Streetwise Meats (“Streetwise”, “we”, “our”) operates the Streetwise website and the Streetwise Meats Android application. Streetwise Meats Butchery (Private) Limited is responsible for the personal information handled through these services. Our contact address is 69 Herbert Chitepo Street, Mutare, Zimbabwe, opposite Pizza Inn. You can contact us at info@streetwisemeats.co.zw or +263 77 634 5985.
Information we collect
- Account and contact details: name, email address, phone number, authentication identifier and optional profile image.
- Order and delivery details: products, quantities, recipient, phone, collection branch or delivery address, requested date, instructions, payment method and order status.
- Legacy store-credit records: historical credits, corrections, receipt references and balances created before the Android app removed this service. The current app cannot view, create, spend or adjust store credit. These records remain only for offline settlement and statutory accounting.
- Supplier and support information: supplier profile, offered quantities and dates, support cases, replies and files or references you voluntarily provide.
- Device and usage information: app installation identifier, Firebase push token, app version, platform, session identifier and allow-listed events such as screen views, cart activity and order creation. We do not collect precise location, contacts, SMS, microphone recordings or advertising identifiers through the current app.
Why we use it
We use this information to create and secure accounts; show products and branches; accept, fulfil and support orders; review supplier offers; send requested service and order notifications; prevent duplicate transactions and fraud; diagnose failures; meet accounting obligations, including legacy store-credit records; and understand aggregate service usage. We do not sell personal information and the current app does not display third-party advertising.
Service providers and disclosures
Information is processed by our WordPress hosting and operational systems. Google Firebase supports authentication and push notifications, and Google Sign-In is used only when you choose it. We may share the minimum necessary information with delivery providers when a related service is active, or with regulators and professional advisers when legally required. The current Android app does not accept payment credentials or provide a mobile-payment service.
Storage, security and retention
Connections use HTTPS. Customer sessions use a Secure, HttpOnly and SameSite-protected cookie that app JavaScript cannot read; only a one-way hash of the session secret is stored on the server. Administrative access is permission checked, and material administrative changes are audited. No internet service is completely risk-free. Account, notification and support data is kept while the account is active and removed on account deletion. Privacy-conscious app event records are automatically removed after 90 days, expired sessions are removed, and inactive push registrations (including Streetwise's server-side installation association) are removed after 180 days.
On account deletion, we remove the WordPress profile, sessions, server-side push registration and installation association, notifications, user-linked analytics, support cases and replies, and the personal supplier profile. Supplier offers are detached and stripped of notes, payloads and app request identifiers. We remove recipient name, phone, address, delivery free text and proof links, app request identifiers, and personal audit payloads. We retain only unlinked order totals and line items, legacy store-credit accounting entries, limited delivery status and non-identifying audit facts for six years from the transaction or action date, then delete them automatically. This six-year period reflects Zimbabwean tax and accounting record-keeping requirements.
A non-identifying deletion receipt is retained for up to 365 days so a lost response can be checked safely. Keyed, non-reversible hashes of a deleted email and Google/Firebase identity are retained for seven days to prevent interrupted deletion from automatically recreating an account; raw identity values are not stored in those markers. Completed deletion-request contact details and email lookup hash are erased immediately. Unconfirmed requests expire after seven days, and the lookup hash of any stale open request is erased within 30 days.
Streetwise currently keeps no application-managed database backup, so there is no separate Streetwise backup copy to age out. A hosting-provider disaster-recovery copy, if one exists, is isolated from routine processing and deletion must be reapplied before restored data is returned to service. Google's Firebase SDK may keep a Firebase Installation ID on the device independently of Streetwise. Account deletion removes Streetwise's server association and push token, but does not directly erase Google's on-device identifier; clearing app storage or uninstalling the app controls that device copy.
Your choices and rights
You can decline notifications in Android settings, sign out to revoke the current session and device registration, and ask us to correct or provide information associated with your account. You can permanently delete an account inside the app or use our account deletion page. Authenticated in-app deletion removes active Streetwise data immediately. Confirmed email requests are processed within seven calendar days. Deleting a Streetwise account does not delete your independent Google account.
Children and changes
The service is intended for general grocery customers and is not directed to children. We may update this policy when app features or legal requirements change. The effective date above will change when a material revision is published.