Skip to main content
Question

Corporate wellness programme – webhook, derived points and data retention


Forum|alt.badge.img+1

Hi Strava Developer Community,

We are developing EZ Engage, a corporate employee wellness and engagement platform.

Employees may voluntarily connect their own Strava accounts to participate in a company wellness programme, typically lasting 30 days.

Our intended flow is:

  1. Employee authorizes Strava.
  2. Eligible activities such as walking, running and hiking are received automatically via the Strava API/webhook.
  3. EZ Engage converts the eligible activity into programme points.
  4. The points are accumulated toward the employee's programme progress.
  5. Raw Strava activity data can be deleted according to Strava's required retention period.

We would appreciate clarification on two points:

1. After the underlying Strava activity data is deleted, may we retain the accumulated programme points derived from that activity, provided the points do not expose the original Strava activity details?

For example, instead of retaining distance, route, pace or activity details, EZ Engage would retain only something such as “50 MOVE points”.

2. With the employee's explicit consent, may their employer's authorised programme administrator (PIC) view their accumulated programme points/progress for the corporate wellness programme?

There is no public Strava activity feed required for this use case. The purpose is employee wellness programme participation and progress tracking.

We want to make sure our architecture complies with the current Strava API Agreement and API Policy before implementing this workflow.

Thank you.

3 replies

Jan_Mantau
Forum|alt.badge.img+26
  • Hub Powerhouse
  • October 3, 2026

Section 5.5. in the API policy says “You may not store Strava Data, or any data derived from Strava Data, in any Persistent Index.”


Forum|alt.badge.img+1

Thanks Jan. I understand Section 5.5 regarding Persistent Indexes.

My question is specifically about a programme result after the underlying Strava Data has been removed. For example: an authorised activity qualifies for 50 MOVE programme points; the distance, activity details and other Strava Data are then deleted within the required retention period.

Would retaining only the resulting 50 programme points as part of the user's EZ Engage programme progress still be considered prohibited storage of data derived from Strava Data?

I would also appreciate clarification on the second question: whether an authorised employer programme administrator may view those programme points/progress with the employee's explicit consent.

If these questions require an official Strava determination rather than community interpretation, please let me know the appropriate channel.


Jan_Mantau
Forum|alt.badge.img+26
  • Hub Powerhouse
  • October 4, 2026

As I would interprete it the points are derived from Strava data. Whether Strava sees it that strict I don’t know.

There aren’t any known channels where Strava answers questions about the API policy.