Privacy Policy

MalaboEats (“we”, “us”, “our”) operates digital services for food delivery, mobility, and payments in Malabo and Bioko, including the MalaboEats mobile application and related websites (together, the “Services”). We respect your privacy and are committed to explaining how we handle personal information in a clear and transparent way.

By using the Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please discontinue use of the Services.

The organization responsible for processing personal data in connection with the Services is the MalaboEats operating entity behind the platform. For privacy inquiries, use the contact details in the Contact section below.

• Account and profile: name, email address, phone number, password (stored in hashed form), language preferences, profile photo if you upload one, and optional identifiers such as your Bioko Tag where applicable.
• Orders and logistics: delivery addresses, order history, special instructions, and communications necessary to fulfill your requests (including assignment to restaurants and, where relevant, riders).
• Payments and wallet: transaction records, wallet balance changes, payment method metadata (for example last digits where stored), and fraud-prevention signals required to operate payments securely.
• Device and usage: app version, device type, approximate location when you grant location permission (for example to show nearby restaurants and delivery estimates), and diagnostic logs needed to maintain reliability and security.
• Support: information you send when you contact us (for example via email, chat, or in-app support), including message content and related metadata.

• To create and manage your account and authenticate you.
• To process and deliver orders, coordinate restaurants and riders, and send status updates.
• To operate wallet features, process top-ups, transfers, and refunds where applicable.
• To improve the Services, analyze aggregate usage, and troubleshoot issues.
• To comply with legal obligations and respond to lawful requests.
• To secure the platform, detect abuse, and protect users and partners.
• To send service-related notifications; where required, we will ask for consent for marketing communications.

We may share personal information only as needed to operate the Services:

• Restaurants and fulfillment partners receive information required to prepare and deliver your order (for example name, address, items, and contact details where necessary).
• Service providers who host, analyze, or support our infrastructure, payments, communications, or customer support, under contracts that require appropriate safeguards.
• Legal and safety: when required by law, court order, or to protect rights, safety, and security of users, us, or the public.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to appropriate notice and commitments.

We do not sell your personal information.

We retain personal information only as long as necessary for the purposes described above, including to meet legal, tax, and accounting requirements (for example retaining certain transaction and order records). When retention is no longer required, we delete or anonymize data consistent with our obligations and technical constraints.

We implement appropriate technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. No method of transmission over the Internet is completely secure; we encourage you to use strong passwords and protect your device.

Depending on applicable law, you may have the right to:

• Access or receive a copy of your personal information.
• Correct inaccurate data.
• Request deletion or restriction of processing, subject to legal exceptions.
• Object to certain processing or withdraw consent where processing is consent-based.
• Lodge a complaint with a supervisory authority where available.

Account deletion: where supported in the mobile app, signed-in users can initiate account deletion from their profile. Some records (for example anonymized transaction or order history retained for legal or accounting reasons) may continue to exist without identifying you. If you need help, contact us using the details below.

The Services are not directed at children under the age required to enter into a contract in your jurisdiction. We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us and we will take appropriate steps.

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. Continued use of the Services after changes constitutes acceptance of the updated policy where permitted by law.

For privacy-related questions or requests, including data subject rights, contact us at:

privacy@malaboeats.com

Please include your account email and a clear description of your request so we can assist you efficiently.