Privacy Policy

What we collect

• Account data such as your name, email address, profile image, language, role, and the authentication identifier supplied by Clerk. StreetEats does not store your password.
• Location data when you ask to discover nearby vendors, pin a vendor location, request directions, or make a distance-verified visit. Location permission is optional for browsing; you can select an address manually where available.
• Content you submit, including vendor details, addresses, menus, images, reviews, reports, favourites, collections, and support communications.
• App and device data needed for security, diagnostics, push delivery, and reliable operation, including IP-derived security signals, app version, crash details, and push subscription identifiers.
• If a vendor explicitly starts an optional shift, its start, expected end, last active heartbeat, and end time. A shift does not collect or store background device location; vendor map-pin updates are a separate action.

How we use information

We use data to authenticate accounts, show relevant nearby vendors, operate customer and vendor features, review vendor applications, prevent abuse, deliver requested notifications, resolve support issues, and improve reliability. If an AI feature is enabled and you choose to use it, the query or photo required for that request may be processed by the configured AI provider; StreetEats still renders only records grounded in its verified marketplace database.

Service providers and sharing

We use service providers only to run StreetEats: Clerk for authentication, PostgreSQL/Neon for application data, AWS S3-compatible storage for images, Google Maps Platform for maps and geocoding, OneSignal and platform push services for notifications, Sentry for privacy-limited diagnostics, Vercel and other configured hosting infrastructure, and Google Gemini only for enabled AI features. We do not sell personal data. Public vendor profiles, menus, public photos, ratings, and published reviews are visible to other users by design.

Retention and deletion

We keep personal data only while needed to provide the service, meet security and legal obligations, or resolve disputes. You can permanently delete an account inside either app or from our account deletion page. Deletion removes the sign-in identity and linked personal profile. A solely owned vendor is suspended from public discovery. Minimal non-identifying operational records may remain where required for fraud prevention, financial/legal obligations, or an immutable moderation audit. A pseudonymous deletion receipt is retained for no more than 180 days so failed provider cleanup can be retried and verified.

Your choices and security

You can deny location, photo, and notification permissions in your device settings; some related features will then be unavailable. You may sign out or delete your account at any time. We use access controls, encrypted transport, scoped production credentials, and privacy-limited monitoring, but no system can guarantee absolute security.

Children and contact

StreetEats is not directed to children under 13. If you believe a child provided personal data, or you have a privacy question, contact streeteatsdeveloper@gmail.com.