Provisions Index

T-Mobile collects your call records, data usage patterns, and network activity as CPNI — information protected under federal telecommunications law — and may use and share it subject to specific legal requirements and your consent rights....

Why it matters: CPNI includes sensitive details about who you call, when, and for how long, and is federally protected; consumers have rights to restrict its use for marketing and to be notified of unauthorized disclosures....

T-Mobile acknowledges that it sells and shares personal information as defined under California law, and California residents have the right to opt out of these practices....

Why it matters: Under CCPA/CPRA, 'selling' and 'sharing' personal data for advertising is a significant consumer rights trigger, giving California residents the right to stop T-Mobile from monetizing their data with third parties....

T-Mobile collects your precise geographic location through GPS, cell tower data, and Wi-Fi signals, and may use and share this data for service delivery, advertising, and other purposes....

Why it matters: Precise location data is among the most sensitive categories of personal information, capable of revealing your home, workplace, medical visits, religious practices, and other intimate details of your life....

T-Mobile grants consumers the right to access, delete, correct, and obtain a portable copy of their personal information, and prohibits retaliation for exercising these rights....

Why it matters: These rights give you meaningful control over the personal data T-Mobile holds about you, including the ability to request removal of your data from their systems....

T-Mobile states it does not knowingly collect personal information from children under 13 without verifiable parental consent and provides specific disclosures for its family plan features....

Why it matters: Children's data receives heightened legal protection under COPPA; parents need to be aware of what data T-Mobile may collect about minors on family plans and what controls are available....

T-Mobile shares your personal information with affiliates, business partners, service providers, advertising networks, data analytics companies, and government or law enforcement entities in various circumstances....

Why it matters: The broad scope of third-party sharing means your personal data may flow to numerous organizations beyond T-Mobile itself, reducing your control over how it is ultimately used....

T-Mobile retains your personal information for varying periods after you close your account, depending on legal obligations, business purposes, and regulatory requirements....

Why it matters: Even after you cancel your T-Mobile service, your personal data — including call records, location history, and financial information — may remain in T-Mobile's systems and be accessible to the company and potentially third parties....

T-Mobile collects biometric information and other sensitive personal data categories, including financial information, health-adjacent data, and precise geolocation, subject to heightened protections under applicable law....

Why it matters: Biometric and sensitive data are among the most protected categories of personal information under state laws, and their collection by a major carrier creates significant privacy and security risks if mishandled....

As your internet service provider, T-Mobile can see the websites you visit and apps you use on its network and may use this information to infer interests and serve targeted advertising....

Why it matters: Unlike website cookies, network-level monitoring is invisible to consumers and captures all online activity on T-Mobile's network regardless of browser privacy settings, representing a uniquely invasive form of data collection....

Grindr collects sensitive health information including your HIV status and last test date if you choose to share it on your profile, and this information is treated as special category data under applicable law....

Why it matters: HIV status is among the most sensitive categories of personal data; its exposure could lead to discrimination, stigma, or harm — particularly for users in jurisdictions where same-sex conduct or HIV status carries legal consequences....

Grindr collects your precise GPS location to show you nearby users and may share this location data with third-party advertising partners and service providers....

Why it matters: Precise location data can reveal where you live, work, worship, or receive medical care — and for LGBTQ+ users, it can expose visits to locations that reveal sexual orientation or gender identity....

Grindr embeds third-party software development kits (SDKs) from advertising and analytics companies that independently collect data about you, including device identifiers and behavioral data....

Why it matters: Third-party SDKs operate largely outside of Grindr's direct control and may collect and transmit your data to their own systems, creating data flows that users cannot easily monitor or stop....

Grindr may sell or share your personal data with third parties for cross-context behavioral advertising purposes, and California residents have the right to opt out of this sale or sharing....

Why it matters: Under CCPA/CPRA, selling or sharing personal data without offering a clear opt-out is a significant consumer rights issue, particularly when the data relates to sensitive attributes like sexual orientation....

Users can request that Grindr delete their personal data or provide a copy of the data Grindr holds about them by submitting a request through the app or Grindr's privacy portal....

Why it matters: Given the sensitive nature of data Grindr holds, the ability to have your data fully and verifiably deleted is an important consumer protection — particularly for users who are concerned about data exposure risks....

Grindr may transfer your personal data to countries outside of your own, including to the United States, and relies on legal mechanisms such as Standard Contractual Clauses to authorize these transfers for EU and UK users....

Why it matters: Transferring data internationally can expose it to different and potentially weaker legal protections than those available in the user's home country....

Under California's CPRA, Grindr is required to limit its use of sensitive personal information — including sexual orientation, precise geolocation, and health data — to purposes necessary to provide the service, unless you consent to additional uses....

Why it matters: This provision gives California users specific rights to limit how their most sensitive data is used, which is particularly significant given Grindr's user base and the nature of the data it holds....

Grindr retains your personal data for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements....

Why it matters: Indefinite or lengthy data retention means that sensitive information — including location history and health data — may remain on Grindr's systems and those of its partners long after you stop using the app....

When you delete your Grindr account, the company states it will delete or anonymize your personal data, though some data may be retained for legal or operational purposes....

Why it matters: Users should understand that deleting the app from your device does not delete your account or your data — a formal account deletion request is required....

Grindr's service is not directed at individuals under the age of 18, and the company states it does not knowingly collect personal data from minors....

Why it matters: Given the nature of the platform, ensuring minors cannot access the service or have their data collected is both a legal obligation and a significant safety issue....

If you have a dispute with Lyft, you must resolve it through binding arbitration rather than going to court. This means a private arbitrator, not a judge or jury, will decide the outcome....

Why it matters: Arbitration limits your ability to challenge Lyft publicly or obtain full legal remedies, and removes the right to a jury trial....

You agree not to participate in any class action lawsuit against Lyft, meaning you cannot join together with other users to sue Lyft as a group....

Why it matters: Class actions are often the only practical way for consumers to pursue small individual claims; waiving this right significantly reduces your legal leverage against a large corporation....

Lyft limits how much money it can owe you if something goes wrong — generally capped at the amount you paid Lyft in the 12 months before the incident....

Why it matters: If you are seriously harmed through use of Lyft's service, this cap could mean you receive far less compensation than your actual losses....

You agree to compensate Lyft for any legal costs or damages it incurs because of your actions or use of the service, including claims brought by third parties....

Why it matters: This clause shifts significant financial risk onto users, potentially making you responsible for Lyft's legal fees and settlements if a dispute arises related to your use of the platform....

Lyft can change, suspend, or discontinue any part of its service at any time, with or without notice, and can also terminate your account....

Why it matters: You have no guaranteed right to continued access to Lyft's services, even if you depend on them, and Lyft can remove your account without providing a reason....

Lyft states that drivers are independent contractors, not Lyft employees, which means Lyft takes less legal responsibility for driver conduct....

Why it matters: This classification limits Lyft's liability for driver misconduct or negligence during rides, and affects whether safety regulations that apply to employers apply to Lyft....

Lyft collects a wide range of personal data about you — including location, payment information, and usage data — and may share it with third parties including partners and service providers....

Why it matters: Your precise location, travel patterns, payment details, and personal information may be shared with entities beyond Lyft, raising privacy and data security concerns....

Any legal disputes are governed by California law, and non-arbitration disputes must be brought in San Francisco courts....

Why it matters: If you live outside California and have a dispute with Lyft, you would need to engage California law and potentially travel to San Francisco to litigate, which is burdensome for most users....

Lyft can change its pricing, fees, and promotional credits at any time, and promotional credits may have expiration dates or be subject to restrictions....

Why it matters: Any promotional credits or discounts you have received may expire or be changed without meaningful advance notice, affecting the value of your Lyft account....

Any content you submit to Lyft — such as reviews, photos, or feedback — becomes licensed to Lyft, allowing them to use it without paying you....

Why it matters: Content you create and share through the Lyft platform can be used by Lyft for marketing, product improvement, or other purposes without additional consent or compensation....

Unless you live in the EU or opt out within 30 days, any dispute with Strava must be settled through private arbitration, not in court, and you cannot join a class action lawsuit against Strava....

Why it matters: This strips most users of the right to sue Strava in court or band together with other users in a class action, which significantly limits your legal options if something goes wrong....

Your Strava subscription automatically renews at the start of every billing period and will keep charging you until you cancel at least 24 hours before the next renewal date....

Why it matters: If you forget to cancel in time, you will be charged for another full billing period with no refund, making it easy to incur unwanted charges....

Strava generally does not provide refunds or credits for subscription fees, except where required by law or explicitly stated in the Terms....

Why it matters: If you are charged for a renewal you did not intend, or if you cancel mid-period, you will not receive a refund for unused time — your money is gone....

When you upload content (like activity data, routes, photos, or text) to Strava, you grant Strava a worldwide, royalty-free, sublicensable license to use, reproduce, modify, and distribute that content for the purposes of providing and improving the Services....

Why it matters: Strava can use the data and content you upload — including your GPS routes, activity records, and photos — broadly to operate and develop its platform, and can sublicense it to third parties....

Strava can suspend or permanently delete your account at any time, with or without notice, if it believes you have violated the Terms or for any reason within its sole discretion....

Why it matters: You could lose access to all your activity history, routes, and data without warning, and Strava has broad discretion to make this decision with limited accountability....

Strava requires users to be at least 13 years old (or older depending on local law), and parents or legal guardians are fully responsible for any breaches of the Terms by underage users they permit to use the platform....

Why it matters: If you allow your child to use Strava, you are legally responsible for everything they do on the platform, including any rule violations — and Strava can refuse service to any underage user at its discretion....

Strava can raise subscription prices or add new fees at any time, with only 'reasonable notice' required, and the new price takes effect at your next billing date....

Why it matters: Your subscription cost can increase without your explicit consent — only notice is required, meaning you may be billed more than you originally agreed to unless you cancel....

Strava allows you to connect your account to third-party apps and services (like Apple Health, Garmin, or challenge sponsors), and data shared with these third parties is governed by their own policies, not Strava's....

Why it matters: When you connect a third-party app to Strava, your fitness, location, and activity data may flow to those third parties and Strava is not responsible for how they handle it....

For non-EU users, disputes are governed by the laws of California and must be resolved in courts located in San Francisco, California, unless subject to the arbitration clause....

Why it matters: If you live outside California and have a dispute with Strava that isn't covered by arbitration, you may need to travel to California to pursue legal action, which is a significant practical barrier....

If Strava gives you access to beta features, you use them at your own risk — they may have bugs or errors, and Strava can remove them at any time without notice....

Why it matters: Participating in Strava beta programs means accepting that features may not work correctly and could affect your data or account, with no recourse against Strava....

Peloton collects health and fitness data from your workouts, including heart rate, calories burned, workout frequency, and performance metrics, linked directly to your account profile....

Why it matters: Health and fitness data is among the most sensitive categories of personal information, and its collection by a commercial entity creates risks of misuse, data breach exposure, and potential sharing with insurers or employers....

Peloton shares your personal data with third-party advertising partners, which may constitute a 'sale' or 'sharing' of personal information under California law, enabling targeted advertising across platforms....

Why it matters: Your personal data, including usage patterns and device identifiers, may be shared with advertisers you have no relationship with, enabling tracking across the internet beyond the Peloton platform....

Peloton uses cookies, pixels, and similar tracking technologies on its website and apps to collect data about your browsing behavior, which may be shared with third-party analytics and advertising vendors....

Why it matters: Tracking technologies allow Peloton and its partners to monitor your online behavior across sessions and potentially across other websites, building a detailed profile of your interests and habits....

California residents have the right to know what personal data Peloton collects, request deletion of their data, opt out of the sale or sharing of their data, and not be discriminated against for exercising these rights....

Why it matters: These are legally enforceable rights under California law, giving California users significant control over their personal data and how it is used by Peloton and its partners....

Users in the EU and UK have rights under GDPR to access, correct, delete, restrict, and port their personal data, as well as to object to processing and withdraw consent at any time....

Why it matters: GDPR provides some of the strongest privacy protections globally, and EU/UK Peloton users can enforce these rights directly against Peloton, including the right to complain to their national data protection authority....

Peloton collects precise geolocation data from your device when you use their apps or services, subject to your device permissions....

Why it matters: Precise location data is among the most sensitive categories of personal information and can reveal sensitive details about your daily routines, home address, and movements....

Peloton retains your personal data for as long as your account is active or as needed to provide services, comply with legal obligations, or resolve disputes....

Why it matters: Indefinite or long-term data retention increases the risk that your personal information could be exposed in a data breach or used in ways you did not anticipate when you signed up....

Peloton may transfer your personal data to countries outside your home country, including the United States, where data protection laws may differ from those in the EU or UK....

Why it matters: Transferring your data internationally means it may be subject to different — and potentially weaker — legal protections, and may be accessible to foreign governments or other entities....

Peloton's services are not directed at children under 13 (or higher age thresholds in certain jurisdictions), and the company states it does not knowingly collect personal data from children....

Why it matters: If a child's data is inadvertently collected, COPPA violations and significant regulatory penalties could result, and parents should be aware of what data might be associated with family accounts....

Peloton provides all users with rights to request access to their personal data, correct inaccuracies, and request deletion of their information, subject to legal and operational limitations....

Why it matters: These rights give you meaningful control over your personal information and are legally enforceable under California law and GDPR, meaning Peloton must respond to valid requests within defined timeframes....

When you buy a ticket, Ticketmaster shares your personal information — including contact details and purchase data — with the artist, promoter, venue, or record label associated with that event....

Why it matters: Event Partners receive your data as independent controllers, meaning they can use it under their own privacy policies, which may differ significantly from Ticketmaster's....