Keeta Privacy Policy

Last updated: October 25, 2025

About Us

This privacy policy covers the use of your information when you interact with the Keeta App or related services. KEETA TECHNOLOGIES PTE. LTD. will be the controller of your information for the activities described in this privacy policy.

As such, any references in this privacy policy to "Keeta", "we", "our", "us" etc. will be interpreted as a reference to KEETA TECHNOLOGIES PTE. LTD.

Our contact details are:

What does this privacy policy cover?

This privacy policy:

What information do we hold?

A. Information You Provide to Us: This refers to personal information you actively provide when you create an account, place an order, or communicate with us.

  1. Identity and Contact Data: We collect information used to create your account, verify your identity, and contact you. This includes, but is not limited to, your full name, email address, phone number, and precise delivery address. In Brazil, you may voluntarily provide your personal tax number (CPF) on your profile page for convenience. Additionally, to comply with local tax regulations (e.g., issuing electronic invoices) or to complete transaction verification, you may be required to provide such identity information during the checkout process.
  2. Profile and Preferences Data: We collect information you provide to personalize your account and experience. This includes, but is not limited to, your username, password, saved preferences (e.g., language selection, notification preferences), your list of restaurants or items marked as favorites, as well as demographic details you choose to provide, such as optional gender information.
  3. Financial and Payment Data: We collect information necessary to complete your purchases. This includes, but is not limited to, your payment methods and related payment details (e.g., credit or debit card number).
  4. Communications and Feedback Data: We collect information you provide when communicating with us or other parties on the platform. This includes, but is not limited to, records of your communications with our customer support team, couriers, and merchants (via in-app chat, email, or phone recordings), your responses to surveys, and any reviews or feedback you submit regarding restaurants, couriers, or items.
  5. Sensitive Information for Security Verification: To protect your account and transaction security, under specific high-risk circumstances, we may require you to provide additional verification information. This may include your biometric information, such as a photo taken via your device's camera to perform facial verification. We only process such sensitive personal information when permitted or required by applicable law, or when we have obtained your specific and highlighted consent, while always adopting reinforced security measures for such processing.

B. Information We Collect Automatically: This refers to personal information we automatically record from your device when you interact with our services (e.g., our application or website).

  1. Transaction Data: We retain records of the orders you place and your purchasing activities. This includes, but is not limited to, your order history, details of items purchased, order values, applied discounts or vouchers, payment methods and times, order status (e.g., pending, in preparation, out for delivery, completed), and any notes you provide for your order.
  2. Device and Technical Data: We collect technical information about the device you use to access our platform. This includes, but is not limited to, your IP address, unique device identifiers (e.g., Advertising IDs [IDFA/GAID], MAC address), device model, operating system and version, browser type, mobile network information, and time zone settings.
  3. Usage Data: We collect information about how you browse and use our application or website. This includes, but is not limited to, your search query history, pages or merchants you have viewed, your clickstream and navigation paths on the platform, features you use, app crash logs, performance data, and the dates and times of your visits or interactions.
  4. Precise Location Data: We collect precise information about your geographic location, which is essential for confirming your address, assigning couriers, and tracking order delivery. This may include, with your authorization, real-time geographic location obtained via your device's GPS, Wi-Fi, or cellular network.

C. Information We Receive from Third Parties: We may receive information about you from other sources to supplement our records and support our operations.

  1. Third-Party Login Services: If you choose to register or log in using your account from another provider (e.g., Google, Apple, or Facebook), we will receive your account verification information and other necessary information required for login from that provider, in accordance with your privacy settings and authorization on that provider.
  2. Payment and Anti-Fraud Partners: We receive information from our partners to confirm transactions, verify identity, and prevent fraud. This may include transaction status confirmations, risk assessment data, or identity verification results from our payment service providers, identity verification services, and anti-fraud partners.
  3. Merchants and Couriers: In certain situations, our partners (restaurants and couriers) may provide us with information related to an order, such as reports regarding order issues, delivery confirmation, or safety incidents.
  4. Marketing and Analytics Partners: We receive data from partners to help us measure the effectiveness of our advertising and understand our user sources, such as data about how you found our application or website (e.g., which platform's ad you clicked).

How and why do we use your personal data and what lawful bases will we rely on?

We will use your information for the purposes set out below and rely on the lawful bases listed for such processing activities.

  1. To manage your user account: To register your new account, verify your identity, enable you to log in, and manage your profile and preferences.
  2. To process your orders: To receive your submitted orders, confirm order details, and accurately transmit order information to our partner restaurants or merchants.
  3. To process payments, refunds, and assist transaction compliance: To securely process your order payments, manage refund requests, and assist with transaction-related compliance. This may include collecting necessary identity or tax information and transmitting it as required to transaction parties (e.g., merchants or payment institutions) for them to process the transaction or fulfill their compliance obligations.
  4. To manage and fulfill delivery: To assign your delivery address and contact details to couriers, allow you (and merchants) to track order progress in real-time, and confirm delivery completion.
  5. To provide customer support: To respond to your inquiries, investigate and resolve your issues or complaints (e.g., order errors, missing items).
  6. To send essential service communications: To send you necessary non-marketing notifications, such as order confirmations, delivery status updates, service interruptions, or changes to our terms and policies.
  7. To prevent fraud and financial crime: To monitor and detect fraudulent transactions (e.g., credit card theft) during the payment process and to detect and block the abuse of vouchers or promotions.
  8. To ensure platform security and integrity: To protect your account from unauthorized access, monitor and prevent malicious activity, and ensure the stability of our application (e.g., analyzing crash logs).
  9. For analytics and service improvement: To analyze aggregated, anonymized, or pseudonymized user behavior to understand trends, fix bugs, optimize the user interface (UI/UX), and develop new features and services.
  10. To personalize your platform experience: To display personalized restaurant listings, item recommendations, or home page content based on your order history, browsing behavior, location, and inferred preferences.
  11. For marketing, advertising, and promotions: To send you (non-loyalty program) general promotions, discounts, and newsletters that we believe may be of interest to you, via email, SMS, WhatsApp messages, or push notification.
  12. To perform high-risk security and identity verification: To actively trigger additional identity verification to protect your account security under specific high-risk circumstances (e.g., when we detect suspicious account activity, high-value transactions, or to comply with anti-fraud regulations).
  13. To comply with legal and regulatory obligations: To fulfill our legal responsibilities, such as retaining financial and tax records, or responding to valid legal requests from law enforcement, regulators, or courts.
  14. Establish, exercise, or defend legal claims: To manage, prepare, and defend our legal position in the event of a dispute (e.g., with you, merchants, or couriers).

Where we process your personal data for the purposes listed above, we may rely, for example, on the following legal basis to process your personal data: (1) Where we have obtained your consent; (2) Where processing your personal data is necessary to perform a contract; (3) Where it is necessary to pursue our legitimate interests including identity verification of users, communicating with users, to monitor, protect and enhance our services.

Where information is not made available to us, we may not be able to provide you the products and services you have requested or otherwise to carry out our activities in the context of our relationship with you.

How we use cookies and similar technologies

Cookies are small text files stored on your browser or device. Cookies allow us to recognize your preferences in order to tailor our pages and services to your specific needs. Some information is saved in these text files so that, when you visit our pages again, your browser or device is recognized and configured according to your previous preferences.

Cookies usually have an expiration date. Some cookies, for example, are automatically deleted when the browser is closed, while others may be stored on the device for a longer period until they are manually deleted.

We may use the following types of cookies under this policy:

If you wish to refuse the installation of these cookies on your device or opt to remove cookies, you can do so through your browser settings. For more information on how to configure cookie usage in your browser, please refer to the website of your browser's developer, such as:

It is important to clarify that we are not responsible for the use of cookies by third parties. Cookies placed by third parties may continue to track your online activities, so we recommend regularly managing the cookies installed in your browser.

Who do we share your information with?

We share your personal information only when it is necessary to provide our services, operate our business, or comply with legal, contractual and regulatory obligations. We may share your information with the following categories of recipients:

  1. Restaurants and merchants: To fulfill your order and provide the service, we provide necessary information to the restaurant or merchant you have selected. This typically includes your order details (e.g., items purchased, special notes) and your name.
  2. Couriers: To complete your delivery, we provide the courier responsible for delivery with the information necessary to perform their duties. This typically includes your name, precise delivery address, and contact phone number (which may be encrypted via our system).
  3. Payment service providers and fraud prevention partners: We share information with third-party partners to securely process your payments, verify your identity, and prevent fraud. This may include sharing necessary payment, transaction, device, or identity information with payment processors, anti-fraud services, and identity verification providers to facilitate transactions and maintain the security of your account and our platform.
  4. Technology and operational service providers: We rely on third-party service providers to help us operate our technical infrastructure and platform services. These providers help us with tasks such as data hosting, customer support management, service communications, and platform analytics and improvements, processing relevant data according to our instructions.
  5. Marketing and advertising partners: Where permitted by applicable law, we may share certain information with partners to help us with marketing, measuring advertising effectiveness, and conducting audience analysis.
  6. Promotion and rewards partners: If you choose to participate in a specific promotion offered by a third-party partner, we may share the necessary information (e.g., transaction data, user ID) with partner to calculate or redeem your reward.
  7. Corporate affiliates: We may share information within our corporate group of companies to support centralized business operations, such as providing shared IT services, security support, internal reporting, and analytics.
  8. Professional Advisors: We may share information with our professional advisors, including our lawyers, accountants, auditors, and insurers, when necessary (e.g., to handle legal disputes, conduct audits, or respond to security incidents).
  9. Legal, regulatory, and corporate transactions: We may disclose your information in the following specific circumstances:
    • To comply with legal obligations: When we have a good faith belief that we must do so to respond to a valid legal request (e.g., a court order, subpoena) or requirements from government or law enforcement agencies.
    • In a corporate transaction: In any proposed or actual merger, acquisition, asset sale, or business restructuring. Your information may be transferred to the proposed or actual acquiring party (and its advisors) as part of the transaction, under confidentiality agreements.

How your personal information is transferred internationally

The servers used to store the information described in the "What information do we hold" section may be located outside of your country or region, including in locations such as Frankfurt, Hong Kong, and Saudi Arabia.

As a global company, some entities with whom we share information, as detailed in the "Who do we share your information with" section (such as our corporate affiliates, third-party service providers, and partners), may also be located outside your jurisdiction. These entities might require access to your information to provide their services or for the purposes outlined in this policy, provided that such access is strictly limited and subject to robust security controls.

Therefore, we may transfer your personal data to other countries or regions that have been recognized by the applicable data protection authority as having adequate levels of protection for personal information (i.e., pursuant to 'adequacy decisions'). In the absence of adequacy decisions, we will only transfer your personal data to countries which do not have data protection laws or to countries where your privacy and other fundamental rights will not be protected as extensively where we have implemented appropriate safeguards to ensure that your personal data remains protected and secure.

Information relating to children and minors

We do not seek or knowingly collect any personal data about children under the legal age of consent in the applicable jurisdiction. If you learn that anyone younger than legal age of consent has unduly provided us with their personal data in relation to our services, please contact us and we will make commercially reasonable efforts to delete such information from our database.

How long will we keep your information?

We only keep your information for as long as is reasonably necessary for the purposes set out in this privacy policy and to fulfil our legal obligations. We will securely erase or anonymise your information once we no longer need it. We will adopt different deletion rules according to different purposes and concrete conditions of the processing. Upon expiration of the retention period, we will process your personal data pursuant to the requirements of applicable laws, including deleting or anonymizing your personal data.

Your rights

We provide you with the ability to access, manage, and update some of your information directly within your account settings.

Depending on the applicable data protection laws in your jurisdiction, you may have specific rights regarding the personal information we hold about you. These rights may include:

To exercise the rights above, you may log in to the App with your account and operate on your own, or you may raise your requests regarding these rights or other related matters by emailing us at email.dpo@keetainc.com.

You may also delete your relevant personal information through our App. Specifically, you can delete your account by navigating to [Account] → [Your Name] → [Delete Account], or by submitting a deletion request to the same email address (email.dpo@keetainc.com).

Upon receiving your request, we will verify your identity and process it in accordance with applicable laws and our internal procedures. Please note that certain information may need to be retained as required by law or for legitimate business purposes (such as fraud prevention, record-keeping, or dispute resolution).

Please note that these rights are not absolute and may be subject to certain conditions or limitations under applicable law.

If you wish to exercise any rights you may have under applicable law, please contact us using the details provided in the Contacting Us section of this policy. We will assess and respond to your request in accordance with the requirements of applicable law.

Contacting us

Our contact details are set out at the top of this privacy policy. Please do contact us if you would like to exercise one of your rights listed above or if you have any questions or complaints about this privacy policy or about how we handle your information. You also have the right to complain to the relevant supervisory authority. We would however always appreciate the opportunity to address your complaint first.

Changes to this privacy policy

From time to time, we may make changes to this privacy policy to ensure that it is accurate and up to date and to reflect any changes in the law. When we update the privacy policy, we will update the "Last Updated" date at the top of the new privacy policy or providing any other notice required by applicable law. We recommend that you review the privacy policy each time you visit the platform to stay informed of our privacy practices.

Additional terms for certain jurisdictions

Certain jurisdictions have additional terms described below under applicable laws. If you are located in any jurisdiction set out below, the additional terms outlined below apply to you in addition to the other terms of this privacy policy. In case of any conflicts between the other terms of this privacy policy and the applicable additional terms described below, the terms described below shall govern.

Brazil

Exercise of data protection rights

Under Brazilian law, you have specific rights regarding your personal data. We are committed to ensuring transparency and enabling you to exercise your rights effectively, which include.

  1. Confirmation of whether we process your personal data;
  2. Access to your personal data;
  3. Correction of incomplete, inaccurate, or outdated data;
  4. Anonymization, restriction, or deletion of unnecessary or excessive data, or data processed in noncompliance with the LGPD;
  5. Portability of your data to another service provider, subject to commercial and industrial secrets;
  6. Objection to the processing of your personal data when the processing is not based on your consent or when not in compliance with the LGPD;
  7. Deletion of personal data processed based on your consent, except where retention is authorized;
  8. Information about public and private entities with which we have shared your data;
  9. Information about the possibility of not providing consent and the consequences of such refusal;
  10. Withdrawal of previously given consent, at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
  11. Request a review of decisions made solely based on automated processing that affect your interests, including decisions related to your personal, professional, consumer, or credit profile, or aspects of your personality;
  12. If you are not satisfied with the way we handle your request, lodge a complaint with the National Data Protection Agency (Agência Nacional de Proteção de Dados – ANPD).

Limitations to your rights

In certain cases, we may be unable to comply with your request, either partially or entirely. Such circumstances may include, for example: (i) when compliance is technically unfeasible given the nature of our business; (ii) when compliance would violate our intellectual property or trade secrets; or (iii) when compliance would jeopardize the rights of third parties. In such cases, we will provide a clear explanation of the reasons for our decision.

International data transfers

In order to provide you with our services, your personal data may be transferred to and processed in jurisdictions outside of Brazil for processing on our servers, which are hosted in Frankfurt, Germany. We will ensure that such transfers comply with the requirements of the General Data Protection Law (LGPD) and are subject to appropriate safeguards even while your contractual personal data is being processed outside Brazil, which may include, for example, the execution of the Standard Contractual Clauses published by the National Data Protection Agency (Agência Nacional de Proteção de Dados – ANPD) or the implementation of other transfer mechanisms provided for in the applicable law for protecting your data.

Contacting us

If you have any questions or comments about our privacy policy or the terms mentioned, you may contact our Data Protection Officer, Carlos Marcondes, at email.dpo@keetainc.com.