The smartest thing you'll plug into your car.

Privacy policy

Last Updated: June 8, 2025

Our Privacy Commitment

At Digital Infrastructure Inc. ("Digital Infrastructure Inc.," "we," "us"), privacy is fundamental to our mission. We will never sell your personal data. You control your data—we only share it when you explicitly consent through our platform. This Privacy Policy explains how we collect, use, protect, and respect your information.

1. Scope and Consent

This Privacy Policy applies when you:

  • Use our mobile applications or any of our applications

  • Visit our websites (https://dimo.co and related domains)

  • Purchase or use our hardware devices

  • Interact with our services, support, or marketing

By using our services, you acknowledge you've read this policy. Where required by law, we'll obtain your explicit consent for specific data processing activities.

1.1 Blockchain Transparency Notice

Certain non-personal information is stored on public blockchain:

  • Your wallet address

  • Vehicle make, model, and year

  • Rewards earned

  • Apps you've authorized to access your data

Important: We NEVER put personally identifiable information (name, email, location, VIN, etc.) on the blockchain. Only anonymized vehicle metadata and transaction data are public.

2. Information We Collect

2.1 Information You Provide

Account Information

  • Name and email address

  • Digital wallet address

  • Phone number (optional)

  • Profile preferences

Vehicle Information (only if you choose to share)

  • Vehicle Identification Number (VIN)

  • Make, model, year

  • Registration documents (photos)

  • Insurance information

Payment Information

  • Processed securely through Stripe

  • We don't store full payment card details

2.2 Information From Your Vehicle (With Your Consent)

You control what vehicle data we collect. By default, all data sharing is OFF. You can enable specific data types in Settings:

Location Data

  • GPS coordinates and trip history

Vehicle Telemetry

  • Speed, acceleration, braking

  • Battery/fuel status

  • Mileage and odometer

  • Engine diagnostics

  • Door/window status

  • Seatbelt usage

  • Tire pressure

  • Charging data (for EVs)

Driving Behavior

  • Acceleration patterns

  • Braking patterns

  • Turn signal usage

2.3 Information We Collect Automatically

Device Information

  • Device type and OS version

  • App version

  • IP address

  • Unique device identifiers

Usage Information

  • Features used

  • Pages visited

  • Click patterns

  • Session duration

Cookies and Tracking

  • Essential cookies for functionality

  • Analytics cookies (with consent)

  • See our Cookie Policy for details

2.4 Information From Third Parties

  • Login information from OAuth providers (Google, Apple)

  • Vehicle data from manufacturer APIs (with your consent)

  • Analytics from service providers

3. How We Use Your Information

3.1 Primary Uses (To Provide Our Services)

  • Create and manage your account

  • Connect and monitor your vehicles

  • Process transactions and payments

  • Provide customer support

  • Send service notifications

3.2 With Your Consent

  • Share vehicle data with third parties you authorize

  • Send marketing communications

  • Personalize your experience

  • Participate in rewards programs

3.3 Legitimate Interests

  • Improve our products and services

  • Detect and prevent fraud

  • Ensure platform security

  • Conduct anonymized research

  • Comply with legal obligations

3.4 Anonymized and Aggregated Data

We may use and commercialize aggregated, anonymized data that cannot identify any individual for:

  • Industry research and reports

  • Market insights and analytics

  • Product development

  • Statistical analysis

  • Commercial partnerships

This anonymized data may include insights about driving patterns, vehicle usage trends, and aggregate statistics. Individual users cannot be identified from this data.

4. How We Share Your Information

4.1 Our Core Privacy Promise

We NEVER sell your personal data without your explicit consent. We're different from companies that sell your data behind your back. With Digital Infrastructure Inc.:

  • You decide who can access your data

  • You must explicitly authorize each third-party connection

  • Third parties may pay us to access our platform, but only YOU decide if they can see your data

  • You can revoke access anytime

  • We NEVER share your personal data without your permission

We may sell aggregated, anonymized insights that cannot identify you or any individual user.

4.2 User-Controlled Sharing

You control access to your data. When you connect to third-party apps:

  • You must explicitly authorize each connection

  • You see what data they'll access before approving

  • Third parties pay for platform access, but only see your data if YOU approve

  • You can view all connected apps in Settings

  • You can revoke access anytime

  • Your consent records are stored on the blockchain for transparency

Examples of third parties you might authorize:

  • Insurance companies (for usage-based rates)

  • Vehicle service providers (for maintenance)

  • Energy companies (for EV charging)

  • Other apps and services you choose

Important: When you share data with third parties, their privacy policies apply. We don't control how they use your data once you've authorized them.

4.3 Service Providers

We work with trusted providers who process data on our behalf:

Infrastructure & Security

  • Amazon Web Services (hosting)

  • Cloudflare (security/CDN)

  • Turnkey (wallet infrastructure)

Business Operations

  • Stripe (payments)

  • Shopify (e-commerce)

  • Customer.io (communications)

  • Google Workspace (productivity)

Analytics & Monitoring

  • Elastic (search/analytics)

  • ClickHouse (analytics database)

  • Sentry (error monitoring)

  • Fivetran (data pipelines)

Vehicle & Mapping

  • Mapbox (mapping services)

  • Vincario (VIN decoding)

  • Drivly (vehicle data)

  • Smartcar/Tesla APIs (vehicle connections)

AI Services

  • OpenAI (AI features)

  • Anthropic (AI features)

These providers are contractually required to protect your data and use it only for the services we've hired them to provide.

4.4 Legal Requirements

We may disclose information to:

  • Comply with legal obligations

  • Respond to valid legal requests

  • Protect rights, safety, and property

  • Investigate fraud or security issues

4.5 Business Transfers

If DIMO is involved in a merger, acquisition, or sale, your information may be transferred. We'll notify you before any transfer that results in a material change to privacy practices.

5. Your Privacy Rights

5.1 Universal Rights

Regardless of location, you can:

  • Access your personal data

  • Correct inaccurate information

  • Delete your account and data

  • Export your data in a portable format

  • Restrict certain processing

  • Withdraw consent at any time

5.2 How to Exercise Rights

We'll respond within 30 days (or faster if required by law).

5.3 Account Deletion

  • Delete via app: Immediate

  • Delete via email: Within 30 days

  • We retain anonymized, aggregated data for research

  • Some data may be retained as legally required

6. Data Security and Storage

6.1 Security Measures

  • End-to-end encryption for sensitive data

  • TLS 1.2+ for data in transit

  • Encryption at rest for stored data

  • Regular security audits

  • Access controls and monitoring

7.2 Data Location

  • Primary storage: United States

  • All data encrypted regardless of location

  • Cross-border transfers protected by appropriate safeguards

  • Blockchain data: Stored on decentralized public networks (non-personal data only)

6.3 Data Retention

  • Active account data: Retained while account is active

  • Inactive accounts: Deleted after 36 months

  • Post-deletion: Immediate removal of identifiable data

  • Aggregated data: Retained indefinitely

7. Children's Privacy

7.1 Age Requirements

Our services are not directed to children. Minimum age by region:

Region

Minimum Age

United States

13

European Union

16*

United Kingdom

13

Canada

13

Australia

13

South Korea

14

Japan

13

Mexico

13

UAE

21

All Others

16

*Or lower if permitted by member state law

7.2 Parental Consent

Users under 18 (or local age of majority) need parental consent. We may request verification.

8. International Data Transfers

8.1 Transfer Mechanisms

We transfer data internationally using:

  • Standard Contractual Clauses (EU/UK)

  • Appropriate technical safeguards

  • Encryption for all transfers

8.2 Your Rights

Regardless of where your data is processed, you retain all rights under your local privacy laws.

9. Region-Specific Rights

9.1 European Union & UK (GDPR)

Legal Bases: Contract performance, legitimate interests, consent, legal obligations

Additional Rights:

  • Object to processing

  • Lodge complaints with supervisory authorities

  • Automated decision-making protections


Representatives:

9.2 California (CCPA/CPRA)

Your Rights:

  • Know what personal information we collect

  • Delete your personal information

  • Opt-out of "sales" (we don't sell data)

  • Non-discrimination for exercising rights


Categories We Collect: Identifiers, vehicle data, commercial information, internet activity, geolocation, inferences


"Sales" Under California Law: California law broadly defines "sale" to include sharing data for valuable consideration. When you authorize third-party apps that pay for platform access, this may technically be a "sale" under California law. However:

  • This ONLY happens with your explicit consent

  • You control which apps can access your data

  • You can revoke access anytime

  • We NEVER sell your data without your knowledge or permission


Your Right to Opt-Out: While we only share data with your explicit consent, you can opt-out of all third-party sharing in Settings.


Do Not Track: We currently do not respond to ‘Do Not Track’ (DNT) browser signals due to lack of an industry-wide standard.

9.3 Canada (PIPEDA)

  • Consent requirements apply

  • Access to personal information

  • Challenge compliance

9.4 Brazil (LGPD)

  • Data portability rights

  • Right to correction and deletion

  • Consent withdrawal

  • We are in the process of appointing a local LGPD representative. Until then, contact privacy@dimo.co for Brazil-related inquiries.

9.5 Turkey

Representative: Prighter Group Additional rights under KVKK: Similar to GDPR

9.6 Asia-Pacific

Japan (APPI): Opt-out rights for third-party provision South Korea (PIPA): Consent and notification requirements Australia (Privacy Act): APP compliance

9.7 Middle East

UAE: Compliance with federal and emirate-level requirements Consent: Explicit consent for data processing

10. Changes to This Policy

We may update this policy to reflect:

  • New features or services

  • Legal requirements

  • Business practices

Notification:

  • Material changes: Email and app notification

  • Minor changes: Updated date at top

  • Your continued use after changes indicates acceptance

11. Contact Us

11.1 Data Controller

Digital Infrastructure Inc.
8 The Green, Suite B
Dover, Delaware 19901-3618
United States

11.2 Contact Methods

11.3 Regional Representatives

EU/UK/Switzerland/Turkey:
Prighter Group
Visit: prighter.com/q/12486691153

Other Regions: Contact us directly or representatives will be listed here as appointed.

11.4 Supervisory Authorities

You have the right to lodge complaints with your local data protection authority:

 

 

Thank you for trusting us with your data. Your privacy is our priority.