Privacy Policy

This Privacy Policy explains how Dyme Digital Inc. ("Dyme," "we," "us") collects, uses, shares, and protects information when you use dyme.earth, travel.dyme.earth, Dyme Shop, the optional Dyme Miles browser extension, and our related services (collectively, the "Services").

This Policy applies to information we collect from you directly, from third parties acting on your behalf (e.g., booking partners), and from your interactions with the Services.

1. WHAT DATA DO WE COLLECT

We collect the following categories of personal information:

Personal Identifiers: Name, email address, postal address, phone number, IP address, device identifier, account password, and other registration or profile information you provide.

Payment Information: Payment card details and billing information. For most transactions, Dyme is not the merchant of record. Payment is processed directly by the applicable merchant of record: Nuitee Travel (hotels and flights), Xeni (car rentals and activities), and Blackhawk Network (gift cards). Card numbers for those transactions are tokenized and stored within the merchant of record's PCI-compliant systems; Dyme does not store full card numbers on our servers. Stripe processes payments for transactions where Dyme is the merchant of record (such as Dyme Miles purchases).

Booking and Travel Information: Trip details (destinations, dates, traveler names, room/passenger preferences), confirmation numbers, supplier-issued booking references, and ancillary requests.

Dyme Miles Account Information: Member identifier, mile balances, transaction-level earning history (which bookings or eligible purchases earned miles), redemption history, and account status (active, suspended, closed).

Gift Card Purchase Data: Brand selected, denomination, recipient information (if a gift), and purchase confirmation details. We share this data with our gift card partners (Blackhawk Network and Runa) to fulfill the order.

Commercial Information: Records of purchases, services obtained, and transaction values.

Internet and Network Activity: Device type, browser, operating system, referring URLs, page views, session duration, click events, error logs, and similar telemetry from your use of the Services.

Location Information: Approximate location derived from your IP address. We do not collect precise geolocation data without your consent.

Communications: Records of correspondence with us, including support requests and survey responses.

Aggregate and Anonymized Data: We may de-identify personal information and use the resulting aggregated data for research, product development, analytics, and marketing.

Dyme Shop and Browser Extension Information: When installed, the Dyme browser extension reads the page you are viewing to recognise a participating store, hotel, or flight. That matching happens on your device; we do not receive your browsing history or a record of the pages you visit. The extension also reads cookie names on the site you are on, and the address of any redirect a link passes through, for a single purpose: to detect that another rewards service referred your visit, in which case the extension stays hidden and shows you nothing. No page information reaches Dyme unless you tap an offer. When you activate a Dyme Shop offer, we use your Dyme account identifier, a channel identifier, and a per-click identifier to create and associate the tracked link with your account, and we receive the store’s identifier, or, for a hotel or flight, the property name and dates shown on that page. We may also receive transaction information from our platform partner (Loyalize), participating merchants, and affiliate-network partners, including transaction and order identifiers, merchant name and identifier, transaction status, reported sale amount, currency, reported commission, and pending and availability dates. We do not receive item-level basket contents, SKU data, product-category data, coupon details, or general clickstream data through this process.

We do not knowingly collect sensitive personal information (e.g., government ID numbers, health data, precise geolocation, biometric data) except where you voluntarily provide it in connection with a booking that requires it.

2. WHERE DO WE OBTAIN YOUR DATA

We collect data:

• Directly from you when you create an account, make a booking, purchase a gift card, enroll in Dyme Miles, contact support, or sign up for emails.
• Automatically through your use of the Services, including via cookies and similar technologies (see Section 7).
• From third parties including: our travel-booking partners (Nuitee Travel / LiteAPI for hotels and flights, Xeni for car rentals and activities), payment processors (Stripe, Blackhawk Network, Runa), analytics providers (Google), and other service providers acting on our behalf.
• From participating merchants and affiliate or rewards-network partners when they report information needed to attribute, confirm, adjust, reverse, or investigate Dyme Shop Miles.

3. HOW WE USE YOUR DATA

We use personal information to:

• Provide and operate the Services, including processing bookings, gift card purchases, and Dyme Miles transactions
• Authenticate your account, prevent fraud, and enforce our terms
• Communicate with you about your bookings, your Dyme Miles balance, and account notices, and (with your consent or where permitted) send marketing — by email and, where you have opted in, by text message, WhatsApp, or phone call
• Personalize content and recommendations within the Services
• Conduct analytics, improve the Services, and develop new features
• Comply with legal obligations and respond to lawful requests
• Operate Dyme Shop, present eligible merchant offers, process offer activation, prevent duplicate or conflicting reward attribution, confirm and administer Shop-earned Dyme Miles, investigate missing-reward requests, and prevent fraud or abuse
• Carry out any other purpose disclosed at the time you provide the information

We do not use your personal information for purposes that are materially different from those listed above without notifying you and, where required by law, obtaining your consent.

4. WHEN AND WITH WHOM DO WE SHARE YOUR DATA

We share personal information with the following categories of recipients:

Travel and Booking Partners. When you book through Dyme, we share the information required to complete the booking with:

• Nuitee Travel (LiteAPI) — hotel and flight bookings
• Xeni — car rental bookings and activity bookings

These partners share booking data with the underlying supplier (e.g., the hotel, car rental company, or airline).

Payment Processors and Merchants of Record.

• Nuitee Travel — merchant of record for hotel and flight bookings; processes the corresponding payment
• Xeni — merchant of record for car rental and activity bookings; processes the corresponding payment
• Blackhawk Network — merchant of record for most direct retail gift card purchases; processes the corresponding payment
• Runa — gift card fulfillment partner for bulk gift card purchases, gift cards purchased using Dyme Miles, and certain brand-specific fulfillment paths. For certain Runa-sourced brands, Dyme may act as the merchant of record
• Stripe — payment processing for transactions where Dyme is the merchant of record (including Dyme Miles purchases and certain gift card purchases)

Analytics and Advertising Providers. Google (Google Maps Platform APIs, including Places API; Google Analytics; Google Tag Manager). We use these to operate location features, measure Service performance, and understand how users interact with our site.

Service Providers. Companies that provide cloud hosting, email delivery, customer support tooling, security monitoring, and similar functions on our behalf. These providers are contractually limited to using your data only to perform services for us.

Affiliates. Our parent company, subsidiaries, and other entities under common control, on a confidential basis and for the purposes described in this Policy.

Business Transfers. In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business.

Legal and Safety. When we believe in good faith that disclosure is necessary to comply with a legal obligation, respond to lawful requests from public authorities, enforce our terms, protect the rights or safety of Dyme, our users, or the public, or investigate fraud or security incidents.

With Your Direction. When you direct us to share your data (e.g., when you elect to convert Dyme Miles to a partner rewards currency, you authorize sharing the necessary account identifiers with the partner program).

Participating Merchants and Affiliate / Rewards Partners. Our platform partner (Loyalize) and the applicable affiliate or rewards partners, to create and operate the tracked link and attribute eligible Dyme Shop purchases.

We do not sell your personal information. We have not sold personal information in the preceding twelve (12) months. Some sharing for analytics or interest-based advertising may constitute "sharing" under California or similar state laws — see Section 12 for opt-out rights.

5. THIRD-PARTY WEBSITES AND SERVICES

The Services may contain links to third-party websites, applications, or platforms (including supplier websites, partner programs to which you convert Dyme Miles, and third-party payment surfaces). This Privacy Policy does not apply to those third parties. We encourage you to review their privacy practices independently.

6. COOKIES AND TRACKING TECHNOLOGIES

We and our service providers use cookies, pixels, local storage, and similar technologies to operate the Services, remember your preferences, authenticate sessions, measure performance, and (where permitted) deliver relevant marketing.

You can control cookies through your browser settings. Disabling cookies may affect some functionality (e.g., remaining signed in across sessions).

We respond to the Global Privacy Control (GPC) signal as an opt-out of "sale" or "sharing" of personal information for users in jurisdictions where GPC is legally recognized.

7. HOW LONG WE KEEP YOUR DATA

We retain personal information for as long as your account is active or as needed to provide the Services. Specifically:

• Account and profile data — for the life of your account, plus a reasonable period after closure for legal, tax, and fraud-prevention purposes
• Booking and transaction records — at least seven (7) years to meet tax, accounting, and dispute-resolution obligations
• Dyme Miles records — for the life of the account; transaction-level earning history is retained to support balance audits and program administration
• Analytics and telemetry data — typically retained in aggregated form; identifiable telemetry is retained no longer than necessary for the purpose collected

We retain Dyme Shop transaction and Miles records for up to seven years. We retain click and browser-link records for as long as reasonably necessary to operate, secure, investigate, and administer Dyme Shop and the Dyme Miles program, unless a longer period is required or permitted by law.

Where deletion is not technically feasible or is impermissible by law, we will isolate the data from further processing.

8. KEEPING YOUR INFORMATION SAFE

We maintain administrative, technical, and physical safeguards designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. Payment data is handled by PCI-DSS-compliant processors. No system is perfectly secure; we cannot guarantee absolute security.

If we become aware of a security incident affecting your personal information, we will notify you and the relevant authorities as required by law.

9. COLLECTING INFORMATION FROM MINORS

The Services are intended only for individuals who are at least 18 years old, and are not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe we have collected information from a person under 18, please contact us at privacy@dyme.earth and we will delete it.

10. YOUR CHOICES AND RIGHTS

Account Settings. You can review and update most account information by signing in to your Dyme account.

Marketing Emails. You can opt out of marketing emails using the unsubscribe link in any marketing message, or by emailing privacy@dyme.earth. Operational emails (booking confirmations, account notices) are not promotional and cannot be opted out of while you have an active account.

Cookies and Interest-Based Advertising. You can manage cookie preferences via your browser. You can opt out of interest-based advertising from participating companies at https://www.aboutads.info/choices/.

Dyme Miles. You can opt out of Dyme Miles by closing your member account; balances are forfeited per the Dyme Miles Terms.

Text Messages, WhatsApp, and Calls. See Section 11 for how to opt in and out of SMS, WhatsApp, and automated or AI-voice calls.

11. TEXT MESSAGES, WHATSAPP, AND AUTOMATED CALLS

We may contact you by text message (SMS/MMS), by WhatsApp, and by phone call — including messages and calls placed or handled using automated technology and AI voice assistants — to service your account and, where you have separately agreed, for marketing.

Consent. We send marketing texts, WhatsApp messages, and automated or AI-voice marketing calls only with your prior express written consent, collected when you provide your mobile number and agree (for example, by checking an unchecked box or by messaging us first). This consent is never a condition of purchasing anything from Dyme. Transactional messages — such as booking confirmations, support replies, and security notices — are sent based on your relationship with us.

What we send. Depending on your opt-in, messages and calls may include booking confirmations and updates, trip reminders, customer-support responses (including from our AI assistant), account and security notices, and — if you have opted in — promotions and offers.

Frequency and cost. Message frequency varies based on your activity and preferences. Message and data rates may apply under your mobile plan. Dyme does not charge you for the messages themselves.

How to stop. Reply STOP to any Dyme text to opt out, or HELP for help. For WhatsApp, reply STOP or block the Dyme number. To stop calls, tell the caller or our AI assistant, or email privacy@dyme.earth. Opting out of marketing messages does not stop transactional messages tied to an active booking or account.

Carriers and platforms. Mobile carriers and messaging platforms (including WhatsApp and Meta) are not liable for delayed or undelivered messages. WhatsApp messages are also subject to WhatsApp's and Meta's own terms and privacy practices. Our use of automated and AI-assisted communications is described further in our Automated Decision-Making section (Section 13); a human agent is available on request.

12. STATE PRIVACY RIGHTS

Residents of certain U.S. states have additional rights under state privacy laws, including:

• California (CCPA/CPRA)
• Virginia (VCDPA)
• Colorado (CPA)
• Connecticut (CTDPA)
• Utah (UCPA)
• Texas (TDPSA)
• Florida, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Tennessee and other states with effective comprehensive privacy laws

Depending on your state of residence, you may have the right to:

• Know / Access what personal information we have collected about you and how we use it
• Delete personal information we hold about you, subject to legal exceptions
• Correct inaccurate personal information
• Portability — obtain a portable copy of your personal information
• Opt out of "sale" or "sharing" of personal information, and of targeted advertising
• Limit use of sensitive personal information
• Non-discrimination — exercise these rights without being discriminated against

To exercise a right, email privacy@dyme.earth or write to the address in Section 16. We will verify your identity using information we have on file. We will respond within 45 days; we may extend the response window by an additional 45 days where reasonably necessary, with notice to you.

You may use an authorized agent to submit a request on your behalf, subject to our verification.

Appeal. If we deny your request, you may appeal by replying to our response. We will inform you in writing of the outcome of the appeal within 60 days.

13. AUTOMATED DECISION-MAKING

Dyme uses automated systems, including machine-learning models and AI-powered tools, in connection with the Services. These systems are used to:

• Rank and personalize hotel and flight search results, recommendations, and offers shown to you
• Triage and respond to customer support inquiries via AI-powered chat assistants. The AI may access information necessary to assist you, including your account profile, booking history, and Dyme Miles balance. A human agent is available on request, and we will route inquiries to a human when the AI cannot adequately resolve them
• Detect fraud, prevent abuse, and protect the integrity of Dyme Miles and other Services

These automated systems do not make decisions that produce legal or similarly significant effects on you. You may contact privacy@dyme.earth to obtain meaningful information about the logic of any automated processing that materially affects your account, and to request human review where required by applicable law.

14. THE DYME MILES BROWSER EXTENSION

Dyme offers an optional browser extension ("Dyme Miles") that can identify participating Dyme Shop merchants, help you activate eligible offers to earn Dyme Miles, and help you find and view travel options available through Dyme when you search for travel online. This section describes how the extension handles data; it supplements, and does not replace, the rest of this Policy. Installing and using the extension is entirely voluntary.

Local processing. The extension reads the page and address you are viewing locally in your browser to determine whether the site is a participating merchant or whether a travel-search page may be relevant to Dyme. It downloads a participating-store list on a regular schedule and matches store hostnames locally. Dyme does not receive your general browsing history, store-domain visits, page addresses, page content, or cookies merely because the extension performs this local processing.

Other referral partners. The extension may check locally for specified competing rewards or affiliate referral signals, including selected URL parameters, network redirector hostnames, and one family of tracking cookies. If it detects one of those signals, the extension does not display or activate a Dyme Shop offer for that merchant for the remainder of that browser session. If it cannot complete the relevant referral check, the extension does not activate an offer or seek attribution for that merchant. These checks are read-only: Dyme does not create, alter, overwrite, or delete cookies as part of the check, and does not receive the checked cookie or address. The extension cannot identify every possible referral source.

When information is sent. Information is sent to Dyme only when you deliberately click an "Activate" or "Shop [Merchant]" button while signed in to your Dyme account, or choose to view a travel option through Dyme. A Shop click creates a tracked link using your Dyme account identifier, channel identifier, and per-click identifier, and then navigates your tab through applicable affiliate-network and merchant destinations. Those parties may set their own cookies or use other attribution technologies in that process; Dyme does not set cookies in that chain. A travel-related click sends only the information needed to show the relevant Dyme travel results and does not itself create Shop affiliate attribution.

Extension storage and unlinking. The extension stores an opaque, browser-profile-specific link token locally, along with settings, dismissed sites, the local store list, and browser-session stand-down decisions. Dyme stores a hash of the link token associated with your account. Removing the extension deletes its local browser data. Removing the extension does not by itself delete Dyme's associated account or transaction records; you may contact privacy@dyme.earth to request deletion, subject to records we need to retain for legal, accounting, fraud-prevention, dispute-resolution, and program-administration purposes.

Chrome Web Store Limited Use. Dyme’s use of information received from the Dyme Miles browser extension complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

15. PRIVACY POLICY UPDATES

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email and/or by a prominent notice on the Services before the changes take effect. The "Effective Date" at the top reflects the date the current version becomes effective. Your continued use of the Services after the Effective Date constitutes your acceptance of the updated Policy.

16. CONTACT US

Dyme Digital Inc.

1401 Lavaca Street, #593, Austin, TX 78701

Email: privacy@dyme.earth

Phone: 1-218-438-3963

17. DISCLAIMER

This Privacy Policy is provided for informational purposes and does not create any contractual or other legal right in favor of any party. The substantive rights and obligations between you and Dyme are governed by the Dyme Terms of Service.