Stride League is a step-challenge app. This policy describes exactly what data it handles and what we do with it. It is written to be specific rather than general: if a statement here stops being true of how the app works, the app changes or this policy changes — visibly, with a new date above.
Health data. The app reads your daily step counts, and the identity of the app or device each count came from (for example, "iPhone," "Apple Watch," or a fitness app's name). On iPhone this is read from Apple HealthKit; on Android, from Health Connect. If the challenge allows it, you can also enter steps or activities yourself in the app (for example, minutes of cycling or swimming, or a pedometer count); we keep what you enter, when, and any note you add. Step counts, their sources, and what you enter yourself are the only health data the app collects.
Account data. The name you enter when joining a challenge: your first and last name, which your challenge organizer sees, and the display name other participants see; the challenge and team you belong to; and your consent choices.
Registration data. If you register for a challenge through our website, or enter an email address when you join a challenge in the app or later in the app's Settings, we collect the email address you enter, and on the website your first and last name, which your organizer uses to run the event. The email is used to deliver your invite code and receipt, to send you announcements about your challenge from its organizer (every one carries an unsubscribe link), to confirm an address you enter in the app (one link, sent to that address), to send you a six-digit sign-in code when you ask to get back into your account on a phone (it works for ten minutes, once), and to find your registration if you contact us — nothing else. If you pay online, payment is processed by Stripe, our payment processor: your card details go directly to Stripe and never touch our servers; we receive only the payment's status and receipt details. Some challenge organizers collect payment themselves — in that case we collect no payment information at all.
Device and diagnostic data. Device model, operating system version, app version, and technical records of whether each sync succeeded — including network type, battery level, and device thermal state at the time. We collect this because reliably syncing steps in the background is genuinely hard, and these records are how we find and fix failures. They contain no step counts.
Push notification token. The notification token Apple or Google issues to your device, so our server can quietly prompt your phone to sync when it hasn't checked in for a while and, if your notifications are on, remind you to open the app. It is used for nothing else and is deleted with your account.
Messages and friends. The app has a team thread, friend chats and announcements from your organizer. We store the messages you send, who you add as a friend and who you block, for the challenge you are in. Your display name and team are visible to other people in your challenge so they can find you by name; you can turn that off in Settings (Let others find me by name). If you report a message, your organizer sees that message, your reason and your name, and nothing else from that thread. Notifications about new messages never carry the message text. A message can carry a photo you choose, and the challenge has a photo wall where everyone in it can post one with a caption and mark it with a heart. We store the photo, its caption and the hearts on it; the location and camera details a phone writes into a picture are removed before it is stored. A reported photo is shown to your organizer with the message, and your organizer can remove any photo from the wall.
Organizer accounts. If you run a challenge as its organizer, we store your email address (which you sign in with), your name, a hashed password, and the times you sign in. Organizer accounts hold no step data and no participant data.
The app requests read access to step count only — plus background read access on Android, which Android requires as a separate permission for the app to sync while closed. It requests no other health permission of any kind. It never writes to HealthKit or Health Connect.
Your step data is used solely to compute individual and team standings within a challenge you have joined. There is no other use.
Your challenge organizer (the organization running the challenge you joined) can see your daily totals and whether your phone is syncing, so they can run the event and help if your steps aren't uploading.
Your team captain can see your daily average (the number that counts toward your team's score) and whether your phone is syncing. Your captain does not see your daily totals unless you choose to share them with teammates.
Whether teammates can see your daily totals is a separate choice you make during setup. If you decline, your steps still count toward your team's score, but teammates do not see your daily numbers on the team leaderboard. You can change this choice at any time in the app's Settings, or by emailing the address above.
Data is transmitted over TLS (encrypted in transit) and stored on servers in the United States, operated by our cloud hosting provider acting on our instructions. Photos are stored in the United States with a second cloud storage provider, also acting on our instructions. No one else receives it.
Step and account data — including your daily step rows, their source attribution, and any registration record with your email address — is kept for the duration of your challenge and deleted no later than 6 months after the challenge ends. Messages, their photos, friend connections and blocks stop working when the challenge ends and are deleted 30 days after the challenge ends. Stripe retains its own transaction records as financial regulations require. Diagnostic sync records are kept for 90 days, then deleted.
Stride League is for adults: participation requires being 18 or older, and the app is not intended for anyone under 18. The app asks users to confirm their age before any health data is read, and we do not knowingly collect data from minors. If you believe someone under 18 has used the app, contact us and we will delete the data.
If this policy changes, the new version appears at this address with an updated date. This page is the canonical location of the Stride League privacy policy.