Privacy Policy
Drivepoints Inc. (“Drivepoints,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy describes how we collect, use, retain, and share personal information when you use or interact with the Drivepoints mobile application (the “App”), our public website, and our fleet management dashboard (collectively, the “Platform”), and explains the choices available to you.
1. What Drivepoints Does
The App is a navigation tool that suggests driving routes based on aggregated historical accident data from publicly available federal government databases. Specifically, the App analyzes the types of driving maneuvers, such as unprotected left turns at intersections, that federal crash records associate with higher accident rates, and suggests routes that minimize those maneuver types where alternatives exist. The App does not claim to guarantee safety on any route. Route suggestions are for informational purposes only. The Platform also includes our public website and fleet management dashboard, which provide information about Drivepoints and tools for authorized fleet users.
2. Information We Collect
Personal Account Information
When you create an account we collect your name, email address, and phone number. We manage login credentials securely through AWS Cognito.
Location Information
The App collects precise GPS-based location data during active navigation sessions. This data is collected only while the App is in use or running in the background during an active navigation session. We do not collect location data when navigation is inactive and you are not using the App.
Under California law, precise geolocation data is classified as sensitive personal information. We treat it accordingly throughout this Policy.
Navigation and Session Data
We collect route requests and the routes you select, GPS traces recorded during your navigation sessions, intersection-maneuver data describing the types of turns and movements associated with your selected routes, navigation session records including date, time, duration, and distance, and your interactions with the App’s routing features.
Device and Technical Information
We collect device type, operating system version, App or browser version, device and browser information, and diagnostic information used to maintain Platform performance, security, reliability, and to identify and fix errors.
Application Usage, Analytics, and Session-Replay Information
We collect information about how you interact with the Platform, including screens or pages viewed, navigation through the Platform, taps, clicks and similar interactions, feature usage, performance and diagnostic events, and information associated with errors or crashes. We use Vexo to assist with application analytics, error and crash monitoring, and session replay. For Vexo analytics, Drivepoints uses a randomly generated analytics identifier associated with the user profile and does not intentionally provide Vexo with the user’s name, email address, or authentication/user ID. Mobile session recordings are configured so displayed content is blurred, and sensitive input fields in the web application, such as password fields, are masked by default. Drivepoints seeks to limit or mask personal information that is not reasonably necessary for analytics or troubleshooting.
3. How We Use Your Information
We use the information described above to provide and operate the Platform; provide navigation and route-suggestion functionality; administer fleet-management functionality; analyze intersection-maneuver patterns and calculate route options; deliver navigation guidance; understand how users interact with the Platform; perform analytics and session replay; investigate errors and crashes; maintain and improve our routing algorithms, products, features, and user experience; maintain the security, reliability, and performance of the Platform; and respond to support requests and questions.
We do not use your information for advertising or behavioral marketing purposes. We do not sell your personal information.
4. How We Share Your Information
Service Providers
We use service providers to operate and support the Platform. Mapbox receives location coordinates, route origin and destination data, and search queries to render maps and calculate routes. AWS Cognito receives account identifiers and authentication credentials to manage secure login. Vexo processes application-usage, diagnostic, error/crash, and session-replay information to help Drivepoints understand Platform interactions, investigate technical issues, and improve the Platform. Drivepoints uses a randomly generated analytics identifier for Vexo and does not intentionally provide Vexo with the user’s name, email address, or authentication/user ID. We require service providers to process information only for authorized purposes and subject to appropriate contractual restrictions.
Legal Requirements
We may disclose information if required by applicable law, valid legal process, or governmental request, or to protect the rights, property, or safety of Drivepoints, our users, or the public. Where permitted by law, we will notify you before disclosing your information in response to a legal demand.
Business Transfers
If Drivepoints is involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such transfer and describe your options at that time.
With Your Consent
We may share your information with third parties for purposes not described in this Policy if we first obtain your separate, specific, affirmative consent. We will clearly describe the purpose, the recipient, and the data to be shared before asking for that consent.
5. Data Retention
We retain account information for as long as reasonably necessary to maintain the account and for up to twenty-four (24) months after account closure, subject to legal, security, dispute-resolution, and other permitted retention needs. During ordinary non-Pilot use, navigation session data and GPS traces may be retained for up to twenty-four (24) months from collection for routing, analytics, security, and product-improvement purposes. Analytics, diagnostic, error/crash, and session-replay information is retained for as long as reasonably necessary for the purposes described in this Policy and consistent with our service-provider arrangements. Aggregated or De-Identified Data that cannot reasonably be linked to an individual may be retained for longer periods, including indefinitely, as permitted by law. For participants in a Drivepoints Fleet Pilot Program, certain operational routing and navigation information may be retained after completion of the Pilot as Retained Operational Data for routing-algorithm development and validation, navigation improvements, analytics, artificial-intelligence and machine-learning development, Platform evaluation, benchmarking, research, security, and future product development, as described in the applicable Fleet Pilot Program Agreement and related Pilot documents. Drivepoints will apply the contractual privacy, confidentiality, security, purpose-limitation, and non-reidentification protections applicable to such retained information. Deletion requests remain subject to information Drivepoints is permitted or required to retain under applicable law or an applicable Pilot agreement.
6. Data Security
We use commercially reasonable security measures to protect your information. These include encryption of data in transit using HTTPS/TLS, secure authentication through AWS Cognito, and role-based access controls that limit employee access to personal data. No system is completely secure. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.
7. Your Privacy Choices and Rights
Location Services
You can disable location access for the App through your device settings at any time. Doing so will prevent the App from providing navigation guidance.
Account Deletion
You can request deletion of your account and associated personal information by contacting us at privacy@drivepoints.com. We will process verified deletion requests within forty-five (45) days, subject to exceptions permitted by applicable law and, for Fleet Pilot participants, any data-retention provisions in the applicable Pilot agreements and notices.
Website and Dashboard Cookie Preferences
On the public website and fleet management dashboard, Drivepoints may use cookies or similar technologies that are strictly necessary for authentication, security, session management, and operation of those services. We may also offer optional Functional technologies that remember settings and provide requested functionality, and optional Analytics technologies, including Vexo or similar services, that help measure usage, diagnose problems, understand interactions, and improve the Platform. Nonessential Analytics technologies will be activated based on the user’s affirmative preference where Drivepoints makes that control available. Users may reopen the preference center through the persistent “Cookie Preferences” link on the applicable website or dashboard and change their selections. Drivepoints does not currently use advertising or targeting cookies for cross-context behavioral advertising.
California Residents — CPRA Rights
If you are a California resident, you have the following rights under the California Privacy Rights Act (Cal. Civ. Code §1798.100 et seq.).
Right to Know. You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the business purposes, and the categories of third parties with whom we have shared your information.
Right of Access. You may request a copy of the personal information we hold about you.
Right of Deletion. You may request that we delete your personal information, subject to exceptions permitted by law.
Right of Correction. You may request that we correct inaccurate personal information we hold about you.
Right to Limit Use of Sensitive Personal Information. Because we collect precise GPS-based location data, which is sensitive personal information under Cal. Civ. Code § 1798.140(ae)(1)(G), you may direct us to limit our use of that data to what is strictly necessary to provide the navigation service you have requested. To exercise this right, contact us at privacy@drivepoints.com or use the Privacy Settings section of the App.
Right to Opt Out of Sale or Sharing for Advertising. We do not sell personal information and do not share it for cross-context behavioral advertising.
Right to Non-Discrimination. We will not discriminate against you for exercising any of your privacy rights. Cal. Civ. Code §1798.125.
To submit a rights request, contact us at privacy@drivepoints.com. We will respond to a verified consumer request within forty-five (45) days. If additional time is needed, we will notify you within that initial period. The total response period will not exceed ninety (90) days. We may ask you to verify your identity before processing your request.
8. Children’s Privacy
The Platform is intended only for users who are at least eighteen (18) years of age. We do not knowingly collect personal information from individuals under eighteen. If we learn that we have collected personal information from an individual under eighteen through the Platform, we will take reasonable steps to delete it, subject to applicable legal requirements. Parents or guardians who believe an individual under eighteen has used the Platform should contact us at privacy@drivepoints.com.
9. Geographic Scope
The Platform is designed principally for use within the United States, and the accident data underlying our route analysis covers United States roads. Core navigation functionality may be unavailable outside supported regions. If you access the Platform from outside the United States, your information may be transferred to, stored, and processed in the United States.
10. Changes to This Policy
We may update this Privacy Policy from time to time. For material changes, we will provide advance notice through the Platform or by email to the address associated with your account at least thirty (30) days before the change takes effect. The updated Policy will be posted at www.drivepoints.com/privacy-policy with a revised effective date. Continued use of the Platform after the effective date of a revised Policy constitutes acceptance of the changes to the extent permitted by law. If you do not agree, you should discontinue use of the Platform and may request account deletion as described in Section 7.
11. Contact Us
Questions, requests, or complaints about this Privacy Policy should be directed to:
Drivepoints Inc.
Email: privacy@drivepoints.com
California residents also have the right to submit a complaint to the California Privacy Protection Agency at https://cppa.ca.gov.
Effective: September 9, 2026
Kimo is CEO of DrivePoints and Bridger Insurance. He has spent his entire career in insurance and the capital markets. After graduating from Santa Clara University with a degree in economics he began his career as an underwriter at Chubb. He spent 12 years working on Wall Street including several years at Swiss Re Financial Products. Since 2010 Kimo has raised roughly $80 million and started or acquired 5 companies with an exited IRR of 37% over that timespan. Since launching Bridger in 2017 he has increased company revenue by over 400% and brought the company back to consistent profitability. Kimo enjoys spending time with his family and playing golf together, a good game of backgammon and watching his San Francisco Giants try to win another World Series.
This will close in 0 seconds
Adam is the Chief Operating officer of Pillar Life Insurance, a direct-to-consumer annuity provider. He served most recently as the President of Bridger Insurance Technology. Prior to this he was the Head of Enterprise Risk Services for Bloomberg. He has over three decades of risk management and technology experience including serving as Market, Counterparty, Country and Model Risk, and Risk Modelling for Wachovia and Wells Fargo. Before that Adam worked for Barclays Bank, PLC as the head of Market Risk in the Americas and head of Market Risk for Global Financing. Adam also served as the Global Head of Market Risk for Swiss Re Financial Products and spent several years in various management roles with BNP Paribas.
This will close in 0 seconds
Matt has led product management and pricing functions for auto insurance carriers for 15 years, managing more than $1B in profitable premiums and multiple product launches in his career. He led the Product and Actuarial functions at American Access Casualty Company, growing top line from $100m to $300m, setting the company up for acquisition by Kemper (KMPR). He will lead the development of the DrivePoints scoring algorithm, insurance pricing and rewards economics. Matt is based in the Boston area and has a BA in Economics from Harvard University.
This will close in 0 seconds
Sandra is a highly accomplished professional with a diverse background in various industries. She currently holds the position of Executive Vice President (EVP) at DrivePoints, where she is responsible for acquiring data for DrivePoints scoring. In addition, she works as a Tech Project Manager at Bridger Insurance. Prior to her current roles, Sandra worked as a Business Developer at Boston Analytics and as a Systems Analyst at Ernst and Young, where she was a key team member on projects such as JE CAAT and XBRL. She was instrumental in the success of the JE CAAT project, which led to additional support and funding. Notably, Sandra won a LPGA long drive competition while eight months pregnant, and her son is currently the second-ranked amateur golfer in the world and attends Stanford University.
This will close in 0 seconds