Privacy Policy — Street Food Spot

Version: 1.0 — Effective 28 May 2026

Street Food Spot ("we", "us", "our") operates the Street Food Spot mobile application and website at streetfoodspot.nz (the "Service"), a platform that helps people in Queenstown, New Zealand discover mobile food vendors. This policy explains what data we collect, how we use it, and your rights. We handle personal information in accordance with the New Zealand Privacy Act 2020.

1. Who this policy covers

The Service has two types of users: customers (people browsing for food trucks) and merchants (food vendors who list their truck). We collect different data for each, described below.

2. Information we collect

Customers. You can browse the Service without an account. If you choose to use location features, we access your device's GPS location to show nearby trucks and sort them by distance. Your location is used only on your device and to compute distances; we do not store your location history on our servers. If you decline location access, you can still use the Service and search by address instead.

Merchants. When you register a truck, we collect your email address (for your account login and notifications), your truck's name and details, location/address of your truck, business hours, menu and photos you upload, and your phone number and website if you provide them. Account login uses an email address and password.

3. How we collect it

We collect information directly from you when you register, log in, upload photos, set your truck's location and schedule, or contact us. For customers, location data is collected from your device only with your permission, via your device's standard location permission prompt. We also collect basic usage analytics automatically (see section 5).

4. How we use your information

We use your information to: operate the Service (show trucks on a map, compute distances, display menus and schedules); authenticate merchant logins and send account-related emails such as registration confirmations and password resets; respond to your enquiries; and improve the Service. We do not sell your personal information, and we do not build advertising profiles or use your data for third-party advertising.

5. Third-party services we use

We rely on the following service providers to run the Service. Each processes data only as needed to provide their function, and is bound to protect it to a standard consistent with this policy:

Google Firebase (Google LLC) — authentication, database, and photo storage. Google Maps & Places API (Google LLC) — maps, address search, and displaying Google reviews. Resend — sending account emails (registration and password-reset notifications). Google Analytics — anonymous usage statistics to understand how the Service is used (e.g. logins, truck views). These providers may store data on servers outside New Zealand. We only share what is necessary for them to perform their service.

6. Data retention and deletion

We keep merchant account data for as long as the account is active. Merchants can delete their account at any time directly within the app (My Account → Delete Account), which permanently removes your account, truck listing, uploaded photos, and associated data from our systems. You may also contact us to request deletion. Customer location data is not retained on our servers.

7. Your rights

Under the New Zealand Privacy Act 2020 you have the right to access the personal information we hold about you and to request correction of it. You may also withdraw consent for location access at any time through your device settings. We respect equivalent access and deletion requests from users in other regions. To exercise any of these rights, contact us at the email below.