Activiz logo

Privacy Policy — Activiz

Effective date: March 31, 2026

Activiz respects your privacy. This policy explains what data the app uses, why, and how it is protected.

What Activiz does

Activiz connects to your Strava account to retrieve activity statistics and overlay them on a photo. The edited photo can then be exported.

What data is used

Strava activity data

Activiz requests access to your Strava activities (activity:read_all). This includes statistics such as distance, time, elevation, heart rate, and GPS coordinates for route display. This data is processed exclusively in your device's memory and never stored locally.

Authentication tokens

After signing in with Strava, the app receives an access token and refresh token. These are stored in your device's secure Keychain, accessible only when the device is unlocked. Tokens are not synced to iCloud and are device-bound.

Photos

Activiz reads one photo of your choice via the system photo picker. The app never stores photos itself — the export goes through the standard iOS share sheet, where you decide where the image goes.

Cloudflare Worker proxy

Strava requires a secret key to renew access tokens. To prevent this key from being stored inside the app — where it could be extracted — token renewal is handled by an intermediate server (Cloudflare Worker) managed by the developer.

What the proxy does: forwards the app's request to Strava and returns the response.
What the proxy does not do: store or log tokens, user data, or any other information.

The connection to the proxy is encrypted (HTTPS) and requires an API key present only in the app.

Third parties

PartyPurposePrivacy policy
StravaRetrieve activity data via OAuthstrava.com/legal/privacy
CloudflareHosting the token proxycloudflare.com/privacypolicy

The app contains no analytics, advertisements, or other third-party SDKs.

What the app does not do

Your rights

You can sign out at any time: open the overlay editor, tap the settings icon, and choose "Sign out" at the bottom. Upon signing out, all stored tokens are immediately deleted from the Keychain. Since the app itself stores no user data, there is nothing further to delete.

To delete your Strava data or revoke app access: strava.com/settings/apps.

Contact

Questions about this privacy policy? Send an email to: bays.spinier7b@icloud.com