Strava allows you to connect your account to third-party apps and services (like Apple Health, Garmin, or challenge sponsors), and data shared with these third parties is governed by their own policies, not Strava's.
When you connect a third-party app to Strava, your fitness, location, and activity data may flow to those third parties and Strava is not responsible for how they handle it.
Third-party data flows raise significant GDPR data controller/processor boundary questions for EU/EEA users and CCPA third-party sharing disclosure obligations for California residents. Due diligence on third-party data practices cannot be delegated to users through a simple disclaimer.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
Strava's Terms grant the company a broad, royalty-free license to use content you upload, require most non-EU users to resolve disputes through binding arbitration (waiving your right to sue in court or join a class action), and enforce automatic subscription renewal unless canceled at least 24 hours before the billing period ends. The no-refund policy means payments are generally non-recoverable once charged. You can opt out of the arbitration clause by sending written notice to Strava within 30 days of first accepting the Terms.