Account, profile and support information you provide is collected
Strava collects account information you provide (name, email address, phone number, date of birth, gender, username and password), profile information about yourself (photo, weight, preferred sport types, fitness goals and level of experience), and the information you provide when you ask for support.
Supporting quotations
We collect account information such as your name, email address, phone number, date of birth, gender, username, and password.
We collect information you provide about yourself, such as your photo, weight, preferred sport type(s), fitness goals, and level of experience.
We collect the information you provide in connection with requests for support.
Qualifications & exceptions
The lists are introduced with “such as”, so they are examples rather than a closed list.
Data Access & Collection · Company practice
If you share your contacts, Strava regularly accesses and stores them
Sharing contacts from your mobile device or social networking accounts is your choice. If you do share them, Strava says it will regularly access and store that information to help you connect with Strava users you may know.
Supporting quotations
You can choose to share contacts from your mobile device or social networking accounts. If you share this information, we will regularly access and store it to help you connect with Strava users you may know.
Qualifications & exceptions
Applies only if you choose to share contacts.
Not stated here
How long contacts information is kept is not stated in this passage.
Data Access & Collection · Company practice
Content you share and how you use the Services are collected
Strava collects the content you share through the Services (segments, routes, photos, videos, posts, comments and messages) and information about how you use them, such as club or challenge participation, kudos, participation in partner events, and actions like logging in or viewing other people’s activities.
Supporting quotations
We collect content you share through the Services, such as segments, routes, photos, videos, posts, comments, and messages.
We collect information from your use of the Services, such as club or challenge participation, kudos, participation in partner events, and actions you take such as logging in or viewing others’ activities.
Qualifications & exceptions
Messages are listed among the content collected.
Data Access & Collection · Company practice
Activity Data, including geolocation and any health data you provide, is collected
Strava collects Activity Data directly or through third-party integrations you set up. Activity Data is information about activities you record or upload, such as equipment usage, date, time, distance, speed, pace, perceived exertion, power, cadence and geolocation information. It can also include health data such as heart rate if you choose to provide it.
Supporting quotations
We collect Activity Data directly or through third-party integrations you configure.
“Activity Data” is information about the activities you record or upload to Strava, such as equipment usage, date, time, distance, speed, pace, perceived exertion, power, cadence, and geolocation information.
Activity Data can also include health data, such as heart rate, if you choose to provide it.
Qualifications & exceptions
Health data is part of Activity Data only if you choose to provide it.
Data Access & Collection · Company practice
Precise device location is collected, and core features depend on granting permission
Strava collects or infers location information when you sign up for and use the Services. For core features such as GPS activity tracking, routes and segments to work, the Policy says you must give Strava permission through your device to track your device’s precise location. You can stop sharing precise location at any time in your device settings.
Supporting quotations
We collect or infer location information when you sign up for and use the Services.
For our core features to function (e.g., GPS activity tracking, routes, segments), you must grant us permission through your device to track your device’s precise location. You can stop sharing precise location at any time with your device settings.
Qualifications & exceptions
Location can be inferred as well as collected directly.
The control for stopping precise location sharing is in your device settings.
Not stated here
The passage does not say what happens to features if you withdraw location permission beyond saying permission is needed for core features to function.
Data Access & Collection · Company practice
Technical device information, log files and cookie data are collected
Strava collects technical information from the browser, computer or mobile device you use, including device and network information, log files and analytics information. It also collects and uses information through cookies and similar technologies; the Policy points to its cookies section for detail.
Supporting quotations
We collect technical information from the browser, computer, or mobile device used to access the Services. This includes device and network information, log files, and analytics information.
We collect and use information through cookies and similar technologies.
Data Access & Collection · Company practice
Data from devices and apps you connect, including sleep and heart-rate data, is collected
Strava collects information, including Activity Data, from devices and apps you choose to connect, such as a Garmin device, a Peloton account or the Apple Health app. The Policy says this could include step count, sleep information, heart rate, HRV or VO2max.
Supporting quotations
We collect information (including Activity Data) from devices and apps you choose to connect to Strava, such as your Garmin device, Peloton account, or Apple Health app. This could include, for example, step count, sleep information, heart rate, HRV, or VO2max.
Qualifications & exceptions
Applies to devices and apps you choose to connect; the list is given as examples.
Data Access & Collection · Company practice
Signing in with Google, Apple or similar accounts brings in profile information
You can sign up and log in with accounts from other businesses, such as Google or Apple. If you do, Strava collects information such as your name, email address, profile information and preferences. To control what Strava receives from those accounts you must use the privacy controls in the Third-Party Account itself.
Supporting quotations
You can sign up and log in to the Services using accounts with other businesses, such as Google or Apple (“Third-Party Accounts”). If you access the Services through Third-Party Accounts, we will collect information such as your name, email address, profile information, and preferences. To control the information we receive from Third-Party Accounts, you must use the privacy controls in your Third-Party Account.
Qualifications & exceptions
Applies if you access the Services through a Third-Party Account.
Data Access & Collection · Company practice
Information about you can also come from service providers, other users and affiliates
Strava may collect information about you through its service providers (for example when collecting your feedback through surveys), from other Strava users (for example when they give you kudos or comment on your activities), and from its corporate family of affiliates and subsidiaries.
Supporting quotations
We may collect information through our service providers, such as when we collect your feedback through surveys.
We may collect information about you from other Strava users, such as when they give you kudos or comment on your activities.
We may collect information about you from our corporate family of companies, including our affiliates and subsidiaries
Qualifications & exceptions
Each source is described with “may”, so the Policy does not say it always happens.
Data Access & Collection · Company practice
Strava may collect information about you from its affiliates and subsidiaries
Strava may collect information about you from its corporate family of companies, including affiliates and subsidiaries. The Policy identifies those companies through a link to a subsidiaries page.
Supporting quotations
We may collect information about you from our corporate family of companies, including our affiliates and subsidiaries
Not stated here
The linked list of subsidiaries was not supplied, so which companies are included is not stated here.
Data Access & Collection · Company practice
Cookies, pixels, SDKs and Google Analytics are used, including to serve and measure ads
Strava collects, uses and discloses information through cookies, tracking pixels, SDKs, Google Analytics and other third-party tracking technologies. The stated purposes are security and authentication, understanding and improving your experience, analytics, informing and serving relevant ads, understanding how you interact with ads, and letting you navigate and use the Services. The Policy also ties analytics and targeted advertising to these technologies.
Supporting quotations
We collect, use, and disclose information through the use of cookies, tracking pixels, SDKs, Google Analytics, and other third-party tracking technologies for security and authentication, to understand and improve your experience, perform analytics, inform and serve relevant ads, understand how you interact with ads, and allow you to navigate and use our Services.
This may include the use of cookies and other tracking technologies, as described in the Cookies and Similar Tracking Technologies section.
We advertise our Services through third parties, and may use cookies and other tracking technologies to support targeted advertising and serve relevant ads
Not stated here
The Cookie Policy and Google’s explanation of how it uses information from sites or apps that use its services were not supplied, so how to manage cookie preferences and what Google does with the data are not described.
Data Access & Collection · Restriction or exception
Do Not Track browser signals are not currently processed
Do Not Track (DNT) is a privacy preference you can set in browsers, but Strava says it does not currently process DNT signals.
Supporting quotations
Note that Do Not Track (DNT) is a privacy preference you can set in browsers, but we do not currently process DNT signals.
Qualifications & exceptions
The statement says “currently”, so it describes present practice.