Privacy Policy
Last updated June 21, 2026
SkillDeck Labs Pte Ltd ("we," "our," or "us") operates the Relay mobile application. Relay lets you turn your own running activities into shareable photo overlays. This Privacy Policy explains how we collect, use, and protect your information when you use our app.
Information We Collect
Information You Provide
- Account Information: When you connect with Strava, we receive basic profile information such as your name and profile photo.
- Strava Activity Data: With your authorization, we access your own running activity data from Strava (such as distance, pace, time, elevation, heart rate, and route) so you can display it on the overlays you create. We collect this data by calling the Strava API on your behalf using the access you grant when you connect your account.
Information Collected Automatically
- Usage Data: We use PostHog to understand how you interact with the app (for example, device type, operating system, and which features you use). We do not send your Strava activity data to our analytics provider.
- Device Information: We may collect device identifiers and technical information to ensure the app functions properly.
How We Use Your Information
We use your information to:
- Show you your own recent Strava activities so you can choose one to share
- Let you create photo and video overlays from your activity data
- Improve and optimize the app experience
- Communicate with you about the service
- Ensure the security and integrity of the app
We display Strava data only to you, the authenticated athlete it belongs to. We do not use your Strava data to train, evaluate, or operate any artificial-intelligence system, and we do not use it for analytics, profiling, or product benchmarking.
Data Storage and Retention
We fetch your Strava activities from Strava as you need them and keep them only transiently to operate the editor — no longer than a short cache (seven days). We do not maintain a long-term store of your Strava activity data. Operational data needed to run the app (such as your authentication tokens and app settings) is stored securely using Supabase, a cloud database service, with appropriate technical and organizational safeguards.
When you disconnect Strava, delete your account, or stop using the app, we permanently delete your Strava data and any personal data derived from it within thirty (30) days, except where we are required by law to retain a limited record (such as a record that a deletion took place).
Data Sharing
We do not sell or rent your personal information, and we do not share your Strava data with third parties (including advertisers, data brokers, or AI providers).
We rely on a small number of service providers to operate the app:
- Supabase — secure hosting of operational data (tokens, settings).
- PostHog — product analytics (usage only; no Strava activity data).
- Superwall — management of in-app subscriptions.
- Legal Requirements: We may disclose information if required by law or to protect our rights and safety.
Strava is an independent controller of your Strava data. Strava may collect and use data related to your access to and use of the Strava API in accordance with the Strava Privacy Policy.
Third-Party Services
Our app integrates with third-party services that have their own privacy policies:
- Strava: strava.com/legal/privacy
- Supabase: supabase.com/privacy
- PostHog: posthog.com/privacy
- Superwall: superwall.com/privacy
Your Rights and Choices
You have the following rights regarding your data:
- Access: You can view your own data within the app.
- Withdraw Consent / Disconnect: You can disconnect Strava at any time in the app (Settings → Strava → Disconnect), which revokes our access to your Strava account. You can also revoke access from your Strava settings.
- Deletion: You can delete your account and all associated data directly in the app (Settings → Delete Account). We complete deletion within thirty (30) days and can confirm deletion on request.
Children's Privacy
Relay is intended for users aged 13 and older, consistent with Strava's minimum age requirement. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy in the app or through other communication channels.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
SkillDeck Labs Pte Ltd160 Robinson Road, #24-09 SBF Centre
Singapore 068914
me@timwijaya.com
By using Relay, you agree to this Privacy Policy.