Privacy Policy for Spin & Stride
Last Updated: April 22, 2026
Welcome to Spin & Stride (spinandstride.com). We are committed to protecting your personal data and your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your information when you participate in our nationwide fitness challenges and connect via the Strava API.
1. Information We Collect
Depending on the services and events you use, we may collect:
- Profile & Account Information: Your name, email address, profile picture, and authentication details.
- Fitness & Activity Data: Specific data received from connected fitness providers like Strava, including activity name, distance, moving time, elapsed time, type of activity (Run/Ride/Walk), and date/time (to display on our nationwide leaderboards).
- Event & Challenge Information: Registrations, participation status, submissions, and results.
- Authentication Data: We securely store OAuth Access Tokens and Refresh Tokens to sync your activity data automatically during the active challenge period.
2. How We Use Your Data
We use the collected information strictly for the following purposes to provide a seamless experience for fitness enthusiasts across India:
- To verify participation, operate challenges, events, scoring, and track progress on our Live Leaderboards.
- To automatically generate and issue participation and finisher certificates based on validated activity data.
- To provide customer support, maintain security, and improve our platform services.
- Note: We do NOT use your Strava or personal data for any third-party marketing or advertising purposes.
3. Strava API - Limited Use Disclosure
Spin & Stride's use and transfer of information received from Strava APIs will adhere strictly to the Strava API Agreement and API Policy, including the Limited Use requirements. We only request the minimum data necessary (scope: activity:read_all) required to power our event leaderboards and verification systems.
4. Data Sharing and Third Parties
- No Data Selling: We do NOT sell, trade, rent, or lease your personal data to any third parties.
- Service Providers & Organizers: Information is shared only when necessary with internal event systems, trusted hosting, or analytics providers bound by confidentiality. Strava is an independent third-party platform; please review Strava's independent Privacy Policy as well.
5. Data Security
We implement industry-standard technical and organizational security protocols (SSL/Encryption) to protect your data against unauthorized access, loss, or disclosure. OAuth tokens are stored in a secure, encrypted database.
6. User Control, Disconnection, and Data Deletion
Revoking Access & Disconnection Anytime
- Participants have full control and can disconnect our app from their Strava account at any time, whenever they want, directly via their Strava account settings (Settings > My Apps). As soon as the user revokes access or disconnects, our system immediately stops collecting or fetching any further data.
Data Deletion Request:
- If you wish to have your account and activity data permanently erased from our records, please email us at info@spinandstride.com or manage it via your profile settings. We will process your request within 30 business days.
7. Contact
