visible to anyone. You can adjust your privacy controls in Strava account settings at https://www.strava.com/settings/privacy to limit data visibility and opt out of certain data uses.