Privacy Policy

1. Introduction

IonFlux (the "App") lets EV drivers find supported FlashBot and FlashHub charging connectors, create an account, save payment methods, and start and manage paid charging sessions using IonDynamics' FlashOps service.

This U.S. Privacy Policy explains the personal information we collect through the App, where it comes from, how we use and disclose it, how long we keep it, and the choices and rights available to you. It applies to the U.S. version of the App and related consumer charging services.

2. Who is responsible for your information?

IonDynamics Energy Corp. ("IonDynamics," "we," "us," or "our") is responsible for the personal information described in this Policy. A charging-site operator may be separately responsible for information it collects or uses for its own on-site services, as explained in the operator's notice.

Stripe, LLC processes payment-card information through its payment interface and handles that information under its own privacy notice. Mapping and location-service providers may also collect and process information under their own privacy notices when their services are displayed or used.

3. Data we collect

The categories below describe personal information collected during the preceding 12 months and information we expect to continue collecting. The information collected depends on the features you use.

3.1 Account and profile.

Account and profile information you provide, such as your display name, mobile phone number, email address, language or locale preferences, and optional vehicle profile information.

3.2 Authentication.

Your mobile number, SMS one-time authentication codes, and authentication-attempt information. One-time codes are generally retained for about 15 minutes.

Session and authentication tokens stored on your device, which generally expire within about 30 days or earlier when invalidated.

3.3 Payments.

Payment-processor customer and payment-method identifiers;

Limited payment-method details, such as card brand, last four digits, expiration date, wallet type (for example, Apple Pay or Google Pay), and default-payment status;

Payment authorization, capture, settlement, refund, and dispute references linked to charging sessions.

IonDynamics does not receive or store your full payment-card number or card security code on its servers. Card entry and digital-wallet transactions are handled through Stripe's payment interface.

3.4 Charging sessions.

Connector, charger, session, and order identifiers;

Authorized and final amounts, currency, applicable tariff, and payment status;

Authorization, charging-start, charging-end, and settlement timestamps;

Live and summary charging metrics, such as energy delivered, charging power, and estimated vehicle state of charge when available;

If a feature is enabled and you choose to use it, vehicle identifiers (such as a license plate or VIN) and vehicle-to-charger coordinates needed to provide that feature.

3.5 Location.

When you use nearby-connector discovery or maps, the App may collect your approximate or precise location and provide it to our service and mapping providers to show nearby charging options, calculate distance, and support location-based charging functions. You can revoke location permission in your device settings, but nearby discovery and other location-based features may then be limited.

3.6 Device and technical data.

App version, device and operating-system information, device or app identifiers, IP address, network and request information, timestamps, crash data, and diagnostic and security logs;

Preferences and optional vehicle photos stored locally on your device. Information that remains only on your device is not collected by IonDynamics unless you choose a feature that uploads it.

3.7 Permissions (charge-oriented use).

Depending on OS and build, the App may request:

Network — required;

Location — maps and nearby connectors;

Notifications — if enabled for product alerts.

Some optional features may request camera, microphone, Bluetooth, or photo-library permission. The App should request a permission only when a feature you choose requires it, and you may deny or revoke the permission in your device settings.

3.8 Sensitive personal information.

Account-authentication information and precise geolocation may be considered sensitive personal information under certain state laws. We use this information only as reasonably necessary to authenticate users, provide requested location and charging functions, protect the service, and comply with law. We do not use it to infer characteristics about you.

3.9 Sources of information.

We collect information directly from you; automatically from the App, your device, and charging equipment when you use the service; and from payment processors, mapping providers, communications providers, charging-site operators, and other service providers involved in a transaction or support request.

4. How we use information

We use personal information to create and manage accounts; authenticate users; locate and display charging connectors; authorize, operate, bill, and support charging sessions; provide receipts and service communications; maintain, secure, and troubleshoot the App; prevent fraud and misuse; comply with law; enforce our terms; and establish, exercise, or defend legal claims. We may also use aggregated or deidentified information that cannot reasonably be linked to you.

We use precise location and account-authentication information only for the limited purposes described in this Policy and do not use them to infer characteristics about you.

5. How we disclose information

Service providers. We disclose information to vendors that provide payment processing, SMS and communications, mapping and location services, cloud hosting, customer support, security, fraud prevention, diagnostics, and similar services. They may use the information only as permitted by contract and applicable law, except when a provider acts independently under its own privacy notice.

Charging-site operators. We may disclose connector, session, transaction, vehicle, and support information to the operator of the charging site where you request or receive service, including to operate the charger, resolve issues, and reconcile transactions.

Legal, safety, and business events. We may disclose information when reasonably necessary to comply with law or legal process; protect rights, safety, security, and property; investigate fraud or misuse; or evaluate or complete a merger, financing, reorganization, sale, or transfer of all or part of our business, subject to appropriate safeguards.

No sale, sharing, or targeted advertising. We do not sell personal information for money or other valuable consideration, share it for cross-context behavioral advertising, or process it for targeted advertising or profiling that produces legal or similarly significant effects. In the preceding 12 months, we have not sold or shared personal information as those terms are defined by applicable U.S. state privacy laws, and we have not knowingly sold or shared the personal information of consumers under 16.

6. Processing in other locations

We and our service providers may process personal information in the United States and other countries where we or they operate. Privacy and data-protection laws in those locations may differ from those in your state. Where required by applicable law, we use appropriate safeguards for these transfers.

7. Retention

We retain each category of personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide the service, maintain security, resolve disputes, satisfy tax, accounting, and legal obligations, and enforce agreements. Retention depends on the nature of the information and the reason it was collected.

Account and profile information is generally retained while your account is active and for a reasonable period afterward to complete deletion, prevent fraud, resolve disputes, and meet legal obligations.

Authentication codes are generally retained for about 15 minutes, and session tokens generally expire within about 30 days or earlier when invalidated.

Payment, charging-session, and transaction records are retained for the period needed for service, warranty, dispute, fraud-prevention, tax, accounting, and legal purposes.

Location, device, diagnostic, security, support, and optional-feature data is retained based on the feature used, operational and security needs, and applicable legal requirements. Backups may persist for a limited period until they are overwritten or securely deleted in the ordinary course.

8. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, authentication safeguards, logging, and separation of full payment-card data through Stripe. No security measure is perfect, and we cannot guarantee absolute security.

Protect your device with an operating-system lock, do not share one-time authentication codes, and sign out before allowing another person to use your device.

9. Your U.S. privacy rights

Depending on your state and subject to legal exceptions, you may have the right to confirm whether we process your personal information; access or obtain a copy of it; correct inaccuracies; delete it; obtain a portable copy; obtain information about certain third-party disclosures; and opt out of a sale, targeted advertising, or certain profiling. You may also have rights concerning sensitive personal information.

To submit a privacy request, email privacy@iondynamics.energy and describe the right you want to exercise. Please send the request from an email address or phone number associated with your account when possible.

You can update available account fields and add, remove, or change a default payment method in the App. Removing a payment method does not delete transaction records that we must retain.

We may verify your identity using information associated with your account. Where permitted, an authorized agent may submit a request for you, but we may require proof of authorization and may verify your identity directly.

To request deletion of your account and associated personal information, use the in-App account-deletion control or the web deletion-request page identified in the App Store or Google Play listing. We may retain information that applicable law permits or requires us to keep.

We will not discriminate against you for exercising a privacy right. If we deny a request, residents of states that provide an appeal right may appeal by emailing privacy@iondynamics.energy with the subject line "Privacy Appeal." We will respond as required by applicable law.

California disclosures. During the preceding 12 months, we collected the categories of personal information described in Section 3 from the sources described in Section 3.9, used them for the purposes described in Section 4, and disclosed them for the business purposes and to the recipient categories described in Section 5. We did not sell or share personal information. We use sensitive personal information only for the limited purposes described in Section 3.8.

Opt-out preference signals. Where legally required and applicable to our practices, we recognize valid universal opt-out preference signals. Because we currently do not sell or share personal information or use it for targeted advertising, such a signal does not change our current practices.

10. Children

The App is a general-audience service and is not directed to children under 13. We do not knowingly collect personal information online from a child under 13. If you believe a child under 13 has provided personal information to us, contact privacy@iondynamics.energy so we can investigate and delete it as required by law.

11. Changes

We may update this Policy from time to time and will revise the "Last updated" date. We will provide additional notice of material changes when required by law, such as through the App or another appropriate channel.

12. Contact

Privacy requests and questions: privacy@iondynamics.energy. General support: support@iondynamics.energy.

Operator services: The separate FlashOps Center privacy notice is available at https://operation.iondynamics.energy.

13. Scope and other policies

This Policy applies only to the IonFlux consumer App and related consumer charging services. Separate notices apply to FlashOps Center, IonPilot, operator staff tools, and services offered independently by charging-site operators.

When a third-party feature, payment interface, map, charging site, or other service displays its own privacy notice, that notice governs the third party's independent handling of personal information.