Closed-team challenge leaderboard with opt-in — compliant with API Policy?

Hello Strava Developer Community,

I am developing HHR, a web app for a community running group in Vietnam.

Members connect their own Strava accounts through OAuth. The app displays personal running activities and monthly summaries. Its current design also includes a shared leaderboard showing each member’s name, monthly distance, activity count, and average pace.

Before submitting an athlete capacity increase request, I would like to clarify:

1. Is this shared leaderboard permitted under the current API Agreement and API Policy, particularly Section 2.3 on displaying data only to the authenticated user and Section 5.4 on aggregation?

2. Does explicit consent from all participating members change these restrictions?

3. If this design is not permitted, what changes or approval process would be required?

We are not assuming that OAuth authorization alone permits sharing activity data between members.

Thank you for your guidance.