1. Information We Collect

We collect the following personal information from users:

• Name
• Email address
• Profile picture and cover image (if uploaded)
• Location data, when you choose to share it
• Device information and app usage data

Location Data: For users, location data may be used to show nearby street food vendors on the discover map. For vendors, location data may be used to publish vendor listings and posts on the discover map. Location sharing is optional. Users may browse the discover map without sharing their location, and vendors may manually enter an address or coordinates instead of using their device's current location.

We do not collect or store any financial data.

2. Device Permissions

To provide certain features, the StreetBitez app may request access to the following device permissions:

• Camera: To take photos for your profile picture or cover image.
• Photo Library/Gallery: To select existing images for your profile picture or cover image.
• Location: Allows users to discover nearby street food vendors and allows vendors to easily publish accurate location information for their listings or posts.

These permissions are optional and you can manage them through your device settings at any time. Denying permissions may limit certain location-based features.

3. Location Visibility

Vendor location information displayed on the discover map is public and visible to other users of the StreetBitez app.

User location data is not publicly displayed. When users choose to share their location, it is used only to determine nearby vendors and improve map discovery.

4. Location Usage & Retention

We do not continuously track user location in the background. Location data is used only when location-based features are actively used within the app.

5. How We Use Your Information

We use this information to:

• Provide and improve the StreetBitez platform.
• Show you nearby street food vendors.
• Send you updates, promotions, and service-related communications.
• Analyze app usage to enhance user experience.

6. Data Storage and Security

We use reasonable administrative, technical, and physical safeguards to protect your data. However, no online service can guarantee 100% security.

7. Data Sharing

We may share limited user data:

• With service providers who assist in platform operation.
• To comply with legal obligations or law enforcement requests.
• In aggregated or anonymized form for analytics.

We do not sell your data to third parties.

8. Third-Party Service Providers

We use trusted third-party services to operate our platform:

• Cloud Hosting: Amazon Web Services (AWS), DigitalOcean
• Analytics: PostHog

These providers may process your data in accordance with their own privacy policies.

Mobile App Analytics: We use PostHog, a third-party analytics service, to understand how users interact with our mobile application. PostHog is not used on our website, and the website does not set any analytics or tracking cookies.

Information Collected: PostHog automatically collects certain information, including your IP address. We use this IP address to derive general location information (such as city, region, and country) to help us understand our user base and improve our service.

Privacy Safeguards: To protect your privacy, we have configured PostHog to anonymize your IP address immediately after general location data is processed. Your full IP address is never stored in our analytics database.

Opt-In / Opt-Out: You have full control over analytics data collection in the mobile app. Users who opt out will not share any data or events with PostHog. You can change your preference at any time through the app settings.

9. Data Retention & Deletion

We only keep your data for as long as necessary to provide our services and comply with legal obligations. Our specific retention periods are:

Retention Schedule

• Account Profile Data: We retain your profile information (email, username, preferences) for the duration of your account's life until deleted by user.
• Subscription & Transaction Records: Payment processing and subscription management are handled by RevenueCat and the App Stores (Apple/Google). While we do not store your credit card details, we retain transaction and subscription status for 7 years to comply with tax and financial auditing laws.
• Technical & Logs: General usage logs are automatically purged after 90 days. These logs are used solely for troubleshooting and security monitoring.
• Anonymized Data: We may retain non-identifiable, aggregated data indefinitely for high-level analytics and product improvement.

How to Delete Your Data

We believe in giving you full control over your information. You can trigger the deletion of your account and all associated personal data directly within the app settings.

What happens when you hit delete:

• Immediate Deactivation: Your account is immediately hidden and deactivated.
• 30-Day Grace Period: We keep the data in a secure, inactive state for 30 days in case you change your mind or the request was accidental.
• Permanent Purge: After 30 days, your personal data is permanently erased from our active databases.

Note on Backups: Please note that some data may remain in our encrypted secure backups until the backup cycle is overwritten.

10. Your Rights

Depending on your location, you may have the right to:

• Access, correct, or delete your personal information.
• Opt out of promotional communications.
• Request a copy of your data.

11. Children's Privacy

StreetBitez is not intended for children under 13 years of age. We do not knowingly collect, store or process personal information from children under 13. Account creation is restricted to individuals 13 years or older. If we learn that we have collected personal information from a child under 13, we will delete that information in a timely manner.

12. Changes

We may update this Privacy Policy from time to time. Updates will be posted here with a new effective date.