Strava allows you to connect your account to third-party apps and services, but Strava is not responsible for how those third parties handle your data β their own privacy policies apply.
Once your fitness data flows to a third-party app like Garmin or Apple Health, Strava has no control over it and you are bound by that third party's terms, which you may not have reviewed.
Third-party data sharing arrangements may trigger controller-processor or joint controller obligations under GDPR; compliance teams should assess whether data processing agreements are in place with all integrated third parties and whether adequate disclosures are made to users.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
Strava collects and uses your fitness data, location, and content under a broad license, and can share it with third parties. US users are subject to binding arbitration and cannot join class action lawsuits against Strava. You can opt out of the arbitration clause by sending written notice to Strava within 30 days of first accepting these Terms.