StreetWise is a location-based community and driving rewards app. We collect only what's needed to run the service, never sell your data, and give you full control over what you share. This policy explains what we collect, why, and your rights.
Data We Collect
We collect only what's necessary to operate StreetWise. No device identifiers, no advertising IDs, no third-party crash logs.
Provided by you
Account
- Email address
- Display name / username
- Profile avatar (optional)
- User ID (UUID, never public)
Community Posts
- Title, description, category, tags
- Location coordinates (user-chosen)
- Up to 3 photos per post
Wallet & Rewards
- STW token balance
- Cashback balance
- Transaction history
Collected automatically
Location
- GPS coordinates (foreground only)
- Route points: lat, lon, speed, time
- Distance calculated from routes
Drive Sessions
- Distance, duration, average speed
- Start/end timestamps
- Session status
Technical
- API request metadata
- Network connectivity status
Legal Basis for Processing
We process your data only where we have a valid legal basis under Pakistan's PDPB and applicable law.
You grant permission when you accept this policy and enable device permissions.
Processing your account, drives, and rewards is required to deliver the service.
Maintaining reward integrity and preventing misuse of the platform.
Retaining anonymized transaction records for financial audit compliance.
How We Use Your Data
Your data is used only to power features inside StreetWise — never for advertising, profiling, or cross-app tracking.
| Purpose | Data Used |
|---|---|
| Authentication & account management | Email, User ID |
| Map display and nearby posts | GPS location, post data |
| Drive tracking and reward calculation | Route points, distance, duration |
| Profile, stats, and history | Display name, sessions, wallet |
| Post photo upload and display | User-uploaded images |
| Real-time community updates | Post data via Supabase Realtime |
| STW token transactions | Session data, wallet records |
Location Data
Foreground only. Location is collected only while the app is open and in active use. We never collect location in the background.
Location is used to centre the map, load nearby posts, record your drive route, and calculate STW token rewards. Route points are linked to your User ID and visible only to you. You may delete any session at any time.
Map tiles and routing use OpenStreetMap and OSRM. Only anonymous coordinate pairs are sent — no account data or User IDs are ever included.
Sharing Your Data
We share data only with the partners needed to run the app. No advertisers, data brokers, or analytics companies.
Supabase (AWS)
Hosts all backend data — auth, database, file storage, and real-time messaging. GDPR-compliant. Processes data only as instructed by us.
OpenStreetMap, OSRM & Nominatim
Map tiles, routing, and geocoding. Only anonymous coordinate pairs are sent — no personal data attached.
We may also disclose data if required by Pakistani law or government authorities, or to protect user safety. If StreetWise is acquired or restructured, you will be notified before your data moves to a new privacy policy.
We never sell your data. No advertising networks. No analytics SDKs. All vendors sign strict data protection agreements.
Data Storage
Your data is stored on Supabase infrastructure running on AWS, with servers primarily in the USA. Cross-border transfers are covered by GDPR-standard contractual clauses with Supabase, encryption at rest and in transit (TLS), and access-controlled AWS data centers.
Data Retention
We keep data only as long as needed to provide the service or meet legal obligations. Once no longer required, data is deleted or anonymized.
Wallet transaction records are retained in anonymized form after account deletion for financial audit purposes. They cannot be linked back to your identity.
Your Rights
You can exercise these rights directly in the app or by contacting us. We respond within 30 days.
- Access — View your posts, sessions, and wallet history in-app anytime, or request a full data export.
- Correction — Edit your display name in-app, or contact us to fix other inaccurate data.
- Deletion — Delete your account in-app to permanently remove your profile, posts, and sessions.
- Restriction — Object to or limit certain processing of your data.
- Withdraw consent — Revoke location permission in your device settings at any time.
- Data portability — Request a copy of your data in a portable format.
In-app account deletion is available in app settings. Deleting your account removes all associated personal data. Anonymized wallet records may be retained for audit purposes (see Section 7).
App Permissions
StreetWise requests only the Android permissions it needs. None are used for tracking across other apps.
Children's Privacy
StreetWise is not intended for users under 13. We do not knowingly collect data from minors. If we discover a minor's account, we will delete it promptly. If you believe your child has signed up, contact us at maazmansoorb301@gmail.com.
Data Security
We take appropriate measures to protect your data against unauthorized access or disclosure.
- Encryption at rest and in transit (TLS) via Supabase/AWS
- Industry-standard hashed credentials — passwords are never stored in plain text
- User IDs are private UUIDs; posts only show your chosen display name
- No third-party analytics or crash-reporting SDKs bundled in the app
No system is 100% secure. Keep your credentials confidential. If you suspect a breach, contact us immediately.
Policy Updates
We may update this policy to reflect changes in the app or applicable law. For material changes, we will notify you via in-app notification or email before they take effect. Continued use of StreetWise constitutes acceptance of the revised policy.
Contact Us
For any privacy questions or data requests, reach out to our privacy office. We respond within 30 days.
StreetWise — Privacy Office
- Company: Apkaagent
- Email: maazmansoorb301@gmail.com
- Country: Pakistan