Hi everyone,
I run a small, free, non-commercial hobby app for a local running community. Each user's progress (a level and some points) is computed only from their own activities. I'd like to make sure we fully follow the 2026 API Agreement and Policy before resubmitting a capacity request.
1. Sharing with consent: Policy 2.3 says data can only be shown to the user it belongs to, while 5.13 mentions "prior express consent". Can we show a user's derived progress (no activity details, no maps, no Strava name) to other users of the app, if each user explicitly opts in (off by default) and can opt out at any time?
2. Retention: to recompute a user's progress, we keep a minimal summary of their activities (date, type, distance, elevation, time; no GPS or photos) while they use the app, and delete it when they deauthorize. Is that compatible with 6.2 and 6.4, or is a shorter limit expected?
3. Community channels: is it OK to post fully aggregated info (for example "6 users took part in this week's challenge") in our own community chat, with no names or individual numbers?
4. After a capacity request is declined, is there any way to get a hint about what to fix before resubmitting?
Thanks a lot for your help!
