Privacy Policy for Spin & Stride
Last Updated: April 22, 2026
Welcome to Spin & Stride. We are committed to protecting your personal data and your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you participate in our fitness challenges and connect via the Strava API.
1. Information We Collect
When you register for an event and authorize our application via Strava, we collect the following information:
- Profile Information: Your Strava athlete ID, name, and profile picture (to display on leaderboards).
- Activity Data: Specific data from your fitness activities, including activity name, distance, moving time, elapsed time, type of activity (Run/Ride/Walk), and date/time.
- Authentication Data: We securely store OAuth Access Tokens and Refresh Tokens to sync your data automatically during the event period.
2. How We Use Your Data
We use the data collected via Strava API strictly for the following purposes:
- To verify your participation in our fitness challenges (e.g., Green Earth Challenge).
- To display your progress and rank on our Live Leaderboards.
- To generate and issue participation/finisher certificates based on your activity data.
We do NOT use your data for any marketing or advertising purposes.
3. Strava API - Limited Use Disclosure
Spin & Stride's use of information received from Strava APIs will adhere to the Strava API Agreement, including the Limited Use requirements. We only request the minimum data necessary (scope: activity:read_all) to provide our event services.
4. Data Sharing and Third Parties
- No Data Selling: We do NOT sell, trade, or rent your personal data to third parties.
- Third-Party Services: Your data is shared with our internal systems only for processing results. Please note that Strava is a third-party service, and we encourage you to review Strava's Privacy Policy as well.
5. Data Security
We implement industry-standard security measures (SSL/Encryption) to protect your data. Your tokens are stored in a secure database and are only accessed by our automated systems for leaderboard updates.
6. User Control and Data Deletion
- Revoking Access: You can disconnect our app from your Strava account at any time via your Strava settings (Settings > My Apps).
- Data Deletion Request: If you wish to have your data permanently deleted from our records, please email us at contact@spinandstride.com. We will process your request within 30 days.
7. Contact Us
If you have any questions regarding this policy, please contact us:
