[{"data":1,"prerenderedAt":328},["ShallowReactive",2],{"site-privacy-details":3},{"id":4,"title":5,"body":6,"description":257,"extension":266,"meta":267,"navigation":324,"path":325,"seo":326,"stem":12,"__hash__":327},"site\u002Fprivacy-details.md","Privacy details",{"type":7,"value":8,"toc":256},"minimark",[9,13,16,26,31,139,143,146,150,153,199,203,206,209,212,215,219,222,233,243,247,250,253],[10,11,5],"h1",{"id":12},"privacy-details",[14,15],"privacy-version",{},[17,18,19,20,25],"p",{},"These details form part of the ",[21,22,24],"a",{"href":23},"\u002Fprivacy","privacy policy",".",[27,28,30],"h2",{"id":29},"a-closer-look-at-your-data","A closer look at your data",[32,33,34,47],"table",{},[35,36,37],"thead",{},[38,39,40,44],"tr",{},[41,42,43],"th",{},"Information",[41,45,46],{},"What it includes",[48,49,50,59,67,75,83,91,99,107,115,123,131],"tbody",{},[38,51,52,56],{},[53,54,55],"td",{},"Account and sign-in",[53,57,58],{},"Name, email, optional sex, linked Google identity and email, sign-in records and an optional password stored as a hash, never the password itself.",[38,60,61,64],{},[53,62,63],{},"Strava profile",[53,65,66],{},"Your Strava identity, name, picture, location, gear and permission to read activities. Your own picture appears in your app header; it is not shared with other athletes or club managers.",[38,68,69,72],{},[53,70,71],{},"Activities",[53,73,74],{},"Titles, sports, dates, distance, time, elevation and speed, used for your log, scores and support.",[38,76,77,80],{},[53,78,79],{},"Extra Strava details",[53,81,82],{},"Descriptions, private notes, start\u002Fend locations, power, cadence, temperature, gear\u002Fdevice, segment efforts, visibility and social counts. Kept for possible future challenge features; unused today.",[38,84,85,88],{},[53,86,87],{},"Clubs, challenges and choices",[53,89,90],{},"Memberships, roles, entries, results, things you created or approved, private once-only goal celebration acknowledgements, your quick tour choice (dismissed or completed, version and save date, without step history), privacy consent and deletion requests, used to run the service and carry out your choices.",[38,92,93,96],{},[53,94,95],{},"Actions on accounts",[53,97,98],{},"When an administrator disconnected a person's Strava, deleted their account, cancelled a deletion, or granted or removed the administrator role: the action, the date, the administrator, the person and the reason the administrator wrote. Administrators read it in the app. Your copy of your data includes the actions taken on your account without naming the administrator.",[38,100,101,104],{},[53,102,103],{},"VeloKofi challenges you rode",[53,105,106],{},"If you rode VeloKofi's 2026 Spoorti challenges in the VeloKofi app: which ones, against a keyed digest of your Strava athlete ID, never the ID or your name. Used once, when you connect Strava, to enter you in them, then deleted; kept until the list is retired if you never come over.",[38,108,109,112],{},[53,110,111],{},"Feedback",[53,113,114],{},"What you write from Help & about, whether you liked something, didn't, or have a suggestion, with the app version, the page you came from and phone or computer. Linked to your account unless you keep it anonymous. Administrators read it in the app; the email telling them it arrived holds neither what you wrote nor your name.",[38,116,117,120],{},[53,118,119],{},"How you use the service",[53,121,122],{},"The pages you open (by pattern, such as a challenge page, never the address or anything you typed), whether you were on a phone, tablet or computer, whether the app was installed, the errors your browser met and how fast pages loaded. While you are signed in these carry your internal ID and are kept 30 days. Daily totals carry no ID and are kept 13 months. Visitors who are not signed in are counted without any ID. Used to run and improve the service, never for advertising or to follow you across other sites.",[38,124,125,128],{},[53,126,127],{},"Images you upload",[53,129,130],{},"Club logos, backgrounds, challenge badges, processed versions and upload records. Visibility follows the club or challenge.",[38,132,133,136],{},[53,134,135],{},"Service records",[53,137,138],{},"Sign-in, email-delivery, activity-import and security records, used to keep the app reliable and secure.",[27,140,142],{"id":141},"connecting-strava","Connecting Strava",[17,144,145],{},"With your consent we read your public profile, full profile (including non-public profile information and club memberships), and activities visible to Everyone or Followers. This connects your account, lets you import a club you run and provides your activity log and scores. Activities set to Only You are not read. We cannot post, edit or delete anything on Strava.",[27,147,149],{"id":148},"access-and-service-providers","Access and service providers",[17,151,152],{},"You see your account, activities and results in the app; ask us for data it does not display. Other athletes and club managers see display names, club roles and challenge results, not activities, contact details or locations. Administrators see account details and activity summaries for support. The operator can access everything stored.",[32,154,155,165],{},[35,156,157],{},[38,158,159,162],{},[41,160,161],{},"Provider",[41,163,164],{},"What they handle",[48,166,167,175,183,191],{},[38,168,169,172],{},[53,170,171],{},"Microsoft Azure",[53,173,174],{},"Hosts application records, backups and service logs in India.",[38,176,177,180],{},[53,178,179],{},"Amazon Web Services",[53,181,182],{},"Delivers sign-in codes, security emails and administrators' feedback notices in the United States and reports delivery problems. Receives email addresses and message contents, not activity data.",[38,184,185,188],{},[53,186,187],{},"Google",[53,189,190],{},"Verifies your identity when you choose Google sign-in. We receive an account identifier, name and email where provided; Google may process data internationally.",[38,192,193,196],{},[53,194,195],{},"Strava",[53,197,198],{},"Receives requests to read the data you authorise. Your browser also contacts Strava to load a profile picture.",[27,200,202],{"id":201},"deletion-and-retention","Deletion and retention",[17,204,205],{},"Archived clubs keep memberships and published challenge history; drafts are deleted when a club is archived. Members and administrators can see an archived club. Archived challenge definitions and results are visible only to entrants, hosting-club managers\u002Fowners and administrators. They are excluded from normal discovery and trophy boards. You can leave a challenge before its end; after it ends, an administrator can remove an entry. Permanent club\u002Fchallenge deletion removes the related memberships, entries and results, while synced athlete activities remain under the usual account and Strava rules.",[17,207,208],{},"Disconnecting removes Strava access immediately and activities after one day. Reconnecting the same Strava account within that day cancels their deletion. Deleting your account signs you out immediately; signing in within the following day cancels deletion. Private goal celebration acknowledgements are removed when your account or the challenge is permanently deleted. Past results and creator\u002Fdecision records remain without your name. Feedback you sent stays without your name; feedback is deleted a year after it is marked resolved.",[17,210,211],{},"An administrator can also disconnect a person's Strava or delete their account, for misuse or on request. Deleting signs the person out and refuses every way of signing in during the day before the account is erased; an administrator can cancel it within that day, which restores signing in but not ended sessions or the Strava connection. Each such action is recorded with a reason and kept 13 months, including after the account is deleted, when the person appears as \"Former member\".",[17,213,214],{},"Deleted data leaves backups within 35 days. Service logs expire within 30 days, browser reports included; daily usage totals without identity are kept 13 months; activity-import and email-delivery records generally within seven days. Sign-in messages are removed after use or expiry; queued security notices expire within a day. Records preventing repeated failed email deliveries remain while needed.",[27,216,218],{"id":217},"on-your-device","On your device",[17,220,221],{},"A cookie keeps you signed in for up to 30 days, renewed by active use. Short-lived sign-in proofs expire within ten minutes. Your theme preference, and a count of dashboard visits with whether you closed the offer to install the app, stay until cleared; the page to return to after Strava stays for the tab’s session. Cached app files remain until replaced or cleared and contain no personal data. None of this is used for advertising or to track you. Measuring use of the service writes nothing to your device: reports go only to this service, are sent when a page is hidden, and are dropped if they cannot be sent.",[17,223,224,225,229,230,25],{},"Download a copy of your data from your ",[21,226,228],{"href":227},"\u002Fapp\u002Faccount","account page",". For service logs, backups, providers' records or any privacy question, write to ",[231,232],"contact-email",{},[17,234,235,238,239],{},[21,236,237],{"href":23},"Current privacy policy"," · ",[21,240,242],{"href":241},"\u002Fterms","Terms of Service",[27,244,246],{"id":245},"uploaded-images","Uploaded images",[17,248,249],{},"Club logos, backgrounds and challenge badges are stored in private Azure storage in India and served through the app according to the club or challenge's visibility. We accept JPG\u002FPNG, remove embedded metadata such as GPS, and generate resized WebP copies. We do not import or rehost Strava images.",[17,251,252],{},"Originals are removed from active storage after processing. Unused uploads expire after 24 hours; replacing or removing an image starts a 24-hour cleanup grace period. Archiving keeps attached images. Deleted originals and processed files have a configured two-day Azure recovery period; physical deletion may take longer. Recovery is manual download and re-upload, with no deleted-image history in the database. Database backups contain metadata, not image files.",[17,254,255],{},"Public image responses may be cached privately in your browser for seven days, including after removal or visibility changes. Restricted\u002Farchived images require access checks on revalidation; temporary previews and private-link responses are not cached. Upload metadata appears in your account export; a readable processed copy is included as base64 WebP where you still have access. Leaving a club does not remove its image, but you can contact us about personal-image removal.",{"title":257,"searchDepth":258,"depth":258,"links":259},"",2,[260,261,262,263,264,265],{"id":29,"depth":258,"text":30},{"id":141,"depth":258,"text":142},{"id":148,"depth":258,"text":149},{"id":201,"depth":258,"text":202},{"id":217,"depth":258,"text":218},{"id":245,"depth":258,"text":246},"md",{"dataGroups":268,"permissions":313,"device":317},[269,275,278,281,285,294,297,300,303,306,310],{"label":55,"categories":270},[271,272,273,274],"account","contact","credentials","linkedAccount",{"label":63,"categories":276},[277],"connection",{"label":71,"categories":279},[280],"activitySummary",{"label":79,"categories":282},[283,284],"activityDetail","activityLocation",{"label":87,"categories":286},[287,288,289,290,291,292,293],"participation","membership","authorship","roles","policyRecords","goalCelebrations","tutorial",{"label":95,"categories":295},[296],"adminActions",{"label":103,"categories":298},[299],"returningEntrants",{"label":111,"categories":301},[302],"feedback",{"label":119,"categories":304},[305],"webUsage",{"label":135,"categories":307},[308,309],"authMail","syncHistory",{"label":127,"categories":311},[312],"media",[314,315,316],"read","profile:read_all","activity:read",[318,319,320,321,322,323],"sc_auth_browser","sc_session","sc-theme","sc-install-offer","sc-next","Application files",true,"\u002Fprivacy-details",{"title":5,"description":257},"38IeGeLVMCZQDq8vhfkxzrdPY7-PCGPYxLpGKqxruq8",1793942722415]