Last updated: May 6, 2026

About Us

We are Keeta, an international food and retail delivery platform and subsidiary of Meituan. This Privacy Policy explains how Keeta handles the personal data of customers when they interact with the Keeta app or website ("Platform"). We aim to protect individuals' privacy, act transparently, and handle personal data responsibly. In Hong Kong, Kangaroo Limited is responsible for the personal data processing activities described in this Privacy Policy.

As such, any references in this Privacy Policy to "Keeta", "we", "our", or "us" will be interpreted as a reference to Kangaroo Limited, and any references to "you" or "your" will be interpreted as a reference to Keeta customers.

When we refer to "personal data" in this Privacy Policy, we mean any data relating directly or indirectly to a living individual from which it is practicable for the identity of the individual to be directly or indirectly ascertained.

This Privacy Policy applies to all personal data processed by Keeta, in any format and across all locations, systems, and business functions, including processing carried out by employees, contractors and third-party service providers acting on Keeta's behalf. This Privacy Policy is reviewed periodically and updated to reflect changes in our processing activities, legal requirements or best practices.

Our contact details in Hong Kong are:

• Address: Unit 1003, 10/F, Tower 2, Silvercord, 30 Canton Road, Tsim Sha Tsui, Kowloon, Hong Kong
• Privacy contact for Hong Kong data protection matters and rights requests: email.dpo@keetainc.com

What does this Privacy Policy cover?

This Privacy Policy:

• sets out the types of personal data that we collect about you;
• explains how and why we collect and use your personal data;
• explains how long we keep your personal data for; and
• explains your rights in relation to your personal data and how to exercise these rights.

What personal data do we collect?

A. Personal Data You Provide to Us:

This refers to personal data you actively provide when you create an account, place an order, participate in a promotion, complete identity verification, or communicate with us.

• Identity and Contact Data: We collect data used to create your account, verify your identity, and contact you. This includes, but is not limited to, your full name, email address, phone number, and precise delivery address.
• Profile and Preferences Data: We collect data you provide to personalize your account and experience. This includes, but is not limited to, your username, password, saved preferences (e.g., language selection, notification preferences), your list of restaurants or items marked as favorites, as well as demographic details you choose to provide, such as optional gender information.
• Financial and Payment Data: We collect and/or receive the payment information necessary to complete your purchases. Depending on the payment method you choose, this may include payment method details, transaction identifiers, partial card information, billing information, and payment status. Where payment processing is carried out by our payment service providers, those providers may collect and process your payment card data directly in accordance with their own privacy notices and legal obligations.
• Communications and Feedback Data: We collect information you provide when communicating with us or other third-party service providers who act on our behalf through the Platform. This includes, but is not limited to, records of your communications with our customer support team, couriers, and merchants (via in-app chat, email, or phone recordings), your responses to surveys, and any reviews or feedback you submit regarding restaurants, couriers, or items.
• Sensitive Information for Security Verification: To protect your account and transaction security, under specific high-risk circumstances, we may require you to provide additional verification information. This may include your biometric information, such as a photo taken via your device's camera to perform facial verification. We only process such sensitive personal data when permitted or required by applicable law, or when we have obtained your specific and explicit consent, while always adopting reinforced security measures for such processing.

B. Personal Data We Collect Automatically:

This refers to personal data we automatically collect from your device when you interact with our Platform.

• Transaction Data: We retain records of the orders you place and your purchasing activities. This includes, but is not limited to, your order history, details of items purchased, order values, applied discounts or vouchers, payment methods and times, order status (e.g., pending, in preparation, out for delivery, completed), and any notes you provide for your order.
• Device and Technical Data: We automatically collect technical information about the device you use to access our Platform. This includes, but is not limited to, your IP address, unique device identifiers (e.g., Advertising IDs [IDFA/GAID], MAC address), device model, operating system and version, browser type, mobile network information, and time zone settings.
• Usage Data: We collect information about how you browse and use our Platform. This includes, but is not limited to, your search query history, pages or merchants you have viewed, your clickstream and navigation paths on the Platform, features you use, app crash logs, performance data, and the dates and times of your visits or interactions.
• Precise Location Data: We collect precise data about your geographic location, which is essential for confirming your address, assigning couriers, and tracking order delivery. This may include, with your authorization, real-time geographic location obtained via your device's GPS, Wi-Fi, or cellular network.

C. Personal Data We Receive from Third Parties:

We may receive data about you from other sources to supplement our records and support our operations.

• Third-Party Login Services: If you choose to register or log in using your account from another provider (e.g., Google, Apple, or Facebook), we will receive your account verification information and other necessary data required for login from that provider, in accordance with your privacy settings and authorization on that provider.
• Payment and Anti-Fraud Partners: We receive data from our partners to confirm transactions, verify identity, and prevent fraud. This may include transaction status confirmations, risk assessment data, or identity verification results from our payment service providers, identity verification services, and anti-fraud partners.
• Merchants and Couriers: In certain situations, our partners (restaurants and couriers) may provide us with information related to an order, such as reports regarding order issues, delivery confirmation, or safety incidents.
• Marketing and Analytics Partners: We receive data from partners to help us measure the effectiveness of our advertising and understand our user sources, such as data about how you found our Platform (e.g., which platform's ad you clicked).

How and why do we use your personal data?

We will use your personal data for the following purposes. Where personal data is not made available to us, we may not be able to provide you the products and services you have requested or otherwise carry out our activities in the context of our relationship with you.

• To manage your user account: To register your new account, verify your identity, enable you to log in, and manage your profile and preferences.
• To process your orders: To receive your submitted orders, confirm order details, and accurately transmit order information to our partner restaurants or merchants.
• To process payments, refunds, and assist transaction compliance: To securely process your order payments, manage refund requests, and assist with transaction-related compliance. This may include collecting necessary identity information and transmitting it as required to transaction parties (e.g., merchants or payment institutions) for them to process the transaction or fulfill their compliance obligations.
• To manage and fulfill delivery: To assign your delivery address and contact details to couriers, allow you (and merchants) to track order progress in real-time, and confirm delivery completion.
• To provide customer support: To respond to your inquiries, investigate and resolve your issues or complaints (e.g., order errors, missing items).
• To send essential service communications: To send you necessary non-marketing notifications, such as order confirmations, delivery status updates, service interruptions, or changes to our terms and policies.
• To prevent fraud and financial crime: To monitor and detect fraudulent transactions (e.g., credit card theft) during the payment process and to detect and block the abuse of vouchers or promotions.
• To ensure Platform security and integrity: To protect your account from unauthorized access, monitor and prevent malicious activity, and ensure the stability of our application (e.g., analyzing crash logs).
• For analytics and service improvement: To analyze aggregated, anonymized, or pseudonymized user behavior to understand trends, fix bugs, optimize the user interface (UI/UX), and develop new features and services.
• To personalize your Platform experience: To display personalized restaurant listings, item recommendations, or home page content based on your order history, browsing behavior, location, and inferred preferences.
• For marketing, advertising, and promotions: To send you general promotions, discounts, and newsletters or similar offers that we believe may be of interest to you, via email, SMS, WhatsApp, or push notifications, or other channels. We will only use your personal data for direct marketing purposes with your prior consent. You may at any time, free of charge, require us to stop using your personal data for direct marketing purposes by using the unsubscribe function in the relevant message or in our app, or by contacting us at email.dpo@keetainc.com.
• To perform high-risk security and identity verification: To actively trigger additional identity verification to protect your account security under specific high-risk circumstances (e.g., when we detect suspicious account activity or high-value transactions).
• To comply with legal and regulatory obligations: To fulfill our legal responsibilities, such as retaining financial records, or responding to valid legal requests from law enforcement, regulators, or courts.
• To establish, exercise, or defend legal claims: To manage, prepare, and defend our legal position in the event of a dispute (e.g., with you, merchants, or couriers).

How we use cookies and similar technologies

Cookies are small text files stored on your browser or device. Cookies allow us to recognize your preferences in order to tailor our pages and services to your specific needs. Some information is saved in these text files so that, when you visit our pages again, your browser or device is recognized and configured according to your previous preferences.

Cookies usually have an expiration date. Some cookies, for example, are automatically deleted when the browser is closed, while others may be stored on the device for a longer period until they are manually deleted.

We may use the following types of cookies under this Privacy Policy:

• Strictly necessary cookies, to ensure our pages or services function properly, such as authenticating logins. If you wish to continue accessing our Platform, it will not be possible to refuse these types of cookies;
• Analytics cookies, to improve the content of our Platform by providing information about how they are used and how often they are visited;
• Functionality cookies, to store information you previously provided, such as your language preferences, in order to enhance your browsing experience; and
• Marketing cookies, to allow us to display advertisements that are more relevant to your interests, avoid showing you the same ads repeatedly, and optimize the delivery of our promotional content.

If you wish to refuse the installation of these cookies on your device or opt to remove cookies, you can do so through your browser settings. For more information on how to configure cookie usage in your browser, please refer to the website of your browser's developer, such as:

• Firefox
• Google Chrome;
• Safari;
• Microsoft Edge.

It is important to clarify that we are not responsible for the use of cookies by third parties. Cookies placed by third parties may continue to track your online activities, so we recommend regularly managing the cookies installed in your browser.

Who do we share your personal data with?

We share your personal data with government authorities, law enforcement, and third-party service providers only when it is necessary to provide our services, operate our business, or comply with legal, contractual and regulatory obligations. When sharing is required, we ensure that the recipients process your personal data securely and only for the purposes described in this Privacy Policy, implements appropriate data protection measures, and we apply additional safeguards to preserve the confidentiality, integrity, and security of your Personal Data.

• Parties from whom you order goods/services: Our services may allow you to place orders for goods/services from third-party vendors (for example, independently operated restaurants). When you use our service for this purpose, we will share certain personal data with the relevant third-party service provider, which may include your name, address, telephone number, order reference, order details and other relevant information in the context of your order. We share this Personal Data to make sure your order is properly fulfilled and your interests are achieved because it may be necessary for the third party to contact you directly (for example, if there is a question over the order, if an element becomes unavailable, or for other important reasons such as public safety and health matters). We are not responsible for how such an independent party uses your information once received and you should review their privacy policy before proceeding.
• Couriers: To complete your delivery, we provide the courier responsible for delivery with the personal data necessary to perform their duties. This typically includes your name, precise delivery address, and contact phone number (which may be encrypted via our system).
• Payment service providers and anti-fraud partners: We share your personal data with third-party partners to securely process your payments, verify your identity, and prevent fraud. This may include sharing necessary payment, transaction, device, or identity information with payment processors, anti-fraud services, and identity verification providers to facilitate transactions and maintain the security of your account and our Platform.
• Technology and operational service providers: We rely on third-party service providers to help us operate our technical infrastructure and Platform services. These providers help us with tasks such as data hosting, customer support management, service communications, and Platform analytics and improvements, processing relevant data according to our instructions.
• Marketing and advertising partners: Where permitted by applicable law, we may share certain information (such as anonymized identifiers or aggregated data) with partners to help us with marketing, measuring advertising effectiveness, and conducting audience analysis.
• Promotion and rewards partners: If you choose to participate in a specific promotion offered by a third-party partner, we may share the necessary personal data (e.g., transaction data, user ID) with that partner to calculate or redeem your reward.
• Corporate affiliates: We may share data within our corporate group of companies to support centralized business operations, such as providing shared IT services, security support, internal reporting, and analytics. Access to data is limited to those who need it for these legitimate business purposes.
• Professional Advisors: We may share data with our professional advisors, including our lawyers, accountants, auditors, and insurers, when necessary (e.g., to handle legal disputes, conduct audits, or respond to security incidents).
• Legal, regulatory, and corporate transactions: We may disclose your personal data in the following specific circumstances:
  • To comply with legal obligations: When we have a good faith belief that we must do so to respond to a valid legal request (e.g., a court order, subpoena) or requirements from government or law enforcement agencies.
  • To protect rights and safety: When disclosure is necessary or permitted under applicable law to enforce our agreements, investigate potential violations, or protect the rights, property, or safety of our couriers, partners, or the public.
  • In a corporate transaction: In any proposed or actual merger, acquisition, asset sale, or business restructuring. Your personal data may be transferred to the proposed or actual acquiring party (and its advisors) as part of the transaction, under confidentiality agreements.

How your personal data is transferred internationally

The servers used to store the personal data described in the "What personal data do we collect" section may be located outside of Hong Kong, including in locations such as mainland China and Frankfurt.

As a global company, some entities with whom we share personal data, as detailed in the "Who do we share your personal data with" section (such as our corporate affiliates, third-party service providers, and partners), may also be located outside Hong Kong. These entities might require access to your personal data to provide their services or for the purposes outlined in this Privacy Policy, provided that such access is strictly limited and subject to robust security controls.

Where we transfer your personal data outside of Hong Kong, we will take steps to ensure that your personal data continues to receive an appropriate level of protection, including by implementing appropriate contractual or other safeguards with the recipients of your personal data.

Information relating to children and minors

We do not seek or knowingly collect any Personal Data about children under the legal age of consent in the applicable jurisdiction. If you learn that anyone younger than legal age of consent has unduly provided us with their Personal Data in relation to our services, please contact us and we will make commercially reasonable efforts to delete such Personal Data from our database.

How long will we keep your personal data?

We only keep your personal data for as long as is reasonably necessary for the purposes set out in this Privacy Policy and to fulfil our legal obligations. We will securely erase or anonymise your personal data as soon as the purpose for collecting it has expired. We will adopt different deletion rules according to different purposes and the concrete conditions of the processing. Upon expiration of the retention period, we will process your personal data pursuant to the requirements of applicable laws, including deleting or anonymizing your personal data.

Your rights in relation to our processing of your personal data :

We provide you with the ability to access, manage, and update some of your personal data directly within your account settings.

Depending on the applicable data protection laws in your jurisdiction, you may have specific rights regarding the Personal Data we collect from you. These rights may include:

• Access: The right to request access to the Personal Data we hold about you and to receive your Personal Data in a readable and clear format.
• Rectification: The right to request correction or updating of your inaccurate or incomplete Personal Data.
• Right to opt out of direct marketing: You have the right at any time to require us to stop using your personal data for direct marketing purposes. We will comply with any such request free of charge.

To exercise the rights above, you may log in to the Platform with your account and operate on your own, or you may raise your requests regarding these rights or other related matters by emailing us at email.dpo@keetainc.com.

You may also delete your relevant personal data through our Platform. Specifically, you can delete your account by navigating to [Account] → [Your Name] → [Delete Account], or by submitting a deletion request to the same email address (email.dpo@keetainc.com).

Upon receiving your request, we will verify your identity and process it in accordance with applicable laws and our internal procedures. Please note that certain information may need to be retained as required by law or for legitimate business purposes (such as fraud prevention, record-keeping, tax compliance, or dispute resolution).

Please note that these rights are not absolute and may be subject to certain conditions or limitations under applicable law.

If you wish to exercise any rights you may have under applicable law, please contact us first using the details provided in the "Contacting Us" section of this Privacy Policy. We will assess and respond to your request in accordance with the requirements of applicable law.

Contacting us

Our contact details are set out at the top of this Privacy Policy. Please do contact us if you would like to exercise one of your rights listed above or if you have any questions or complaints about this Privacy Policy or about how we handle your Personal Data. You also have the right to complain to the relevant supervisory authority. We would however always appreciate the opportunity to address your complaint first.

Changes to this Privacy Policy

From time to time, we may make changes to this Privacy Policy to ensure that it is accurate and up to date and to reflect any changes in the law, our processing activities, or our services. When we update the Privacy Policy, we will update the "Last Updated" date at the top of the new Privacy Policy or provide any other notice required by applicable law. We recommend that you review the Privacy Policy each time you visit the Platform to stay informed of our privacy practices.