Privacy Policy

The entity responsible for your personal data (the “Data Controller”) is:

• Hungrme Ltd, a company incorporated in the Republic of Mauritius (the “Company”, “we”, “us”, or “our”).
• Registered office: Curepipe, Mauritius.
• Contact email: [email protected]

For the purposes of the Mauritius Data Protection Act 2017 (“DPA 2017”), the Company acts as Data Controller of the personal data described in this Policy. You can reach our data protection contact at the email address above.

When you visit the Site, we collect only the minimum personal data necessary to operate, secure, and improve it. The categories are:

We do not collect precise geolocation, biometric data, health data, or any special category personal data through the Site.

Under the DPA 2017 we may only process your personal data where we have a lawful basis. The table below lists each purpose and its corresponding legal basis.

We do not sell your personal data. We may share it with the following categories of recipients, but only to the extent necessary for the purposes described above:

• Service providers and processors — third parties that provide services on our behalf (see Section 5).
• Professional advisors — lawyers, accountants, and auditors subject to confidentiality obligations.
• Legal authorities — where required by law, court order, or to protect our rights, property, or safety.
• Business transfers — in connection with a merger, acquisition, reorganisation, or sale of all or part of our business, subject to confidentiality safeguards.

We use the following third-party services that may process limited personal data on our behalf. Each provider operates under its own privacy policy and is bound to process data only to deliver the service we have engaged them for.

The Site uses cookies and similar technologies (collectively, “cookies”) to operate and improve. Cookies are small text files stored on your device. We use the following categories:

• Strictly necessary cookies — required for the Site to function (for example, remembering your language preference). These cannot be disabled if you wish to use the Site.
• Functional cookies — remember your settings, such as whether you prefer dark or light mode.
• Analytics and error-monitoring cookies — set by us and our providers (such as Sentry) to understand how the Site performs and to fix errors.

We do not use cookies for cross-site advertising, profiling for advertising, or third-party ad targeting. You can control or delete cookies through your browser settings; however, disabling strictly necessary cookies may prevent parts of the Site from working.

Some of our service providers (notably Sentry and Google Maps Platform) are located outside Mauritius, including in the United States. When we transfer your personal data outside Mauritius, we do so only to providers that offer appropriate safeguards. These may include:

• Standard Contractual Clauses approved by the relevant authority;
• The provider’s certified participation in a recognised framework; or
• Explicit consent from you to the transfer.

You may request a copy of the safeguards used for a specific transfer by contacting us at [email protected].

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, unless a longer period is required by law. In particular:

• Waitlist email addresses are retained until you unsubscribe or until the launch campaign concludes, whichever is later.
• Usage and technical data is generally aggregated or deleted within 13 months.
• Messages sent through our contact form, together with the name, email address and any other details you provide in them, are retained for up to 24 months so we can handle your enquiry and keep a record of how it was resolved.
• Security and error logs are retained for up to 24 months to investigate and prevent abuse.

Under the DPA 2017, you have the following rights regarding your personal data:

• Right of access — to be informed whether we process your data and to receive a copy of it.
• Right to rectification — to have inaccurate or incomplete data corrected.
• Right to erasure — to request deletion of your data in certain circumstances (also known as the “right to be forgotten”).
• Right to restriction of processing — to ask us to limit how we use your data.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to object — to object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent — at any time, where we rely on your consent.

To exercise any of these rights, use our contact form and choose “Data protection request” as the subject, or email us at [email protected] with the subject line “Data Protection Request”. We will respond within one (1) month. If you are not satisfied with our response, you have the right to lodge a complaint with the Data Protection Commissioner of Mauritius (dataprotection.govmu.org).

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include encryption in transit (TLS), access controls, regular security reviews, and incident-response procedures. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Data Protection Commissioner of Mauritius without undue delay in accordance with the DPA 2017, and we will inform affected individuals where the law requires us to do so.

The Site is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. If we make material changes that affect your rights, we will notify you by email (if we have your address) or by a prominent notice on the Site. Continued use of the Site after any change constitutes acceptance of the updated Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at [email protected] or by post at: Hungrme Ltd, Curepipe, Mauritius.