Keeta

Is Keeta safe to use?

Keeta is safe to use for ordering food in Hong Kong, the Gulf or Brazil, and we found no breach or fine against it. Two things hold it back. Brazil's consumer secretariat has an open sanction case against it over how fees are shown, and its tracking is broad. Apple's label says Keeta uses your contact details, device identifiers and usage data to track you, while its Google Play entry says nothing is shared with other companies. We score it 53/100, just below its main Saudi rival HungerStation (54) and Deliveroo (55).

Who is behind Keeta

Keeta is the international brand of Meituan, the Chinese delivery and local-services group. It started in Hong Kong in May 2023 and reached Saudi Arabia in September 2024, then Qatar, Kuwait and the United Arab Emirates in 2025. Caixin reported in September 2026 that the UAE is now its second-largest market in the region after Saudi Arabia.

Brazil has been harder. Keeta began operating there in October 2025, but it postponed its Rio de Janeiro launch after more restaurants than expected signed exclusive deals with rivals, Poder360 reported. Keeta has taken that fight to Brazil's competition authority: CADE minutes from July 2026 list an inquiry into rival 99Food in which Keeta is the complainant.

The app is published by Kangaroo Limited in Hong Kong. The Brazilian privacy policy names Keeta Technologies Pte. Ltd. as the controller; in Saudi Arabia it is Keeta Technologies Arabia Limited, with a Riyadh address.

What the app collects

Apple's label lists contact info, identifiers and usage data under Data Used to Track You. Linked to your identity are payment details, location, contact info, user content and identifiers. Google Play tells a milder story: it lists similar data as collected but says none is shared with other companies. Where the two disagree, we score the broader one.

The privacy policy fills in detail. Keeta collects advertising IDs and MAC addresses, your search history and clickstream, call recordings and chats with support, couriers and restaurants, and precise location. In Brazil you can add your CPF tax number. In "high-risk" cases, such as suspicious logins or large orders, Keeta may ask for a face photo for verification, which it treats as sensitive data.

On sharing, the Saudi version says ad partners get only "anonymized identifiers or aggregated data", and marketing messages need your explicit consent. Data can also go to Meituan group companies for IT, security and analytics. Servers sit in Frankfurt, Hong Kong and Saudi Arabia, and the Brazilian policy says Brazilian data is hosted in Frankfurt.

Security

We found no reported breach of Keeta, and Google Play says data is encrypted in transit. The Saudi policy says the phone number couriers receive "may be encrypted" by Keeta's system, but it does not promise that couriers never see your real number.

Keeta has no public bug bounty of its own that we could find. Meituan runs a security response centre for outside researchers, but its site did not let us confirm that Keeta's international apps are covered. Apps that pay researchers in public, such as Just Eat, score higher on security for that.

The record so far

Keeta has had about three years without a fine or order that we could find in any of its markets. Brazil is the exception to a quiet record. On 27 May 2026 Senacon, the federal consumer secretariat, opened sanction proceedings against Keeta and iFood under a rule that delivery apps must show how much of a price goes to the platform, the courier and the restaurant. Its technical team found signs that customers could be misled about the "delivery fee" and "service fee". Fines can reach R$14 million. Keeta said its receipts already show the split. Until Senacon decides, we treat the case as a pending proceeding, which puts regulatory record at 68.

Meituan's history in China is context, not part of Keeta's score. In 2021 China's market regulator fined Meituan about US$533 million for monopolistic practices, including pushing restaurants to sell only through its platform. That decision covers Meituan's Chinese business and does not name Keeta.

How to use Keeta more safely

1. On iPhone, tap "Ask App Not to Track", and allow location only while using the app.
2. Treat any call or message about a refund or "order problem" that asks for a code or card details as a scam. Use the in-app chat.
3. Only provide a face photo when the official app asks for it during a login or payment check, never through a link.
4. Decline marketing messages if you do not want them; in Saudi Arabia they need your consent.
5. Delete your account in the app (Account, your name, Delete Account) when you stop using it.

How we scored it

Regulatory record (68) is Keeta's strongest factor: no fines in three years, but a pending Senacon case in Brazil. Privacy (40) is the weakest, because Apple's label lists contact details and identifiers as used to track you and Google Play's "no sharing" claim does not match. Security (55) reflects no known breach but no public bug bounty for Keeta.