Strava Integration Review Notes

Implemented Scope

LactateLab supports Strava account linking, webhook-driven activity import (create/update/delete), bounded reconciliation, and user-driven disconnect. Imported activity deletion is a separate explicit request after disconnect, processed asynchronously by a provider-scoped and user-scoped cleanup job.

Outbound Strava write features and full historical backfill are not part of the current review scope.

Data Usage Summary

Imported Strava data is shown only to the linked user. The integration is designed for personal training analysis in LactateLab.

Strava data is not used for AI/ML training and is not exposed on shared cross-user surfaces.

Disconnect and Revoke

Users can disconnect in Settings. That path removes the local Strava token and identity and stops ongoing Strava access. It does not automatically delete Strava-imported workouts or import-source records that already exist in LactateLab.

After Strava is disconnected, Strava-imported activity deletion must be requested separately. The backend stores a durable deletion request and the weekly cleanup worker deletes only that user's Strava-owned imported activities and safe Strava metadata in scope.

Reviewer Path

Recommended walkthrough order:

1. Open Settings and connect Strava.
2. Verify connected state and disclosure text.
3. Open Workouts list and a Strava-sourced workout detail page.
4. Verify Powered by Strava attribution and View on Strava link.
5. Disconnect Strava and verify disconnected state messaging.
6. Verify the product does not present disconnect as automatic imported-data deletion.

Legal Pages

Privacy Policy is a general LactateLab privacy policy with a Strava-specific section. Terms of Service include Strava-related handling disclosures for the current feature set.