Data Processing Agreement
Last updated: 22 April 2026
This agreement forms part of the Terms of Service between Stryv ("Processor") and the subscribing organization ("Controller").
1. Subject Matter
Processor shall process personal data only to the extent necessary to provide the Stryv platform and related services, and in accordance with Controller's documented instructions.
2. Nature of Processing
Processing activities include:
- Storing athlete profiles
- Recording workouts and performance metrics
- Managing training plans
- Analyzing training data
- Enabling communication between coaches and athletes
3. Categories of Data
Data processed may include:
- Athlete identification data
- Training and performance metrics
- Wearable device data
- Coaching feedback
- Competition results
4. Processor Obligations
Processor shall:
- Process data only on documented instructions
- Implement appropriate security measures
- Ensure personnel confidentiality
- Assist the Controller with data subject rights
5. Subprocessors
Processor may engage the following subprocessors to support service delivery. Each is bound by appropriate data protection obligations.
| Provider | Purpose |
|---|---|
| Base44 | Backend infrastructure and application hosting |
| Stripe | Payment processing and subscription management |
| Cloudflare R2 | File and media storage (exercise images, athlete uploads) |
| Email Provider | Transactional email delivery (invitations, notifications) |
| Wrkout | Exercise library data and content provider |
| Apple HealthKit | Wearable and fitness device integration (user-authorized) |
6. Security
Processor implements safeguards including encrypted connections, secure infrastructure, and access controls.
7. Data Deletion
Upon termination of the service, Controller may request export or deletion of stored data, subject to applicable legal retention obligations.
Where account deletion is requested by a data subject, Processor applies a soft-delete workflow followed by permanent deletion according to the retention schedule described in the Privacy Policy and documented internal procedures.
8. International Transfers
Where data transfers occur outside the European Economic Area (EEA), appropriate safeguards will be applied, such as Standard Contractual Clauses.
9. Term
This agreement remains valid for the duration of the service relationship.
10. Contact
Questions regarding this agreement may be directed to: