Before we ask Strava for anything, here is exactly what happens.
From your Strava profile: your athlete ID, your name and your city.
From each run (Run, Trail Run, Virtual Run — nothing else): its name, start time, moving time, distance, elevation gain and average heart rate. Rides, walks, swims and manual entries are never imported. We never read your GPS tracks, routes, photos, comments, kudos or segments.
Scopes requested: read,activity:read_all. No write access — Rivalo never posts to Strava or changes anything on your account.
Through the official Strava API, using the access you grant on Strava's own screen. New runs arrive over Strava's webhook within a minute of upload. There is a manual "Sync from Strava" button as a fallback.
Runs are held for at most 7 days and then deleted, as Strava's API Policy requires. What we keep after that is not your Strava data but our own arithmetic: one number per week for how much you trained, so your Form has a baseline over 26 weeks.
If you edit or delete a run on Strava, the change reaches us within 48 hours — usually instantly.
Your runs are visible only to you. The other nine runners in your division see your name and your weekly Form score — nothing else. No distances, no paces, no times, no run names, no map.
Withdraw consent any time: Settings → Disconnect & delete my data, or revoke Rivalo at strava.com/settings/apps. Either one permanently deletes every run, every weekly number and your profile, and you get a written confirmation on screen that you can download. You can also email us and we delete and confirm within 7 days.
You can download everything we hold about you at any time from Settings.
Full detail in the privacy policy. Rivalo is not affiliated with or endorsed by Strava.