Privacy
Last updated 26 October 2026
What we hold
Your name, email, and if you give them, your mobile and birthday. Which venue is your local. Every creds movement on your account, including what you spent and where. Photos and videos you submit. Check-ins. Nothing else.
If you add your Instagram handle, we use it to match posts, comments and mentions that tag @streeteats_eatery to your account, so we can pay you creds for them. Through Instagram's official API we read the post or comment's id, link, text, photo or video link and the handle that posted it. We only see what you choose to share with us publicly. We never post, like or message on your behalf, and we never ask for your Instagram password.
Photos and receipts
Receipt photos and anything you upload are stored by our hosting provider and seen only by our team, to check and pay claims. Receipts may be read by an automated service to pull out the total.
Location
Checking in asks for your location once, so we can confirm you are actually at the venue. We compare it to the venue and keep the coordinates against that check-in. We do not track you in the background and the app cannot see where you are when it is closed.
Marketing
We only email or text you marketing if you turned it on, and you can turn it off in your profile or from any message. Emails about rewards you have actually claimed are not marketing and keep coming, because you need them.
Who else sees it
Our email and text providers, so we can send you things. Our hosting and database providers, so the app runs. Meta, only for the Instagram posts you already shared with us. Nobody buys this list, because it is not for sale.
Your call
Ask us for a copy of everything we hold on you, ask us to fix it, or ask us to delete the lot. Email hello@streeteatseatery.com and we will sort it within 30 days, as the Australian Privacy Act requires. How deletion works is set out on our data deletion page.