Developers & API

Hi,My app is RunQuest (client ID : 229545), a running game where you explore a map. Each activity unlocks 100 m squares on your own map, and over time you fill in the area you’ve covered, with achievements and challenges on top. People create a RunQuest account first (email, Apple or Google) and link Strava after, it’s optional.On the API side we’re webhook-driven, no polling. Other users never see Strava names, profile pictures, GPS traces or activity details, only RunQuest nicknames and avatars, and all the social stuff is opt-in. No Strava data is shared with third parties or used for AI training. We’re at 940/999 athletes now, so we’ll hit the limit soon. I sent the capacity form in september, got rejected, changed a few things and sent it again in october. Rejected again with exactly the same email, no real reason given.Is anyone else stuck like this? If you managed to get through, what did you do? Did you change something specific, or did someone from Strava finally answer you so

Hello everyone,I’m using Strava on my Samsung Galaxy Watch 5, and since the latest update, I’ve been experiencing two issues:Running Pace: During my runs, the pace stays at 0:00 min/km instead of showing my actual pace. GPS Countdown: When I start an activity, Strava immediately begins a 3-second countdown without giving me enough time to wait for the GPS signal to lock. Before the update, I could wait until the GPS was ready before starting my run.These issues make it difficult to track my runs accurately, especially during interval, tempo, and threshold workouts.Is anyone else experiencing these problems? Is Strava aware of them, and is a fix expected soon?Thank you!

Hey everyone,I'm a developer planning to build a cycling and running training app integrated with the Strava API, and before I start I'm trying to get clarity on the AI restrictions introduced in the November 2024 API Agreement update.I understand that using Strava data to train or fine-tune AI models is clearly prohibited. What I'm less sure about is whether the restriction also covers inference-only use cases, specifically:1. Sending a user's own Strava data as context in a single prompt to an external LLM API (Claude, GPT-4, Gemini etc.) to generate a personalized training plan or coaching feedback — no model training, data used only for that one request, result shown only to that user2. Running a self-hosted local model on my own infrastructure (e.g. LLaMA, Mistral), where Strava data never leaves my server and zero training on Strava data occursHas anyone dealt with this and got a clear answer from Strava — either via the review process or by emailing developers@strava.com?I've al

https://developers.strava.com/docs/webhooks/#signature-verificationWhat is Strava using for the shared signing secret ?I had assumed my client secret, but I can’t get the hashes to match for love nor money.I am getting t and v1, no worries (well at least v1 looks right)!Here’s my PHP (gasp!) <?php$timestamp = 1777657039;$rawBody = '{"aspect_type":"update","event_time":1777657039,"object_id":123123123,"object_type":"activity","owner_id":123123123,"subscription_id":123123,"updates":{"title":"Please work"}}';$clientSecret = 'myDirtyLittleSecret';$providedSignature = 'theV1HashProvided';$signedPayload = $timestamp . '.' . $rawBody;$expectedSignature = hash_hmac('sha256', $signedPayload, $clientSecret);var_dump(hash_equals($expectedSignature, $providedSignature));I’ve tried all the available HMAC algorithms, concatenating the $timestamp and $rawBody with a ‘,’ instead of a ‘.’, variations of with/without { and } braces.Heck, I’ve even spent an hour talking to ChatGPT.Exhausting my option

Hi all,I'm building a personal website and would like it to show my own Strava activities (runs and walks: a route line plus distance and time). The app would stay in Single Player Mode, so only my own account would ever connect.The site is public, though, so visitors other than me would see the data. API Policy 2.3 says Strava data "may be displayed or disclosed in your Developer Application only to that user". Strava support pointed me to section 3.3, but that covers tiers and the subscription, not display.Two questions:Is showing my own data, through the API, to visitors of my own public website allowed under 2.3? If not, is it fine to export my own activities as GPX files from strava.com and show those on my site instead?Thanks!

Feature Request:Currently, Strava only allows assigning a single pair of shoes to an entire activity. However, many runners use two different pairs of shoes within the exact same workout session—most commonly during track workouts or interval sessions (e.g., warm-up and cool-down in regular daily trainers, and spikes or racing flats for the fast intervals on the track).Proposed Solution: Allow users to select two or more pairs of shoes for a single activity. Enable an option to assign specific shoes to laps, splits, or custom time/distance blocks within that activity (similar to how power meters or heart rate zones can be analyzed per lap). Why this matters: This would give runners accurate mileage tracking for their expensive racing shoes and delicate track spikes without forcing us to artificially chop a single continuous workout file into 3 separate GPS activities just to log our gear correctly.Thank you for considering this!

Hi Strava Developer team and community, I'm Roberto Macinai, co-director of X-Run, a charity trail race in Monteriggioni (Tuscany, Italy) organised by the non-profit association Monteriggioni – Oltre le Mura. 2027 will be our third edition: about 150 runners in 2025, about 400 in 2026, and we're aiming for 1,000 on 8–9 May 2027 (5 / 10 / 21 km). Current website: shanghaixrun.it (2026 brand; the new X-Run site launches in December). We're building the official event app (iOS, Android and web) and designed the Strava integration around the API Agreement and API Policy in force since June 2026. Before submitting the Developer Program form, we'd be grateful for confirmation that the design is compliant, or for guidance on what to change. WHAT WE WILL DO- Optional "Connect with Strava" (official button, scopes read and activity:read only).- Strava data appears in one place only: a private "My training" view, visible to the athlete alone, with "Powered by Strava" and "View on Strava" links (

Hi everyone,I'm Anubhav, the developer of BreakOff, a skydiving logbook and analysis app for iPhone and Apple Watch that also imports Garmin FIT recordings. Strava Developer Support pointed me here for guidance on a proposed upload integration.We want jumpers to share the actual jump, from reviewed exit to touchdown, with GPS, altitude and heart rate where recorded. The aircraft climb and time on the ground would be excluded.We've run a manual file-upload experiment using a real Garmin recording. GPX and TCX exports containing GPS altitude appeared to show a terrain-level elevation profile rather than the airborne descent. A later GPX using pressure-derived altitude and a creator string containing "with barometer" displayed an airborne profile alongside the route and heart-rate graph.That later test changed both the altitude source and creator metadata, so it does not isolate which change affected Strava's processing. The pressure conversion used a standard atmosphere, and the unfilter

Hey, I applied on the 16th October for an increase beyond the current limit of 10 users, since then i have sent 2 chaser emails. No response at all. Please review and let me know Client id = 6967 thanks! 

Since I know this has been a frustrating place with the lack of timelines, I wanted to share that after about 6 weeks my application did get approval!No back and forth happened in my case. Got approved from 10 to 999 users. It seems that the forums will not allow me to post a link to my Privacy Policy and ToS without mod approval, but if you want to look for them as an example you can search up SkiCap App on Google and they are at the bottom of the home page.  One interesting note is that I explicitly state that I hold on to users GPS streams indefinitely until a user deletes it themselves, with the justification that I regularly analyze them as part of the key functionality of my app.  I honestly did think this would get me a rejection, but I also noticed that getting a users activity via the stream does not count against my rate limit, so maybe that plays a part in it? Happy to answer questions, but honestly not sure how much more I can say then this lol. 

Hi everyone,We run a small, private, non-commercial web app for a voluntary fitness program among about 85 airport firefighters. Members connect their own Strava account via OAuth, and the app shows each member their own running/gym statistics and weekly position. We requested an athlete capacity of 100.Our request was rejected twice. The rejection email lists generic reasons (not complementary to Strava, API usage not optimized, privacy/security concerns, not compliant with the API Agreement/Policy) and says no individual feedback is given. Between the two submissions we:reduced scopes to read and activity:read only, limited syncing to running and gym activities from the last 90 days, stopped showing any member's data to other members (each member only sees their own), added a public support/privacy page with disconnect and data-deletion instructions, added handling for deauthorization and an admin tool to delete an athlete's data.Questions for anyone with experience:Does Strava appro

Hi all,I run a small hobby app in the Standard Tier (fewer than 10 athletes, non-commercial): friends connect Strava and the app works out which streets of their town each of them has covered. I am trying to follow the API Policy to the letter, and three points can be read in more than one way. Has anyone had an answer from Strava on these, or can someone from the team confirm?1. Showing results to other users (2.3, 5.13, 6.1)Section 2.3 limits the display of a user's Strava Data to that user. Section 6.1 starts with "Unless your Developer Application has an athlete capacity of 9,999 or less", and 5.13 speaks of the user's express consent. Does this mean an app under 10,000 athletes may show a user's results to other users of the same app, if that user has expressly agreed?2. The 7-day cache (6.2, 5.5)"You may not retain Strava Data in your cache for longer than seven (7) days." If the app re-validates its cached data against the API at least every 7 days and deletes whatever it cannot

Hi everyone,I'm an independent developer from Slovenia working on Vandra.si (https://vandra.si), a free hiking and outdoor route planning platform.The platform allows users to discover mountain peaks, explore hiking routes, plan custom routes on an interactive map, and export GPX files.I'm considering integrating the Strava API to allow users to synchronize their completed hiking activities and track which mountain summits they have visited.How the feature would work: A user connects their Strava account to Vandra.si via OAuth. Vandra retrieves their hiking activities and GPS tracks. The GPS tracks are compared against our existing database of Slovenian mountain peaks to identify visited summits. Detected summits are saved in the user's private hiking journal, allowing them to track their progress over time. The summit history would only be visible to the authenticated user. No Strava derived data would be sold or shared with other users.My main questions regarding the Strava API

Hi everyone,I’m developing RideTend, a bicycle maintenance app for logging rides, tracking service, and setting reminders. RideTend offers a monthly subscription for its own maintenance features, which use data entered directly in the app. We’re considering an optional Strava connection and a read-only activity view. Both would be available at no charge from RideTend, without requiring a RideTend subscription. Only the rider who authorizes the connection would see their activity data.I’d appreciate guidance on a design that fits the current Strava API Agreement and API Policy.Historical rides and automatic sync. Under §§5.5, 6.2 and 6.3, can we retrieve a limited set of older rides for the rider to view and use webhooks to reflect edits and deletions? Does the seven-day limit apply to how long we retain a fetched record, regardless of when the ride happened? Local storage and accumulated mileage. Our reading of §§5.5, 5.7 and 6.2 is that permanently saving activity records or IDs in on

Hi everyone, I run a small, free, non-commercial hobby app for a local running community. Each user's progress (a level and some points) is computed only from their own activities. I'd like to make sure we fully follow the 2026 API Agreement and Policy before resubmitting a capacity request. 1. Sharing with consent: Policy 2.3 says data can only be shown to the user it belongs to, while 5.13 mentions "prior express consent". Can we show a user's derived progress (no activity details, no maps, no Strava name) to other users of the app, if each user explicitly opts in (off by default) and can opt out at any time? 2. Retention: to recompute a user's progress, we keep a minimal summary of their activities (date, type, distance, elevation, time; no GPS or photos) while they use the app, and delete it when they deauthorize. Is that compatible with 6.2 and 6.4, or is a shorter limit expected? 3. Community channels: is it OK to post fully aggregated info (for example "6 users took part in this

It looks like a huge percentage of posts over the past few weeks and months on here are about Strava’s utter silence regarding the Connected Athlete / Rate Limit increases that are going unresolved, and the non-response from developers@strava.com . Perhaps it could be helpful if everyone in this same boat (I’ve been waiting 7 weeks, with no response) to all post here, and we can coordinate a list of all Client IDs and what they’re wanting (Athlete Limit increase, Daily Rate Limit Increase, etc), and provide that to Strava to streamline for their developers (best case), or take it somewhere more visible online to draw attention to this situation (worst case, if things are still up in the air for a while). It’s not the waiting that’s necessarily the issue (although we all want to be able to move forward with our applications) - it’s the complete silence, and not knowing whether it’ll be another week or 6 months before we can expect a response. Right now, this forum is just a flood of peo

Hello everyone,I'm hoping someone here can tell me what to expect, or whether someone from Strava can give a status.My situation - App: GlideHub, lap times for speed skating training, with optional upload of sessions to Strava - Client ID: 85786 - Platforms: web app (glidehub.nl, live since June 2026) and an iOS app (on the App Store since 29 October 2026) - Request: raise the athlete capacity from 10 to 1000 - Submitted: 8 October 2026, through the Developer Program review form. I received the automatic confirmation the same day ("It's under review, and there's nothing else you need to do for now"). - Follow-up: support ticket #19132 (23 October). The only reply was the automated one: capacity requests aren't reviewed by email. - Result so far: no decision, and no request for more information.Why it matters We have reached the cap of 10 connected athletes. New users, including active skaters who would use the integration every week (or a few times a week), can no longer connect their

I'm building a small app for group runs and club events. Before adding a Strava integration I'd like to check one use against the API Policy effective 1 June 2026.After a club 5K, a runner who has connected Strava sees their own activity from that evening in the app. If they tap "Submit as my event time", that time goes on the event's results board with their name and a link to the activity on Strava. Nothing is posted without that tap. We keep only the submitted time and the link, and remove the entry if the runner deletes it or disconnects Strava.The API data itself is shown only to the runner. What others see is the time the runner chose to submit. Is this allowed under 2.3 and 6.1 for a Standard Tier app with far fewer than 9,999 athletes If not, what would need to change?I also emailed developer support with the same question.

Hello,I'm developing AI Coach Personal MTB, a private training app for mountain bikers. Each athlete connects their own Strava account through the official OAuth flow. Right now only I am connected. My partner would be the second athlete, and Strava data is never shown to other users.The app sends a short summary of the athlete's own recent activities (date, sport type, distance, moving time and elevation gain) to an AI model, to generate a daily training suggestion and a weekly plan. The AI provider is Cloudflare Workers AI by default, and optionally Anthropic.Before I request production review, I'd like to confirm:Is this use permitted under the current API Agreement, given that the agreement prohibits using API data in AI applications, including prompts?If it is not permitted, what is the approved route for this kind of app (for example, written permission, or a different integration)?My developer dashboard offers "Upgrade subscription" to raise athlete capacity to 10. Does that upg

Hi, I submitted my app to the Strava API Program on October 9, 2026 and received the automated acknowledgment the same day (it mentioned a 7–10 business day review). It's now been about two weeks with no further response, so I wanted to ask about the status here.App name: TrailMetrics Client ID: 280243 App URL: https://trailmetrics.app/ Requested athlete limit: 5000 (currently limited to 10 and We’ve quite a few on the waiting list.) Scopes: read, activity:read, activity:writeI've also emailed developers@strava.com as a follow-up. Is there anything else I should do, or anyone who can check the review queue? Thanks!

Since I know this has been a frustrating place with the lack of timelines, I wanted to share that after about 6 weeks my application did get approval!No back and forth happened in my case. Got approved from 10 to 999 users. For those curious this is my Privacy Policy and ToS. https://skicap.app/privacyhttps://skicap.app/terms You will notice in there I explicitly state that I hold on to users GPS streams indefinitely until a user deletes it themselves, with the justification that I regularly analyze them as part of the key functionality of my app.  I honestly did think this would get me a rejection, but I also noticed that getting a users activity via the stream does not count against my rate limit, so maybe that plays a part in it? Happy to answer questions, but honestly not sure how much more I can say then this lol. 

Hi Strava team,I’m planning an app that creates personalized annual activity recap videos.Customers would authorize access through Strava OAuth. The app would fetch their selected year’s activity summaries and use fixed calculations and templates to render an MP4 on our servers. No activity data would enter an AI model.Customers would pay a one-time fee for the finished video. Only that customer could access it within the app, but they could download it and choose to share it publicly on social media.Could someone clarify:1. Is creating and charging for these videos permitted under the current API policy, including section 5.8?2. Can customers download and publicly share their own videos, given the rules limiting display to the authenticated user?3. Does this use require specific approval beyond the standard app review?We want to confirm the permitted scope before implementing the integration. Thank you.

Hi Strava team,I submitted the Developer Program form for kosu.co (Client ID [291409]) on [28/20/2026] and the confirmation email. We are at 10/10 connected athletes and requested a capacity of 999.kosu.co is a running race calendar and community. Connected athletes see, only for themselves, an estimated finish time and a readiness score for upcoming races based on their own last 12 weeks of runs.- Strava data is shown only to the athlete who owns it (never to other users or on public profiles)- No AI/ML use; data is never shared with third parties- We store only a 12-week run summary (no GPS tracks, heart rate or location) and delete it on disconnect or deauthorization (webhook)- Official "Connect with Strava" button and "Powered by Strava" logo are used- Webhooks instead of pollingCould you confirm the request is in the review queue, or let me know if anything is missing? Happy to provide more screenshots or details.Thank you!

Hi everyone,I submitted a Developer Program request for increased athlete capacity on October 24 for my app Routemaps (Client ID 88445). I haven't heard back yet, and email support says capacity requests aren't handled by email, so I'm posting here in case someone from the Strava API team can take a look.The app has reached the 10-athlete limit, so new users now get "403 – Connected athlete limit exceeded" and can't connect.About the app:- Routemaps (https://routemaps.pl) is a small Polish shop that turns an athlete's own activities into printed route posters.- We only read the activity the athlete picks (activity:read_all) and use it to draw the poster. Data is never shared with third parties or used for anything else.- We follow the Brand Guidelines: the official "Connect with Strava" button, "Powered by Strava" under the activity list and "View on Strava" links on activity cards.- Access is revoked automatically after 1 hour of inactivity, and users can disconnect at any time with o

Hello Strava Developer Support Team,We operate Phoenix Pack (https://phoenix-pack.uz), a community running club platform based in Tashkent, Uzbekistan.Our application has reached the hard capacity limit of 999 out of 999 athletes. All connected athletes are active runners participating in our weekly community runs and club challenges. Because our pool is completely full, new runners from our local community are currently blocked from connecting their accounts and joining club activities.We submitted our official Athlete Capacity and Rate Limit increase request through the developer form back on October 6, 2026 for Client ID: 173148 (almost a month ago), but have not received an update or status confirmation yet.Could someone from the API / Developer Review team please look into our application in the review queue? Please let us know if any further verification or details are needed from our side.Thank you for your time and assistance!Best regards,AndreyPhoenix Pack TeamClient ID: 17314