Privacy
Policy

Strive is operated by Recovy Limited, a company incorporated in Hong Kong with registered office at 49 Austin Road, KL, Hong Kong (company registration no. 2897578) ("Strive", "we", "us"). We are the data controller of the personal data described in this policy.

This policy explains what personal data we collect through the Strive website, web application and mobile apps (together, the "Service"), how we use it, who we share it with and the rights you have. Questions: privacy@getstrive.app.

Account data. Email address, first and last name, password (stored hashed), and, if you sign in with Apple or Google, the identifier and email those providers share with us.

Profile and onboarding data. To match you with a team and personalise your training we ask for your fitness goal, training frequency, experience level, date of birth, gender, height, weight, exercise preferences and where you train. Height, weight and other fitness inputs may be treated as health-related data in some jurisdictions; we collect them with your consent, use them solely to personalise the Service, and you may decline or delete them (some personalisation will then be unavailable).

Payment data. Payments are processed by Stripe. We never receive or store your full card number; we receive a payment token, card brand, last four digits, expiry and billing country/postal code for billing and fraud prevention.

Usage and activity data. Workouts started and completed, streaks, minutes trained, in-app choices, team membership and switches.

Community content. Messages, reactions and media you post in team chat.

Device and log data. IP address, device and browser type, operating system, app version, language, approximate location derived from IP, crash logs and diagnostic events, and cookie identifiers (see section 9).

• Provide the Service — create your account, assign and deliver workouts, run team chat, sync across devices (performance of our contract with you).
• Personalise — recommend teams and adjust content based on your onboarding answers and activity (consent for health-related inputs; otherwise legitimate interests).
• Billing — manage your trial, subscription, invoices, taxes, refunds and failed payments (contract; legal obligation).
• Communicate — service emails such as receipts, trial-end reminders and material changes to the Service or these policies (contract); marketing emails only with an opt-out in every message (legitimate interests / consent where required).
• Improve and secure — analytics, debugging, abuse and fraud prevention, enforcing our Terms (legitimate interests).
• Comply with law — respond to lawful requests and keep records we are legally required to keep.

We do not sell your personal data and we do not use it for third-party advertising.

We share personal data only with service providers acting on our instructions under contract, and only what each needs:

• Payments — Stripe (payment processing, billing, fraud prevention).
• Authentication — Apple and Google, if you use their sign-in.
• Hosting and infrastructure — our servers located in Singapore, content delivery and security services (e.g. Cloudflare), and encrypted off-site backups.
• Video delivery — our video streaming provider (Mux), which processes viewing events to deliver and measure workout video.
• Email delivery and support tooling — providers used to send service and support messages.
• Analytics and crash reporting — aggregated or pseudonymised usage data used to improve the Service.

We may also disclose data where required by law, to protect our rights or users' safety, or as part of a merger, acquisition or asset sale (in which case this policy continues to apply to your data until amended per section 12).

Your display name and content you post in team chat are visible to other members of your team and to your coach.

We are established in Hong Kong and our primary infrastructure is in Singapore; your data may also be processed in other countries where our providers operate. Where the law of your country requires safeguards for cross-border transfers (for example the GDPR for users in the EEA/UK, or the Philippine Data Privacy Act), we rely on appropriate mechanisms such as contractual data-protection clauses with our providers.

• Account, profile and activity data — kept while your account is active; deleted or anonymised within 90 days of account deletion, except as noted below.
• Billing records — kept 7 years to meet accounting and tax obligations.
• Team chat content — messages you delete are removed from view immediately and from backups on the normal backup cycle; your messages may remain visible where quoted by others.
• Logs and diagnostics — typically 12 months.

Subject to your local law, you can ask us to: access a copy of your data; correct it; delete it; restrict or object to certain processing; export it in a portable format; and withdraw consent at any time (without affecting prior processing). You can exercise most of these directly in the app (profile settings, account deletion) or by emailing privacy@getstrive.app. We respond within 30 days.

If you are in the Philippines, you may lodge a complaint with the National Privacy Commission; in the EEA/UK, with your local supervisory authority; in Hong Kong, with the Office of the Privacy Commissioner for Personal Data (PCPD).

We use encryption in transit (TLS), encryption at rest for backups, hashed passwords, access controls limited to personnel who need access, and logging of administrative access. No system is perfectly secure; if we become aware of a breach affecting your personal data we will notify you and the relevant regulator where the law requires it.

We use strictly necessary cookies (authentication, security, load balancing), preference cookies (e.g. language) and first-party analytics cookies to understand how the Service is used. We do not use third-party advertising cookies. You can control cookies through your browser; blocking necessary cookies may break sign-in.

The Service is for adults aged 18 or over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.

We send marketing emails only where permitted. Every marketing email contains an unsubscribe link; you can also opt out in your account settings. Service emails (receipts, trial reminders, security notices) are sent regardless of marketing preferences because they are part of operating your account.

We may update this policy as the Service evolves. For material changes we will notify you by email or in-app notice before the change takes effect. The "Last updated" date at the top reflects the current version.

Recovy Limited
49 Austin Road, KL, Hong Kong
Email: privacy@getstrive.app

Data protection contact: [DPO / privacy contact name].