Mimo LLC Effective Date: July 22, 2026 Last Updated: July 22, 2026 Mimo LLC (“Mimo,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your Personal Data. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard your Personal Data when you use our Services. This Policy applies to all users worldwide and covers the following services:

Bike Sharing and Scooter Sharing
Power Bank Sharing
Electric Vehicle Charging, EV Roaming, QR Charging
EVUP Platform and White Label EV Platform
Corporate Fleet Management and Partner Operators
Mobile Applications, Web Applications, Corporate Dashboard, CMS
APIs, Developer Platform, Cloud Platform
Payment Terminals, POS Integrations, OCPI/OCPP Integrations
AI-powered services
Customer Support and future products

This Policy is published at https://privacy.mimobike.com and forms an integral part of our User Agreement. It is specifically tailored to Mimo’s mobility and EV charging ecosystem and complies with best practices under GDPR (including UK GDPR), CCPA/CPRA, LGPD, PIPEDA, Australian Privacy Act, and other applicable international standards for SaaS, fintech, and mobility services. By using our Services, you consent to the practices described in this Policy. If you do not agree, please do not use the Services.

1. Information We Collect

We collect the following categories of Personal Data:

1.1 Account and Identity Information

Full name, email address, phone number, date of birth, government-issued identification (for verification), profile picture, login credentials, and authentication data.

1.2 Payment Information

Billing address, payment card details (processed via tokenized third-party providers), bank account information (where applicable), transaction history, and invoices.

1.3 Usage and Transaction Data

Rental history (bikes, scooters, power banks), charging session details (start/end time, duration, energy consumed, station ID), vehicle telemetry during active use, EV roaming records, and station/ power bank usage data.

1.4 Location Data

Precise geolocation (GPS, Wi-Fi, cellular data) collected during active rentals, charging sessions, and app usage. Approximate location for service availability and fraud prevention.

1.5 Device and Technical Information

Device identifiers, IP address, browser type and version, operating system, app version, device settings, crash logs, diagnostic information, and performance metrics.

1.6 Communication and Support Data

Customer support records, chat transcripts, emails, feedback, and marketing communication preferences.

1.7 AI-related Data

Prompts and requests submitted to AI services, interaction metadata, session context, and generated outputs.

1.8 Business and Partner Data

Corporate account details, fleet management information, partner operator records, white-label customer configuration data, and API access logs.

1.9 Cookies, Tracking Technologies and Analytics Data

See Section 10.

1.10 Security and Technical Logs

Security logs, API logs, authentication records, and fraud prevention data.

2. Legal Bases for Processing

We process Personal Data based on the following lawful bases:

Performance of Contract — to provide rentals, charging, payments, account management, and API services.
Legitimate Interests — fraud prevention, security, platform improvement, analytics, and permitted marketing.
Consent — for marketing, non-essential cookies, certain location uses, and optional AI features.
Legal Obligation — tax, accounting, regulatory compliance, and safety reporting.
Vital Interests — protection of user safety in emergencies.

3. How We Use Your Personal Data

Delivery and operation of the Services (rentals, charging, EVUP platform)
Processing payments and billing
Identity verification and fraud prevention
Customer support and communications
Analytics, product improvement, and AI enhancement
Security monitoring and incident response
Legal and regulatory compliance
Partner integrations, white-label operations, and corporate fleet management

4. Artificial Intelligence

Mimo uses Artificial Intelligence technologies to enhance user experience, including intelligent support, route optimization, and contextual assistance. We apply data minimization principles, temporary processing where possible, and strict access controls. Users may disable AI features and request deletion of related data at any time.

5. International Data Transfers

Mimo operates globally. Personal Data may be transferred to and processed in the United States, the European Economic Area, the United Kingdom, and other jurisdictions where we or our service providers operate. We ensure appropriate safeguards such as Standard Contractual Clauses, Data Processing Agreements, and technical measures (e.g., encryption). Transfer Impact Assessments are conducted as required.

6. Data Security

6.1 Technical and Organizational Measures

Encryption in transit and at rest, multi-factor authentication, role-based access control, continuous monitoring, regular security audits, and penetration testing.

6.2 Access Management

Access to Personal Data is granted on a strict need-to-know basis and follows the principle of least privilege. All access is logged and periodically reviewed.

6.3 Incident Response

Mimo maintains a documented Incident Response Plan. In the event of a Personal Data breach, we promptly contain the incident, assess impact, notify relevant supervisory authorities and users as required by law, and implement corrective measures.

7. Data Retention and Deletion Procedures

We retain Personal Data only as long as necessary:

Account and Identity Data: Duration of the account + up to 7 years after deletion (legal and fraud prevention purposes).
Transaction, Rental, and Charging History: Up to 7 years for tax, billing, and regulatory compliance.
Location Data: Duration of active session + limited period (typically 30–90 days).
AI-related Data: Session duration or maximum 30 days unless retained for legal reasons.
Security and Technical Logs: 90 days to 2 years.

Upon a valid deletion request, we securely delete or irreversibly anonymize the data, subject to legal retention obligations. Backups are purged according to scheduled policies.

8. Your Rights

You have the right to:

Access, rectification, erasure, restriction, and portability of your data
Object to processing (including for legitimate interests and marketing)
Withdraw consent at any time
Lodge a complaint with a supervisory authority
Appeal our decisions regarding data requests

To exercise your rights, please contact us at [email protected]. We will respond within one month (extendable where permitted by law).

9. Children’s Privacy

Our Services are not directed at children under 16 years of age (or the applicable minimum age in relevant jurisdictions). We do not knowingly collect Personal Data from children. If we become aware of such collection, we will delete the information promptly.

10. Cookies and Tracking Technologies

We use necessary, functional, analytics, and advertising cookies and similar technologies. You can manage your preferences through our cookie consent banner, browser settings, or device controls.

11. Third-Party Service Providers

We engage trusted service providers (payment processors, cloud hosting, analytics, mapping services, etc.) under contracts that require equivalent data protection standards. We conduct due diligence and maintain oversight of our subprocessors.

12. Corporate Accounts, White Label, EVUP Platform and API Operations

For corporate users, White Label customers, and EVUP Platform participants, we process additional business-related data necessary for fleet management, reporting, configuration, and technical integrations. API operations are governed by specific technical documentation and agreements.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified by posting the updated Policy on our website and/or through other appropriate channels. Your continued use of the Services after the effective date constitutes acceptance of the changes.

14. Contact Information

Mimo LLC State Registration Number: 42.110.1047491 Date of Registration: 2018 Registered Address: Yerevan, Republic of Armenia (as per state registration records) Privacy Team Email: [email protected] Website: https://privacy.mimobike.com