stride.

Privacy at Stride.

Last updated October 12, 2026

Stride is a small-group workout challenge service hosted by its organizer. This policy covers stride87.com and the Stride iPhone and Android apps.

What we collect

When you create an account, we store your username, display name, a password hash, and an optional profile photo. We store workouts you log, scores, challenge memberships, team assignments, messages, notification choices, and the device token needed if you enable push notifications. The service also keeps basic security and administrative records such as login sessions and admin edits, blocked-account choices, and reports of inappropriate content. Reports include a copy of the reported message or profile so the administrator can review it.

Who can see it

Saved workout favorites, routines, and personal goals belong to your account and are not shown to challenge peers. Achievement badges use your current scoring history and do not add bonus points. Challenge prizes, reactions, replies, and recaps are available within their challenge. When you choose to share a results card, it includes participant names and scores.

Signed-in users can find an account by name or username and see its profile photo. Workout history, scores, and challenge messages are available to people who have joined the same challenge; challenge leaders and rankings are limited to that challenge. The site administrator can view accounts and make marked corrections to workout records. A challenge creator can manage that challenge and its chat. Safety reports and their supporting content are available only to the site administrator, who can remove content or suspend abusive accounts.

How it is used and shared

We use your data to run challenges, calculate scores, secure accounts, and send the notification types you choose. If you enable push, notification tokens and limited alert content are sent through Apple Push Notification service on iPhone or Firebase Cloud Messaging on Android. We do not sell your data. Workout text parsing runs in the private processing service.

Optional Apple Health and Health Connect imports

The native app can request read-only permission for workout sessions when you choose to import a workout. It reads today's completed sessions to prepare an editable draft. It does not request heart rate, calorie, location-route, medical-record, or background-reading permissions, and it does not write to Apple Health or Health Connect.

Only workouts you review and submit become Stride workout entries. The server stores the selected activity, reviewed quantity, and private source identifiers and session start/end times to prevent importing that session twice. Unselected health workouts are not uploaded. Health data is not used for advertising, marketing, or data mining and is not sold. Imported entries have the same challenge visibility as entries you log manually. Revoke reading access in Apple Health or Health Connect settings at any time. Deleting your Stride account also removes import identifiers from the active database. Older recovery copies are handled as described below.

Saved progress reports

Progress reports you save stay linked to your account so you can reopen and download them. They are removed when you delete your account.

Product analytics record limited account events to understand usage and reliability. Promotion codes and credentials are not recorded in these events. Event history is retained for up to 400 days, and read account notices for up to 90 days. AI-written insights are currently off; fitness records are not sent to an external AI service for this feature.

Storage and security

Cloudflare hosts the service and stores accounts, workout records, challenge data, chat and photos in durable storage. A private processing service checks passwords, converts photos, parses workout text and sends notifications. The organizer retains the source files and private backups on their computer. Website connections use HTTPS. Cloudflare processes connection information to route requests and protect the service. Passwords are stored as salted hashes, and account sessions use HttpOnly cookies. Hosting and push delivery do not require the organizer’s computer to stay online.

Your choices

In Profile settings, you can change your display name, photo, theme, password, and notification choices. You can permanently delete your account there; see the account deletion instructions. Deletion removes your account data from the active database, including health import identifiers; challenges you created will be deleted. Cloudflare disaster-recovery history can retain older database states for up to 30 days. Deleted accounts must be excluded from any recovery. Managed local backups are scrubbed of deleted accounts when the next cloud backup is downloaded. If you cannot sign in, ask the challenge organizer for help. Archival migration exports and copies someone saved outside the service’s managed backup folder are controlled by the person who made them.

Use Profile → Privacy & your data for a data export, private profile setting, quiet hours and reminder timezone. Necessary challenge standings remain visible to joined participants. Invitation links grant access to their challenge; share private links and QR codes deliberately.

Contact

For privacy questions or account help, email 87Stride@gmail.com. James Stoddard operates stride87.com. See Support and the community rules.