Privacy Policy for STRIVO Application

Last updated: May 8, 2026

The STRIVO application (hereinafter “Application”) is provided by PureIT Bartosz Pawlak (hereinafter “Administrator”). This policy describes the rules for processing information in the STRIVO mobile application, used for treadmill control and monitoring running workouts.

1. Data Controller

The data controller is: PureIT Bartosz Pawlak
ul. Marmurowa 44/45, 05-110 Jabłonna, Poland
VAT ID (NIP): 7392446443
REGON: 382167020
Email: bp.pureit@gmail.com

2. Scope and Purpose of Data Processing

The Application is designed following the Privacy by Design model. Most data is processed locally on the user’s device.

Workout Data: The Application records workout parameters: speed, treadmill incline, distance, duration, and heart rate (if an external sensor is connected). This data is used solely for presenting statistics and activity history to the user.
Biometric Data: The user may optionally provide weight, age, and gender for calorie burn calculations. This data remains exclusively on the device.
Strava Integration: If connected to the Strava platform, the Application processes OAuth2 tokens solely to upload workout files to the user’s account. The Application does not download activity data of other users, does not create public leaderboards, and does not use Strava data to train artificial intelligence (AI/ML) models.

3. Device Permissions

The Application requests access to the following functions:

Bluetooth (BLE): Necessary for communication with the treadmill (Zipro, FTMS protocols) and heart rate sensors.
Location: Required by the Android system for Bluetooth Low Energy scanning to function correctly. The Application does not track physical GPS location (the run takes place stationary).
Device Storage: Used for saving workout history and generating TCX/GPX files for export.

4. Third-Party Services

Strava API: The Application allows data export to the Strava service. Data is transferred in accordance with Strava’s privacy policy and only with the explicit consent of the user (by clicking the export button). The Application limits data access to the absolute minimum required to create an activity entry.
Google Firebase: The Application may use Firebase services for crash analytics (Crashlytics) and stability improvements, without collecting data that allows direct identification of the user.

5. Data Retention and Deletion

Local Data: The user can delete any workout or the entire history at any time in the Application settings.
Uninstallation: Removing the Application from the device permanently deletes all local data stored within it.

6. Changes to the Policy

We reserve the right to make changes to this policy as the Application evolves or changes in legislation. Users will be informed of significant changes within the Application.

7. Contact

If you have any questions, please contact us at: bp.pureit@gmail.com