Policy covers Strava’s services, with Strava deciding how data is processed
This Privacy Policy took effect January 1, 2026. It applies to Strava’s platform and the related mobile apps, products, websites, technology, software and services (together, the “Services”). “Strava,” “we” and “us” mean the Strava entity that provides the Services to you. Strava says it acts as a data controller (or “business”), meaning it decides how personal information is collected and processed.
Supporting quotations
Effective Date: January 1, 2026
describes how we collect, share, and use your personal information, as well as how to exercise your privacy rights and choices
This Policy applies to Strava’s platform, including the related mobile applications, products, websites, technology, software, and services (collectively, “Services”).
As used in this Policy, the words “Strava,” “us,” “our,” or “we” means the Strava entity providing the Services to you.
Under this Policy, Strava acts as a data controller or “business” for the personal information we process. This means we decide how to collect and process personal information.
Qualifications & exceptions
The Terms of Service, which set out the terms governing the Services, are a separate document that the Policy asks you to read as well.
Not stated here
Which Strava entity provides the Services depends on where you are; see the notice for the EEA, UK, Switzerland, Brazil and other regions. The Terms of Service text was not supplied with this Policy.
Legal Rights & Agreement Rules · Context
US individuals are pointed to a state notice and a separate health data policy
For people in the United States, the Policy sends you to its notice for residents of certain US states and to a separate Consumer Health Data Policy. The text of that separate policy was not supplied here, so this analysis does not describe what it says.
Supporting quotations
For individuals in the United States, please also refer to our Notice For Individuals Residing In Certain US States below and the
Not stated here
The Consumer Health Data Policy is linked but was not supplied; its contents are not described.
Legal Rights & Agreement Rules · Permission or license
Information may be used to manage or respond to legal and regulatory demands
Strava may use information to manage or respond to demands or obligations related to the law, government entities or other regulatory bodies with respect to the Services.
Supporting quotations
We may use information to manage or respond to demands or obligations related to the law, government entities, or other regulatory bodies with respect to the Services.
Legal Rights & Agreement Rules · Permission or license
Information may be preserved and shared with authorities and litigants when the law compels or reasonably requires it
Strava may preserve and share your information with third parties, including law enforcement, public or governmental agencies or private litigants, within or outside your country of residence, if it determines that the law compels or reasonably requires the disclosure. This can include responding to court orders, warrants, subpoenas or other legal or regulatory process, or disclosures that are otherwise permitted by law.
Supporting quotations
We may preserve and share your information with third parties, including law enforcement, public or governmental agencies, or private litigants, within or outside your country of residence, if we determine that the law compels or reasonably requires such disclosure. This may include responding to court orders, warrants, subpoenas, or other legal or regulatory process, or disclosures that are otherwise permitted by law.
Qualifications & exceptions
The test is Strava’s own determination that the law compels or reasonably requires disclosure; disclosures “otherwise permitted by law” are also included.
Not stated here
The passage does not say whether or when you would be notified of a request.
Legal Rights & Agreement Rules · Permission or license
Information may be kept or disclosed to prevent harm, address national security, stop abuse or protect Strava’s rights
Strava may retain, preserve or disclose your information if it determines this is reasonably necessary or appropriate to prevent death, serious bodily injury or other significant harm; address national security or other issues of public importance; prevent or detect violations of its Terms or fraud or abuse of Strava or its users; or protect its operations, property or other legal rights, including in connection with actual or potential litigation. Elsewhere it also says it may process information when it believes that is necessary to prevent serious harm.
Supporting quotations
We may also retain, preserve or disclose your information if we determine it is reasonably necessary or appropriate to: (1) prevent death, serious bodily injury, or other significant harm; (2) address issues of national security or other issues of public importance; (3) prevent or detect violations of our Terms or fraud or abuse of Strava or its users; or (4) protect our operations or our property or other legal rights, including in connection with actual or potential litigation.
We may also process your information when we believe it is necessary to prevent serious harm.
Qualifications & exceptions
The test is Strava’s own determination that the step is reasonably necessary or appropriate.
Not stated here
The passage does not name who may receive the disclosed information in these cases.
Legal Rights & Agreement Rules · Context
In the EEA the provider is Strava Ireland Limited; otherwise it is Strava, Inc.
This notice gives additional information under data protection laws in the EEA, the UK, Switzerland, Brazil and other relevant jurisdictions. If you are in the EEA, Strava Ireland Limited provides the Services to you; otherwise Strava, Inc. provides them.
Supporting quotations
Below is additional information in accordance with data protection laws in the European Economic Area (“EEA”), the United Kingdom (“UK”), Switzerland, Brazil, and other relevant jurisdictions.
Data Controller: If you are in the EEA, Strava Ireland Limited provides the Services to you. Otherwise, Strava, Inc. provides the Services to you.
Qualifications & exceptions
The notice names the provider for people in the EEA and “otherwise”; the contact section lists a separate UK entity.
Legal Rights & Agreement Rules · Procedure
The Irish Data Protection Commission is the EEA lead authority, and a Data Protection Officer can be contacted
Strava’s lead supervisory authority in the EEA is the Data Protection Commission of Ireland. If you are in the EEA or the UK and have questions or requests about your legal rights, you can contact Strava’s Data Protection Officer at the email address given, and the Contact Us section lists the Data Protection Officer and Data Protection Representative information.
Supporting quotations
Strava’s lead supervisory authority in the EEA is the Data Protection Commission of Ireland.
If you are in the EEA or the UK and have any questions or requests about your legal rights, you can also contact our Data Protection Officer at DPO@strava.com.
Legal Rights & Agreement Rules · Context
Strava lists contract, consent, legitimate interests, legal obligation and vital interests as common legal bases
Some data protection laws (such as those in the EEA, the UK and Brazil) require a valid legal reason, called a legal basis, before personal information is collected, used, shared or otherwise processed. Common legal bases include contract (processing necessary to perform the contract with you under the Terms or to take steps at your request), consent (permission for a specific reason, which you can withdraw at any time), legitimate interests (uses that are expected and do not unfairly affect your rights), legal obligation (processing required by law) and vital interests (protecting someone’s life or safety).
Supporting quotations
Certain data protection laws (such as those in the EEA, the UK, and Brazil) require us to identify a valid legal reason (called a “legal basis”) before we collect, use, share or otherwise process your personal information. Common legal bases include:
When processing personal information is necessary to perform our contract with you (our Terms) or to take steps at your request before entering into a contract.
When you’ve given us permission to use your information for a specific reason. You have the right to withdraw your consent at any time.
When we use your information in ways that are expected and that do not unfairly affect your rights.
When we’re required to process your information by law.
When processing is needed to protect someone’s life or safety.
Qualifications & exceptions
The list is introduced as “common” legal bases.
Not stated here
Which legal basis applies to each purpose is not stated in the supplied text; the source says to click “Learn More” for the specific legal basis for each purpose, and that content was not supplied.
Legal Rights & Agreement Rules · Company practice
Information of people outside the US is transferred to and stored in the US, using legal mechanisms such as SCCs
If you are outside the United States and use the Services or give Strava information, you acknowledge that your information will be transferred, processed and stored in the United States. For international transfers of personal information, Strava says it uses legal mechanisms such as Standard Contractual Clauses to protect it in line with applicable data protection law, and you can contact Strava to ask for copies of the safeguards used.
Supporting quotations
If you are located outside of the United States and choose to use the Services or provide information to us, you acknowledge and understand that your information will be transferred, processed, and stored in the United States.
Whenever we transfer personal information internationally, we use legal mechanisms, such as Standard Contractual Clauses, to ensure the protection of your personal information, in accordance with applicable data protection law. If you have further questions about this or would like to request copies of the applicable safeguards used to transfer your information internationally, please contact us.
Qualifications & exceptions
The acknowledgment applies if you are outside the United States and choose to use the Services or provide information.
Legal Rights & Agreement Rules · Context
Residents of listed US states may have additional rights under their state privacy laws
Residents of certain US states, such as California, Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah or Virginia, and other states to the extent they enact similar privacy laws, may have additional rights under their state laws (together, “US State Privacy Laws”). The listed states are examples introduced with “such as”.
Supporting quotations
Residents of certain US states, such as California, Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia, and other states to the extent they enact similar privacy laws, may have additional rights under your corresponding state laws (collectively, “US State Privacy Laws”).
Qualifications & exceptions
The rights “may” exist under each state’s law; the list of states is introduced with “such as”.
Legal Rights & Agreement Rules · Company practice
Strava may change the Policy at any time, with prominent advance notice of material changes
Strava reserves the right to modify the Policy at any time. If it changes the Policy, it will post the revised policy and its effective date on its website. If it considers changes material, it will provide prominent, advance notice. If you object to changes, the Policy says you should stop using the Services and delete your account.
Supporting quotations
Strava reserves the right to modify this Policy at any time. If we make changes to this Policy, we will post the revised policy and its effective date on our website. If we make changes we deem to be material, we will provide prominent, advance notice. If you object to any changes to this Policy, you should stop using the Services and
Qualifications & exceptions
Whether a change is “material” is Strava’s own judgment (“we deem”).
Not stated here
The passage does not say how far in advance notice is given or by what channel.
Legal Rights & Agreement Rules · Procedure
Contact entities differ by region: Strava, Inc., Strava Ireland Ltd (EU/EEA) and Strava Limited (UK)
For questions about privacy practices or the Policy, or to contact Strava or its Data Protection Officer, you can use the listed email or addresses or the support site. Non-EU/EEA/UK data subjects contact Strava, Inc. in San Francisco, EU/EEA data subjects contact Strava Ireland Ltd. in Dublin, and UK data subjects contact Strava Limited in London, each marked Attn: Legal with the DPO email address.
Supporting quotations
If you have questions about our privacy practices, this Policy, or would like to contact us or our Data Protection Officer, you can do so by the email or addresses below or via
For Non-EU/EEA/UK Data Subjects:
Strava, Inc.
181 Fremont Street, Floor 27 San Francisco, CA 94105, USA Attn: Legal DPO@strava.com
For EU/EEA Data Subjects:
Strava Ireland Ltd.
Making it Work Magennis Court Pearse Street Dublin 2 D02 FK76 Ireland Attn: Legal DPO@strava.com
For UK Data Subjects:
Strava Limited.
Birchin Court 5th Floor 19-25 Birchin Lane London EC3V 9DU, United Kingdom Attn: Legal DPO@strava.com
Qualifications & exceptions
The same DPO email address is listed for each region.