Privacy Policy

Strava to Data: GPX & Stats (iPhone app, version 1.3 and later) · Effective 17 October 2026

• Who we are
• Strava login
• Apple Health
• Subscriptions
• Notifications
• On your iPhone
• On-device library
• Exports & AI prompt
• Network
• Email & feedback
• Retention & deletion
• Your rights
• Contact

Who we are

Strava to Data: GPX & Stats ("the app") is made by Morten Punnerud-Engelstad, an independent developer, who is responsible for this policy. Contact: morten@punnerud.net.

What we collect

Nothing through the app. The developer runs no servers for the app and receives no personal data from it. The app contains no analytics, advertising, crash reporting or tracking tools, and no third-party SDKs. It does not track you across apps or websites. In Apple's App Privacy terms: Data Not Collected. If you contact us by email or send feedback, we receive what you send; this is described under Email and feedback.

Strava login

• You log in on Strava's own website (strava.com) in a web view inside the app. Your password goes directly to Strava. The app never reads, sees or stores it. This also applies if you choose Continue with Google on Strava's login page; that sign-in also happens inside the web view.
• Strava's session cookies are kept in the app's web view storage on your iPhone, so the app can open your activity list and activities on strava.com. They stay until you tap Log out or delete the app.
• Activities (GPS points, heart rate, power and so on) are read from strava.com with your login. Unless you save them in the on-device library (see On-device library), they are kept only in memory while you look at them. They are never sent to the developer.
• Your use of strava.com is covered by Strava's own privacy policy. The app is not affiliated with or endorsed by Strava, Inc.

Apple Health (HealthKit)

• The app asks for read-only access to heart rate, and only when you tap Connect Apple Health in Your profile or Get heart rate from Apple Health on an activity that has no heart rate.
• It reads the heart rate recorded during that activity's time and uses it only for the analysis on your iPhone (heart rate zones, training load and similar).
• Heart rate from Apple Health is kept in memory for the open activity only. It is not saved, not added to GPX or CSV exports, not stored in iCloud, and never sent to the developer or anyone else.
• The app never writes to Apple Health. Health data is never used for advertising, marketing or data mining, never sold, and never shared with third parties.
• You can turn off access at any time in the Health app (Profile → Apps) or in Settings → Privacy & Security → Health.

Subscriptions and purchases

• Strava to Data Pro is an optional auto-renewable subscription sold through Apple's App Store. Apple processes the payment with your Apple Account.
• The developer never receives your name, email address, payment card or other payment details. Apple shares only sales reports with developers, which do not identify you.
• The app uses Apple's StoreKit to check on your iPhone whether you have an active subscription. This check happens between your device and Apple. There is no server of ours involved and no account with us.
• Apple's handling of purchase data is covered by Apple's privacy policy. You manage or cancel the subscription in Settings → [your name] → Subscriptions.

Notifications (trial reminders)

• If you start a free trial of Strava to Data Pro, the app can remind you before it ends: 3 days and 1 day before the trial ends.
• These are local notifications, scheduled on your iPhone with iOS. There is no push server, no device token is created or sent, and no data leaves your iPhone. The only information used is the trial end date that StoreKit reports on your device.
• The app asks for permission only right after you start a trial, never when you open the app. If you say no, the app works the same, just without reminders.
• Reminders are removed when the app sees that you cancelled (the next time you open it), when the trial ends or when your subscription changes. You can turn notifications off at any time in Settings → Notifications → Strava to Data.

Data stored on your iPhone

These values are stored only on your device, in the app's own storage, and never sent to us:

• Your profile for the analysis: max and resting heart rate, FTP and weight.
• AI instructions you choose to save, and your default instruction.
• Small app settings: whether you are logged in, how many files you have exported (to time Apple's rating prompt) and when the app last checked for an update of its Strava reader.
• A downloaded copy of the app's Strava reader script (see Network connections).
• The Strava session cookies described above.
• Any trial reminders that are scheduled (see Notifications).
• If you use it: the on-device library of your activities, with the marked area and the map position (see On-device library), and the library's period filter and map style.

On-device library

• Saving activities on your iPhone is optional and starts only when you tap it. The app then reads your activity list and each activity from strava.com with your login, one at a time, and stores them in a database file in the app's private storage on your iPhone.
• For each activity it stores the name, date, sport, distance, time and elevation, and the recorded streams: GPS track, altitude, time, heart rate, cadence, power and temperature, where Strava has them. It also stores map data made from the GPS track (for the heatmap and the area search), the area you last marked on the library map and the last map position.
• The library is used only on your iPhone: the list, the date filter, the heatmap, the area search and comparisons. It is never uploaded or sent to the developer or anyone else, and it is excluded from iCloud and device backups.
• You can delete it at any time with Delete library in Your profile or on the library screen. When you log out of Strava, the app asks whether to keep or delete it. Deleting the app also deletes it.

Exports and the AI prompt

• GPX and CSV files are created on your iPhone and go only where you choose (Files, copy, or the share sheet).
• "AI training analysis" builds a text prompt from the activity. Only if you tap Copy Prompt is the text placed on your clipboard. It contains your activity data, which can include heart rate from Strava. Heart rate read from Apple Health is left out of the prompt. You decide where to paste it, and that service's own privacy policy then applies. The app itself never sends anything to an AI service.

Network connections

This is the complete list of connections the app makes:

The optional Send feedback link in "Your profile" opens a Google Forms page in Safari. Only what you type there is sent. See Email and feedback.

Email and feedback you send us

The app sends nothing to the developer, but you can choose to contact us. In that case the developer receives and keeps what you send:

• Email to morten@punnerud.net: your email address, your name if your email shows it, and whatever you write or attach, for example your iPhone model, iOS version, screenshots or a link to a Strava activity.
• The feedback form (Send feedback in the app, a Google Forms page): your feedback, an optional 1–5 rating and, only if you choose to give it, your email address for follow-up questions. Your name is not asked for. The answers are stored in the developer's Google account; Google processes them on our behalf, and Google's privacy policy also applies to your use of Google Forms.

Purpose: to answer you, to fix problems you report and to improve the app. Legal basis (EU/EEA GDPR, which applies in Norway): our legitimate interest in answering messages and improving the app (Article 6(1)(f)), and for support requests about your purchase or use of the app, taking the steps you ask for (Article 6(1)(b)). We never sell these messages, never use them for advertising and never share them with anyone except the email and form providers that store them for us, or where the law requires it.

How long: messages are kept only as long as needed to answer and follow up, and deleted at the latest 12 months after the last message in the case. Feedback answers that contain no contact details may be kept as anonymous suggestions. You can ask us to delete your messages at any time.

Retention and deletion

• The app gives the developer no data about you. The only data we may hold are emails and feedback you have sent us yourself. Email morten@punnerud.net to get a copy of them or to have them deleted.
• Log out removes the Strava session from the app, and asks whether to keep or delete the on-device library.
• Delete library removes the saved activities, the map data, the marked area and the map position from your iPhone.
• Deleting the app removes everything it stored on your iPhone.
• Data on strava.com is managed in your Strava account. Purchase history is managed by Apple.

Your rights

Under the GDPR you have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its use, and to receive it in a portable format. Email morten@punnerud.net and we will answer within one month. If you think we handle your data unlawfully, you can complain to the Norwegian Data Protection Authority, Datatilsynet, or to the data protection authority where you live.

Children

The app is not directed at children and does not knowingly process data about children. The app itself collects no data from anyone.

Changes

If this policy changes, the new version will be published on this page with a new effective date. Material changes will also be mentioned in the app's release notes.

Contact