Privacy policy

At a glance

• We use your account details to sign you in and run your clubs and challenges.
• If you connect Strava, we use your profile and activities for your activity log and challenge scores. Extra details, including private notes and start/end locations, are also kept for possible future features; they are not used today.
• Images you upload follow the visibility of their club or challenge. We strip embedded metadata and keep optimized copies.
• Other athletes see your display name, club role and challenge results, not your activities. Administrators can see activity summaries for support; the operator can access stored data.
• We measure which pages are opened, what goes wrong in your browser and how fast pages load, to run and improve the service. It uses no cookies or device storage and no other company. For a signed-in member the reports carry their internal ID and are kept 30 days; daily totals carry no identity.
• Administrators can disconnect a person's Strava or close their account, for misuse or on request. Each such action is recorded with a reason and kept 13 months.
• We do not keep heart rate, calories, perceived exertion, weight or route maps, or use your data for advertising, sale or AI training. We do not track you across other sites or build advertising profiles.
• You can disconnect Strava or delete your account yourself. Deletion takes one day; backups expire later and past results remain without your name.
• Application records are hosted in India. Email delivery uses infrastructure in the United States; Google handles sign-in if you choose it.

Your rights

See or correct your details, disconnect Strava, download a copy of your data, or delete your account from the account pages. The copy comes as a spreadsheet or as JSON, with or without your Strava data; it does not hold service logs, backups or the records of our email and hosting providers, which you can ask for. Correct activities at Strava.

To ask for what the download does not hold, complain, or nominate someone to act if you die or become unable to, write to abhishekkrishna123+sportchallenge@gmail.com. Requests are free, answered within 30 days and do not affect your access to the service. If our answer does not satisfy you, you may complain to the Data Protection Board of India.

Who we are

SportChallenge is operated by Abhishek Krishna, in India. Contact abhishekkrishna123+sportchallenge@gmail.com about your data.

What we collect and why

Connecting Strava is optional and gives us consent to read your data; disconnecting withdraws it. We never post or change anything there. More about your data.

Sharing and service providers

Club members see your display name and role. People who can see a challenge see your display name and total or rank; you can leave before it ends, and only an administrator can remove an entry after it ends. Archived challenges are visible only to their entrants, club managers/owners and administrators; archived clubs only to members and administrators. They cannot see your activities, contact details or locations.

We use hosting, email and optional sign-in providers to run the app. We do not share your data for other purposes or build profiles of you beyond calculating challenge scores and measuring how the service is used. Provider and access details.

Keeping and deleting your data

Archiving a club or challenge keeps its memberships and results as history. Permanently deleting it removes its club/challenge data and results, but leaves athletes’ synced activities.

We keep account data while you have an account and Strava data while connected. The list of VeloKofi challenges you rode is deleted once it has entered you in them; if you never come over, it is kept until the list is retired. Feedback is kept until a year after it is marked resolved; if you delete your account, feedback you sent stays without your name. Disconnect Strava to erase your activities, or delete your account to erase your personal details, after one day. Past results remain without your name. Browser reports that carry your internal ID are deleted after 30 days, and daily totals without identity after 13 months. Backup copies and some service records expire later. Deletion details.

Administrators can disconnect a person's Strava and close their account, for misuse or on request. Closing signs the person out and blocks signing in during the day before the deletion, which an administrator can cancel in that time. Each such action is recorded with the administrator, the person, the date and a reason. The record is kept for 13 months, including after the account is deleted, when the person appears as "Former member". Your copy of your data includes the actions taken on your account, without naming the administrator.

Uploaded images stay with their club or challenge when you leave or delete your account. Originals are removed after processing; unused uploads and removed images are collected after 24 hours. Deleted files have a configured two-day storage recovery period. Public images may remain in a browser cache for seven days after removal or a visibility change. Contact us if an image needs removal for privacy reasons.

Security and browser storage

We encrypt connections and restrict access to stored data. If a breach exposes your data, we will tell you without undue delay what happened and what we are doing.

We use cookies and browser storage to keep you signed in, remember preferences and help the app work reliably; we do not use them for advertising or to track you. Measuring how the service is used writes nothing to your device and involves no other company: the reports go only to this service.

Version history

We notify you in the app about updates and ask you to accept material changes to data handling. Earlier versions remain readable. Privacy details form part of this policy.

Privacy details · Terms of Service