These Drivepoints Inc. (“Drivepoints,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy describes how we collect, use, retain, and share your personal information when you use the Drivepoints mobile application (the “App”), and explains the choices you have.

1.  What Drivepoints Does

The App is a navigation tool that suggests driving routes based on aggregated historical accident data from publicly available federal government databases. Specifically, the App analyzes the types of driving maneuvers, such as unprotected left turns at intersections, that federal crash records associate with higher accident rates, and suggests routes that minimize those maneuver types where alternatives exist. The App does not claim to guarantee safety on any route. Route suggestions are for informational purposes only.

2.  Information We Collect

Personal Account Information

When you create an account we collect your name, email address, and phone number. We manage login credentials securely through AWS Cognito.

Location Information

The App collects precise GPS-based location data during active navigation sessions. This data is collected only while the App is in use or running in the background during an active navigation session. We do not collect location data when navigation is inactive and you are not using the App.

Under California law, precise geolocation data is classified as sensitive personal information. We treat it accordingly throughout this Policy.

Navigation and Session Data

We collect route requests and the routes you select, GPS traces recorded during your navigation sessions, intersection-maneuver data describing the types of turns and movements associated with your selected routes, navigation session records including date, time, duration, and distance, and your interactions with the App’s routing features.

Device and Technical Information

We collect your device type and operating system version, the App version you are running, and diagnostic information we need to maintain App performance and fix errors.

3.  Navigation Disclaimer — Read Carefully

How We Use Your Information

We use the information described above to provide navigation and route-suggestion functionality, to analyze intersection-maneuver patterns and calculate route options, to deliver real-time navigation guidance, to maintain and improve the accuracy of the App’s algorithms, to maintain the security and reliability of the App, and to respond to your support requests and questions.

We do not use your information for advertising or behavioral marketing purposes. We do not sell your personal information.

4.  How We Share Your Information

Service Providers

We share personal information with two service providers. Mapbox receives location coordinates, route origin and destination data, and search queries in order to render maps and calculate routes. AWS Cognito receives account identifiers and authentication credentials to manage secure login. Each provider is contractually prohibited from using your information for any purpose beyond the specific service they provide to us.

Legal Requirements

We may disclose information if required by applicable law, valid legal process, or governmental request, or to protect the rights, property, or safety of Drivepoints, our users, or the public. Where permitted by law, we will notify you before disclosing your information in response to a legal demand.

Business Transfers

If Drivepoints is involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such transfer and describe your options at that time.

With Your Consent

We may share your information with third parties for purposes not described in this Policy if we first obtain your separate, specific, affirmative consent. We will clearly describe the purpose, the recipient, and the data to be shared before asking for that consent.

5.  Data Retention

We retain your account information for as long as your account is active and for up to twenty-four (24) months after account closure, to comply with legal obligations and resolve disputes. Navigation session data and GPS traces are retained for up to twenty-four (24) months from the date of collection for the purpose of improving our routing algorithms. Anonymized or aggregated data that cannot reasonably be linked to you may be retained indefinitely. When you request deletion of your account and data, we will act on that request within forty-five (45) days, subject to any exceptions required by law.

6.  Data Security

We use commercially reasonable security measures to protect your information. These include encryption of data in transit using HTTPS/TLS, secure authentication through AWS Cognito, and role-based access controls that limit employee access to personal data. No system is completely secure. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

7.  Your Privacy Choices and Rights

Location Services

You can disable location access for the App through your device settings at any time. Doing so will prevent the App from providing navigation guidance.

Account Deletion

You can request deletion of your account and associated personal information by contacting us at privacy@drivepoints.com. We will process verified deletion requests within forty-five (45) days.

California Residents — CPRA Rights

If you are a California resident, you have the following rights under the California Privacy Rights Act (Cal. Civ. Code §1798.100 et seq.).

To submit a rights request, contact us at privacy@drivepoints.com. We will respond to a verified consumer request within forty-five (45) days. If additional time is needed, we will notify you within that initial period. The total response period will not exceed ninety (90) days. We may ask you to verify your identity before processing your request.

8.  Children’s Privacy

The App is intended for users sixteen (16) years of age and older. We do not knowingly collect personal information from users under sixteen. If we learn that we have collected information from a user under sixteen, we will delete it promptly. Parents or guardians who believe a child under sixteen has used the App should contact us at privacy@drivepoints.com.

9.  Geographic Scope

The App is designed for use within the United States. The accident data underlying our route analysis covers United States roads. Core functionality may be unavailable outside supported regions. If you access the App from outside the United States, your information may be transferred to, stored, and processed in the United States.

10.  Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will provide advance notice through the App or by email to the address associated with your account at least thirty (30) days before the change takes effect. The updated Policy will be posted at www.drivepoints.com/privacy-policy with a revised effective date. Continued use of the App after the effective date of a revised Policy constitutes your acceptance of the changes. If you do not agree, you should discontinue use of the App and request account deletion as described in Section 7.

11.  Contact Us

Questions, requests, or complaints about this Privacy Policy should be directed to:

Drivepoints Inc.

Email: privacy@drivepoints.com

California residents also have the right to submit a complaint to the California Privacy Protection Agency at https://cppa.ca.gov.

Effective: April 1, 2026

KIMO WINTERBOTTOM


Kimo is CEO of DrivePoints and Bridger Insurance. He has spent his entire career in insurance and the capital markets. After
graduating from Santa Clara University with a degree in economics he began his career as an underwriter at Chubb. He spent 12 years working on Wall
Street including several years at Swiss Re Financial Products. Since 2010 Kimo has raised roughly $80 million and started or acquired 5 companies with
an exited IRR of 37% over that timespan. Since launching Bridger in 2017 he has increased company revenue by over 400% and brought the company
back to consistent profitability. Kimo enjoys spending time with his family and playing golf together, a good game of backgammon and watching his San
Francisco Giants try to win another World Series.

This will close in 0 seconds

Adam Litki


Adam is the Chief Operating officer of Pillar Life Insurance, a direct-to-consumer annuity provider. He served most recently as the
President of Bridger Insurance Technology. Prior to this he was the Head of Enterprise Risk Services for Bloomberg. He has over three decades of risk
management and technology experience including serving as Market, Counterparty, Country and Model Risk, and Risk Modelling for Wachovia and
Wells Fargo. Before that Adam worked for Barclays Bank, PLC as the head of Market Risk in the Americas and head of Market Risk for Global
Financing. Adam also served as the Global Head of Market Risk for Swiss Re Financial Products and spent several years in various management roles with
BNP Paribas.

This will close in 0 seconds

Matt Reznicek


Matt has led product management and pricing functions for auto insurance carriers for 15 years, managing more than $1B in profitable
premiums and multiple product launches in his career. He led the Product and Actuarial functions at American Access Casualty Company, growing top
line from $100m to $300m, setting the company up for acquisition by Kemper (KMPR). He will lead the development of the DrivePoints scoring
algorithm, insurance pricing and rewards economics. Matt is based in the Boston area and has a BA in Economics from Harvard University.

This will close in 0 seconds

Sandra Thorbjornsen


Sandra is a highly accomplished professional with a diverse background in various industries. She currently holds the position of Executive Vice President (EVP) at DrivePoints, where she is responsible for acquiring data for DrivePoints scoring. In addition, she works as a Tech Project Manager at Bridger Insurance. Prior to her current roles, Sandra worked as a Business Developer at Boston Analytics and as a Systems Analyst at Ernst and Young, where she was a key team member on projects such as JE CAAT and XBRL. She was instrumental in the success of the JE CAAT project, which led to additional support and funding. Notably, Sandra won a LPGA long drive competition while eight months pregnant, and her son is currently the second-ranked amateur golfer in the world and attends Stanford University.

This will close in 0 seconds