Privacy

Moon & Back is Salute’s HeartBeat charity challenge for employees. It is not developed or sponsored by Strava. Contact charity@salute.com for support or a data request. This notice sits alongside the Terms. Where this notice conflicts with the Strava privacy policy about Strava data, Strava’s policy controls.

Your Salute account

We use your existing Salute Microsoft account to identify you. We store your work email, name, Microsoft account identifiers, sign-in dates, challenge enrollment, your name visibility and activity-sharing choices, and the display name and location you choose in your profile.

Strava data we collect

Connecting is optional. If you connect, Moon & Back makes server-to-server reads of activities visible to Everyone or Followers. We store the activity ID, title, date, distance, moving time, and sport. We do not request Only You activities, maps, heart rate, location, or permission to change your activities. We do not label the device brand. Authorization credentials are encrypted on the server and are not sent to your browser.

After you connect, an import runs and then the application checks about once a day for new activities, edits, and removals. You can also request an update from your profile every 15 minutes. Strava may collect information about these API requests under its own policies.

Your name on the leaderboard

Names are visible to signed-in employees by default. The leaderboard uses your profile display name when your results are linked to your account, otherwise the uploaded name or retained historical first name and last initial. Displaying a historical name does not assign those results to an employee account.

Choose “Show me as anonymous” under Name visibility in your profile to appear as “Unnamed participant”. Your distance and ranking still count, and your activity details are hidden from other employees. This covers connected activities and uploads or history linked to your account. Your own profile and authorized administrators still show your identity. Contact support if an uploaded name or historical result needs linking to your profile.

Who can see your activity details

Your profile shows your own imported activities. Sharing activity titles, distances, and “View on Strava” links in the shared activity feed requires your separate agreement under Sharing with other employees. These details appear only while your name is visible. Choosing to show your name does not grant activity-sharing consent.

Changing your choices and deletion

Check or clear “Show me as anonymous” and save to change name visibility. Clear the activity-sharing checkbox to stop sharing activity details without changing name visibility. Recorded withdrawals from the previous name-sharing model remain anonymous unless you choose to show your name. Each change is kept in a sharing record with its time.

Delete my data removes activity titles, Strava links, athlete identity, and the Strava connection. The distance remains in the company total without a name. Select Disconnect Strava to stop imports without that full deletion. The profile confirms when a removal has finished. If Strava is unavailable, revoke Moon & Back in Strava’s My Apps.

Direct activity records are kept for up to seven days after their latest successful refresh. Records that have not been refreshed for 48 hours are hidden. Email the support address above to ask about historical club records or any other deletion request. We will confirm by email when a requested deletion is complete. Database backups follow Salute’s operational retention. A restored database is isolated, and direct activity data and credentials are cleared before the application can use it.

Where this is hosted

Microsoft Azure hosts the application, database, and encrypted credential storage in the United States. We do not sell Strava data or use it to train models.

Privacy · Terms · Strava privacy policy · Manage your apps on Strava