Is talabat safe?
talabat
talabat works for ordering food and groceries in the Gulf, but it is not a private app and its record with consumer regulators is weak. Apple's label lists your location and contact details as used to track you, its privacy policy is undated and out of date, and Qatar suspended it for a week in 2025.
#51of 74 in Travel, rides and delivery
Medium confidence- App publisher
- Talabat General Trading and Contracting Company (Kuwait); talabat is part of Delivery Hero SE
- App Store label
- Location, contact info and identifiers used to track you
- Qatar action
- One-week closure and QAR 1.14 million in fines for misleading consumers (September 2025)
- Kuwait
- Delivery fees capped at KD 1 from September 2026; talabat won a first-instance ruling against the penalty rules
- Bug bounty
- None found; Delivery Hero runs a vulnerability report form
- Account deletion
- In the app, unless you have unpaid orders
- Age rating
- 4+ (App Store UAE)
How the score breaks down
The overall score is the weighted average of these factors. Scoring rules
Privacy30% of score
40 out of 100, WeakApple's label lists location, contact info and identifiers as used to track you. Google Play says email, phone number and device IDs are shared, mainly for fraud checks, which understates the label. The policy says ad partners collect only anonymous data, which the label contradicts.
Security30% of score
58 out of 100, FairWe found no confirmed breach of talabat customer data. Google Play says data is encrypted in transit. talabat has no bug bounty or security.txt we could find; Delivery Hero takes vulnerability reports through a form on its own site and pays no published rewards.
Transparency and control15% of score
52 out of 100, WeakYou can delete your account in the app under Account Info, unless orders or payments are pending. But the privacy policy has no date, names no company as controller, still mentions Netscape Navigator, sets no retention periods and can change at any time.
Scams and harmful content15% of score
56 out of 100, FairThere is little user content and the app is rated 4+. Qatar's commerce ministry found in 2025 that talabat showed false or misleading product information and took payments it should not have. Phishing about orders and refunds is the main scam risk.
Regulatory record10% of score
57 out of 100, FairQatar's Ministry of Commerce and Industry closed talabat for a week in September 2025 under the consumer protection law; it reopened after paying QAR 1.14 million in fines. talabat's suit against Kuwait's delivery rules and Delivery Hero's 2025 EU cartel fine, which does not name talabat, are context.
Is talabat safe to use?
talabat is safe enough for ordering a meal or groceries, but it is not private, and its record with consumer regulators is weak. We found no breach of talabat customer data. Apple's privacy label, though, lists your location, contact details and device identifiers as data used to track you across other companies' apps. In September 2025 Qatar closed talabat for a week for misleading customers. We score it 51/100, below its sister app foodpanda (56) and above Glovo (46).
Who runs talabat
talabat started in Kuwait in 2004 and now operates across the Gulf and in Jordan, Egypt and Iraq. The app is published by Talabat General Trading and Contracting Company, and the business sits under Talabat Holding PLC, part of Berlin's Delivery Hero SE. On 16 July 2026 Uber offered €41.50 a share in cash for Delivery Hero, an equity value it put at US$14.8 billion, and Delivery Hero's boards backed the offer. talabat's eight markets are among those Uber would control. The deal still needs merger and financial clearances, so the owner may change again.
The Qatar closure
On 10 September 2025 Qatar's Ministry of Commerce and Industry issued Administrative Decision No. 29/2025, closing Talabat Services Company for a week. The ministry said talabat had broken Articles 7 and 11 of the 2008 consumer protection law by showing false or misleading product information, deceiving consumers, collecting unjustified payments and failing to guarantee its services. The decision followed a run of consumer complaints.
talabat reopened after the ministry accepted its fixes. It set up a permanent call centre for complaints, resolved every case filed with the ministry and paid fines of QAR 1.14 million, about US$313,000, the Qatar Tribune reported. A national suspension is a serious step for a regulator, and here customers were the harmed party, so it counts in full.
Kuwait is a different story. Its Ministerial Decision 109/2026, in force from 1 September 2026, caps delivery fees for online orders at KD 1, limits restaurant commissions to between 10% and 17% and bans extra "operational" or "processing" fees. talabat sued. In September 2026 Kuwait's Administrative Court struck down only Article 15, the scale of penalties for platforms, and rejected talabat's other requests, Kuwait Times reported. The fee cap still applies. This is talabat challenging a rule, not an order against it, so it does not lower the score. We found no fine on talabat in Kuwait or the UAE.
What the app tracks
Apple's label puts location, contact info and identifiers under "Data Used to Track You", and links the same data to you. Google Play's data safety section tells a milder story: it says email addresses, phone numbers and device IDs are shared, mainly for fraud prevention, and that "other info" may be collected for advertising. Where a label and a store listing differ, we score the broader one.
The privacy policy does not help much. The version on talabat's UAE site has no date and names no company as the one responsible for your data. It still refers to Netscape Navigator and Internet Explorer. It says advertising companies collect only information that is "completely anonymous", which does not fit Apple's label. It does say talabat will not sell or rent your personal information for other companies' marketing without your explicit consent, but it may combine your data with information from other companies for ads.
Security
We found no confirmed breach of talabat customer accounts. Google Play says data is encrypted in transit, and the policy says most critical data is stored encrypted. What is missing is a channel for outside researchers. talabat has no security.txt file or HackerOne programme we could find. Delivery Hero's own security page offers a vulnerability report form and mentions work with HackerOne, but lists no rewards. Apps that pay researchers, such as Zomato, score higher on security for that reason.
How to use talabat more safely
- On iPhone, tap "Ask App Not to Track", and allow location only while you use the app.
- Check the final price and fees before you pay, especially for promotions and "free delivery" offers.
- If you are charged wrongly in Qatar, the Ministry of Commerce and Industry takes consumer complaints; talabat now also runs a complaints call centre there.
- Never give a one-time code or card details to anyone who calls about an order. Use the in-app help.
- Delete your account in the app when you stop using it; settle any pending orders first.
How we scored it
Security (58) is talabat's strongest factor: no known breach, held back by the lack of a public bug bounty. Privacy (40) is the weakest, because Apple's label lists location and contact details as used to track you and the policy is too old to explain it. Regulatory record (57) reflects Qatar's one-week closure and fine for misleading customers. Delivery Hero's €329 million EU cartel fine in 2025 does not name talabat, so it is background only.
Questions people ask
Why was talabat suspended in Qatar?
On 10 September 2025 Qatar's Ministry of Commerce and Industry ordered a one-week closure of Talabat Services Company under Articles 7 and 11 of the 2008 consumer protection law. It said talabat had shown false or misleading product information, deceived consumers, collected unjustified payments and failed to guarantee its services. talabat reopened after setting up a complaints call centre, settling the cases sent to the ministry and paying QAR 1.14 million in fines.
Who owns talabat?
talabat was founded in Kuwait in 2004 and is now run by Talabat Holding PLC, which is part of the German delivery group Delivery Hero SE. The app is published by Talabat General Trading and Contracting Company. Delivery Hero also owns foodpanda and Glovo.
How do I delete my talabat account?
talabat's privacy policy says you can delete the account in the mobile app from the Account Info section of your profile settings. You cannot do it while an order or payment is still outstanding. talabat may keep some data for legal reasons and fraud prevention.
Has talabat had a data breach?
We found no confirmed breach of talabat customer data. The bigger privacy issue is tracking, since Apple's label lists your location and contact details among data used to track you across other companies' apps.
Are talabat delivery fees capped in Kuwait?
Yes. Kuwait's Ministerial Decision 109/2026, in force from 1 September 2026, caps delivery fees for online orders at KD 1 and bans extra operational or processing fees. talabat challenged it, and in September 2026 a first-instance court struck down only the article setting penalties for platforms; the rest of the rules stand and the ministry can appeal.
Sources
- 1.talabat App Store listing and App Privacy label (opens in a new tab) · Apple App Store, 2026
- 2.talabat data safety section (opens in a new tab) · Google Play, 2026
- 3.talabat UAE privacy policy (opens in a new tab) · talabat, 2026
- 4.MoCI authorises reopening of Talabat following corrective measures (opens in a new tab) · Qatar Tribune, 2025
- 5.Talabat slapped with one-week closure in Qatar over misleading information (opens in a new tab) · Gulf News, 2025
- 6.Talabat reopens after paying QAR1.14 million fine, implements consumer protection measures (opens in a new tab) · Marhaba, 2025
- 7.Court strikes down delivery penalties, raising fears of weak enforcement (opens in a new tab) · Kuwait Times, 2026
- 8.Uber Announces Acquisition Offer for Delivery Hero (Form 8-K, Exhibit 99.1) (opens in a new tab) · Uber Technologies via SEC EDGAR, 2026
- 9.Uber to buy Talabat owner Delivery Hero in $14.8 billion deal (opens in a new tab) · Gulf News, 2026
- 10.Delivery Hero security and vulnerability reporting (archived 18 July 2026) (opens in a new tab) · Delivery Hero SE, 2026
- 11.Commission fines Delivery Hero and Glovo €329 million for participation in online food delivery cartel (opens in a new tab) · European Commission, 2025