My app is a private space for exactly two partners. Each partner connects their own Strava account by OAuth, and following API Policy §2.3 each athlete currently sees only their own activities — the other partner sees nothing imported from Strava.
Both people in a space keep asking for the same thing: to see each other's workouts and run a small weekly challenge together. Before building anything, I'd like to know where the line is:
- If both athletes explicitly opt in inside the app (mutual, revocable, visible to nobody beyond the two of them, deleted within our 7-day retention window), may one athlete's activities be shown to their partner?
- If raw activities are off-limits, is a derived weekly total (a single points number per athlete, no titles, dates or distances) acceptable for the two-person challenge, given §5.4's aggregation language?
I've emailed developers@strava.com with the same question; posting here for the record and in case others have heard back on the household/couple model. Happy to build to whatever the answer is — the app ships strict owner-only today.
