10 Total
1 High severity
8 Medium severity
1 Low severity
Summary

This document establishes the terms governing user access to and use of Strava's fitness tracking platform, including its mobile application, website, and related services. The agreement grants Strava a royalty-free, worldwide license to use, reproduce, modify, and distribute user-uploaded content including activities, routes, photos, and related data, and authorizes Strava to commercialize aggregated, de-identified workout data through programs such as Strava Metro. For US users, the agreement requires that disputes be resolved through individual arbitration rather than litigation, with a 30-day opt-out period following account creation or material changes to the arbitration clause.

Technical / Legal Breakdown

This document is Strava's Terms of Service (effective January 1, 2026), governing user access to the Strava platform, mobile applications, websites, and related services, with Strava Ireland Limited as the contracting entity for EU/EEA users and Strava, Inc. for all others. The agreement states that users grant Strava a broad, royalty-free, worldwide, sublicensable, and transferable license to use, reproduce, modify, adapt, publish, translate, distribute, and create derivative works from user-submitted Content, and separately authorizes Strava to aggregate and commercialize de-identified athlete data through its 'Metro' and research programs without additional compensation to users. The arbitration clause requires non-EU users to resolve disputes through binding individual arbitration under AAA rules, with a 30-day opt-out window, a class action waiver, and a shortened one-year statute of limitations for claims, which represents a significant restriction on legal recourse relative to default statutory rights in many US states; the breadth of the content license and data commercialization provisions, while disclosed, may engage tension with GDPR legitimate interest and consent requirements for EU/EEA users. The document engages GDPR for EU/EEA users (with Strava Ireland Limited as the relevant entity), CCPA for California residents, COPPA for users under 13, and general FTC Act consumer protection principles; enforcement exposure varies materially by jurisdiction, particularly regarding the enforceability of arbitration clauses and class action waivers in the EU, UK, and certain US states. Compliance teams should note that the terms reserve broad unilateral rights to modify fees, discontinue features, and terminate accounts, and that third-party data sharing through integrations is explicitly placed outside Strava's responsibility.

Institutional Analysis

Institutional analysis available with Professional

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Start Professional free trial
High — 1 provision
Medium — 8 provisions
Low — 1 provision

Monitoring

Strava has updated this document before.

Watcher includes same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →

Professional Governance Intelligence

Need provision-level monitoring and regulatory mapping?

Professional includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.

Start Professional free trial

Cross-platform context

See how other platforms handle Age Restriction and Parental Responsibility and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

BIPA
Illinois, USA
View official text ↗
CCPA/CPRA
California, USA
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
FAA
United States Federal
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
HIPAA
United States Federal
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
UK GDPR
United Kingdom
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured May 5, 2026 05:58 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000271
Version ID CA-V-001211
SHA-256 734b241932711db612fe13486663f8772a8929e599391b2456045338acc0833f
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.

Create free account Compare plans