Wolt

Is Wolt safe to use?

Yes, for most people Wolt is one of the safer ways to order food. We found no breach of its own systems, it pays security researchers to report bugs, and its Apple privacy label is short. The catch is advertising: Wolt's Google Play listing says your email, purchase history and device IDs may be shared for marketing, and regulators in three countries have acted on how it sells to customers and treats restaurants. We score it 60/100, a little above Bolt (59) and well above its owner's own app, DoorDash (42).

Who runs Wolt

DoorDash completed its purchase of the Helsinki company on 31 May 2022, according to DoorDash's filings. The app is still published by Wolt Oy, and Wolt keeps its own brand, its own Wolt+ subscription and its own privacy statement. That statement says Wolt stores data mainly inside the European Economic Area, but DoorDash, Inc. in San Francisco also processes it, and data may be sent outside the EEA under standard contracts.

Wolt is now one of three delivery brands in the DoorDash group, alongside Deliveroo. When DoorDash disclosed a breach in November 2025, after an employee fell for a social engineering scam, it said Wolt and Deliveroo customers were not affected. In August 2022, when a phished vendor let attackers into DoorDash's internal tools, it also said Wolt users were unaffected.

What the app collects

The Apple label is unusually short for a delivery app. Only a user ID is listed under "Data Used to Track You". Purchases, search history and device IDs are linked to you for analytics and personalisation, and precise location, payment info and contact details are collected to run the service.

Google Play tells a fuller story. Its data safety section says email, user IDs, purchase history and device IDs may be shared with other companies for advertising or marketing. Where the two listings disagree, we score the broader one. The privacy statement adds that Wolt uses pseudonymous identifiers to "track and predict" how you use the app, and uses third-party tools to report sales that come from its ad partners.

One detail is worth knowing. If you buy pharmacy products, Wolt processes the order contents and, for prescription medicine, the prescription data, and it asks for separate consent where the law requires it.

Security record

We could not find a reported breach of Wolt's own customer data. Wolt runs a public bug bounty on HackerOne that pays researchers for valid reports, and its security.txt file points there. Google Play says data is encrypted in transit and that you can ask for it to be deleted.

The main risk is the one every delivery app shares: fake "support" messages that use a real order to make you hand over a login code or card details. Wolt has no special protection against this, so the habit that matters is to check any problem inside the app.

Fines and orders

Wolt's record is mostly about how it sells, not about data.

• Hungary, September 2025. The National Authority for Trade and Consumer Protection fined Wolt's local companies HUF 200 million. It found Wolt had delivered alcohol and energy drinks to minors, broken rules on showing discounted prices and given out-of-date complaint contacts.
• Georgia, March 2025. The Georgian Competition and Consumer Agency found that Wolt+ was sold as "0 GEL delivery" without making clear that a service fee still applied. It ordered Wolt to disclose all costs before people subscribe and to compensate affected customers within a month.
• Denmark, August 2026. The Competition Council found that Wolt, with a share of the Danish market that grew to 70–80% by 2024, abused its dominant position through price parity clauses and unfair terms in restaurant contracts. The council is taking the case to court to have Wolt fined, and Wolt is challenging the decision in court. Wolt says it dropped the clauses in December 2025.

Because the Danish case is about Wolt's dealings with restaurants and is not yet final, it weighs less in our score than the two consumer cases. Wolt's disputes over whether its couriers are employees concern its workers, not its app users, so we leave them out of the score.

How to use Wolt more safely

1. Turn on "Limit Tracking" in the app's settings, and on iPhone tap "Ask App Not to Track".
2. Withdraw consent to marketing if you do not want order-based offers; the privacy statement says Wolt offers an opt-out.
3. Check the full price, including the service fee, before you subscribe to Wolt+.
4. If you order medicine, remember the order contents are health data. You can ask Wolt support to delete data it has no legal reason to keep.
5. Never give a login code or card number to anyone who contacts you about an order. Open the app yourself instead.

How we scored it

Security (68) is Wolt's strongest factor: no breach we could find and a paid bug bounty. Privacy (50) is the weakest, because Google Play lists purchase history and email as shared for advertising even though Apple's label looks minimal. Regulatory record (66) reflects the Hungarian fine and Georgian order, with the Danish competition decision at half weight. For Wolt's sister brand in the UK and Europe, see Deliveroo.