Documents
10/08/2026
Privacy Policy

Last Updated: October 08, 2026

I. Introduction

My Device, Inc. (“My Device”) d/b/a Whizz is committed to keeping your personal data safe. This notice describes the personal data we collect, how it’s used and shared, and your choices regarding this data.

We may occasionally update this notice. We encourage users to periodically review this notice for the latest information on our privacy practices.

If you have any questions or concerns about your privacy, we encourage you to contact us at support@getwhizz.com

This Privacy Notice also serves as our notice at collection under the California Consumer Privacy Act (CCPA), informing you at or before the point of data collection about the categories of personal information we collect and the purposes for which they will be used.

II. Who does this notice apply to?

This notice applies to all users of our website, personal account and app, including customers who open accounts with us. Some of the information collected from users may be personal data, and this notice provides information about your rights regarding your personal data.

III. What data do we collect?

The following data is collected by, or on behalf of My Device:

1- Data provided by users. This may include:

  • Name
  • Date of Birth
  • Email address
  • Mailing address
  • Telephone number
  • Payment information
  • Identification documentation
  • Photos or videos, including supporting documentation and customer photos for onboarding purposes and more

2- Data created during use of our services. This may include:

  • Location data, which allows us to track the location of our bikes
  • Transaction information, which allows us to track what services are requested and provided, and track order details
  • Usage data, which tells us how users interact with our services. In some cases, we collect this data through cookies, pixels, tags, and similar tracking technologies that create and maintain unique identifiers. To learn more about these technologies, please see section X below and our Cookie Notice available at getwhizz.com/documents/cookie-policy/.
  • Device data, which provides us with information about the devices used to access our services, including IP addresses, referring URLs, operating systems used.
  • Photos or Videos, including CCTV footage captured at My Device stores during visits, during scheduled deliveries, and for other business-related purposes.
  • Call and message records, including recordings and transcripts of calls and messages between you and us, our customer support, or automated and AI-assisted systems acting on our behalf.

IV. How do we use the data we collect?

My Device collects and uses data collected from Customers:

  • To provide and maintain our services, including fulfilling our contract with you
  • To enhance the safety and security of our users and services
  • To provide personalized information about our services through customer support.
  • To send marketing and non-marketing communications to users
  • To contact users by phone call and text message regarding account servicing, orders, subscription renewals, payments, failed payments, collections, and related operational matters, and, with their consent, offers and promotions, including through automated technology and artificial or AI-generated voice where permitted by applicable law
  • To process and collect payments, including debts
  • In connection with legal proceedings

SMS Messaging Program: For our SMS/text messaging program (including account, billing, and customer support communications), message frequency varies depending on your account activity. Message and data rates may apply. You may opt out of receiving SMS messages at any time by replying STOP, or request assistance by replying HELP.

V. What data do we share with others, and why?

My Device may be required to share data with our affiliates and partners, at your request or to fulfill our contract with you. We may also share data with our affiliates and partners, for legal reasons or in connection with claims or disputes. We do not sell or share your personal data with third parties or affiliates for their own marketing or promotional purposes.

Mobile Opt-In Information: Your mobile phone number and your consent to receive SMS/text messages from Whizz are never shared or sold to third parties or affiliates for marketing or promotional purposes.

We may share the data we collect:

1- With My Device service providers and business partners

My Device provides data to vendors, consultants and other service providers or business partners. 

These include:

  • Payment processors and facilitators
  • Background check providers to perform soft credit checks and identity checks on customers
  • Marketing platform providers that send communications on our behalf (such as email and SMS delivery services) and may not use your data for their own purposes
  • Data analytics providers
  • Third party delivery services to deliver e-bikes to users
  • Consultants, lawyers, accountants, and other professional services providers

2- For legal reasons or in the event of a dispute

My Device may share your personal data if we believe it’s required by New York State applicable law, regulation, operating license or agreement, legal process or governmental request, or where the disclosure is otherwise appropriate due to safety or similar concerns.

This also includes sharing personal data with others in connection with, or during negotiations of, any merger, sale of company assets, consolidation or restructuring, financing, or acquisition of all, or a portion of our business, or into another company.

3- With collection agencies for delinquent accounts

My Device may share customer data with collection agencies when a customer becomes delinquent on their account. This data may include personal information, such as name, contact information, SSN, and other personal information including delinquent account details that might help in recovering any disputed charges or any other negative balances on the account. This sharing of data is necessary for My Device to take appropriate action to collect unpaid debts and maintain the integrity of our business operations.

4- With consent

My Device may share your personal data other than as described in this notice if we notify you and you consent to the sharing.

SMS / Text Messaging Program

My Device offers a text messaging program for prospective and current customers. By submitting your mobile phone number on our website or in a Whizz lead form on Facebook or Instagram and checking the consent box, you give your express written consent to receive recurring automated marketing text messages and calls from Whizz and its service providers at the number provided, including messages and calls made using automated technology and artificial or AI-generated voice.

Message types include: welcome and follow-up messages after you submit an inquiry, promotional offers and discounts, information about e-bike availability and rent-to-own plans, referral rewards, and reminders to complete a sign-up you started.

You can opt out of automated or AI-assisted calls at any time by telling the caller or emailing support@getwhizz.com. When we call you using an AI-generated voice. Calls may be recorded and transcribed for customer service, quality, compliance and record-keeping purposes.

You can opt out at any time by replying STOP to any message. You will receive one final confirmation message. To re-subscribe, reply START. For help, reply HELP or contact us at hello@getwhizz.com or +1 (646) 362-5374.

Carriers are not liable for delayed or undelivered messages. We retain records of your consent and opt-out requests as required by law. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes (see Section V).

VI. How long do we keep your data for?

My Device retains each category of personal information described above for a period of up to 5 years from the date of agreement termination, unless a longer retention period is required by applicable law. This retention period reflects our need to provide services, maintain accurate business records, comply with legal obligations, resolve disputes, and enforce our agreements.

Customers may request deletion of their accounts or deletion of the data about any End User agreement at any time by contacting the company via email address at support@getwhizz.com. Except as required by law, we may or may not honor a deletion request in our sole discretion. We may retain data after a deletion request due to legal or regulatory requirements or for the reasons stated in this policy.

VII. What are our grounds for processing data?

We only collect and use personal data where we have lawful grounds to do so. These include processing user personal data to fulfill a contract with you, for purposes of My Device’s legitimate interests or those of other parties, to fulfill our legal obligations, or based on consent.

VIII. How do we secure your data?

My Device is committed to the security and integrity and confidentiality of your information. We have implemented technical, administrative and physical security measures that are designed to protect your information from unauthorized access, disclosure, use and modification. We regularly review our security procedures to consider appropriate new technology and methods. However, no method of storage on or transmission over the internet is 100% secure, and so we cannot guarantee the absolute security of your personal information.

IX. What do we do with payment information?

My Device does not store your payment card details. That information is stored by our third-party payment processor, Stripe. Their use of your personal data is governed by their privacy policy. We use the payment information you provide to charge you for the goods and services we provide. We may also charge you for any fees or debts you may owe us under the relevant agreements you have with us.

My Device uses cookies and other identification technologies on our website for purposes described in this notice.

Cookies are small text files that are stored on browsers or devices by websites, apps, online media, and advertisements. My Device uses cookies and similar technologies for purposes such as:

  • Authenticating users
  • Remembering user preferences and settings
  • Determining the popularity of content
  • Delivering and measuring the effectiveness of advertising campaigns
  • Analyzing site traffic and trends, and generally understanding the online behaviors and interests of people who interact with our services

We may also allow others to provide audience measurement and analytics services for the company use, to serve advertisements on our behalf across the Internet, and to track and report on the performance of those advertisements. These entities may use cookies, web beacons, SDKs, and other technologies to identify the devices used by visitors to our websites, as well as when they visit other online sites and services.

Please see our Cookie Notice available at getwhizz.com/documents/cookie-policy/ for more information regarding the use of cookies and other technologies described in this section.

XI. What about children’s data?

Our services are intended for individuals aged 18 and older. We do not knowingly collect or process personal information from children under the age of 18. If we learn that we have inadvertently collected personal information from a child under 18, we will promptly delete that information.

We comply with applicable laws regarding minors, including CCPA/CPRA §1798.120(c), which prohibits the sale or sharing of personal information of consumers under 16 without affirmative authorization, and COPPA, which imposes parental consent requirements for children under 13.

If you believe that a child under 18 has provided us with personal information, please contact us at support@getwhizz.com.

XII. Is my data transferred to other countries?

Our servers are in the United States. Any information provided to us within the United States remains on our servers in the United States and is not transferred out of the United States.

XIII. California Residents – Your Privacy Rights

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). This section supplements the information provided in this Privacy Policy and applies solely to California residents.

1. Categories of Personal Information Collected

In the past 12 months, we may have collected the following categories of personal information:

  • Identifiers (e.g., name, address, email, phone number, date of birth, government-issued ID)

  • Payment information (e.g., payment and transaction data, order history)

  • Internet or other electronic network activity (e.g., IP address, cookies, device and usage data)

  • Geolocation data (e.g., real-time GPS location of E-bikes and/or batteries)

  • Audio, visual, and similar information (e.g., recordings and transcripts of customer service calls and of calls made by our automated or AI-assisted systems, photos or videos provided by users or captured during visits)

  • Inferences drawn from the above categories to create user profiles or provide personalized services.

Some of the information we collect may be classified as sensitive personal information under California law (such as your government-issued ID and geolocation data). We only use and disclose this information as necessary to perform the services requested, to prevent fraud, and to comply with legal obligations.

We do not sell or share personal data for cross-context behavioral advertising without your explicit consent.

2. Your California Privacy Rights

As a California resident, you have the following rights:

  • Right to Know: You may request details about the personal information we collect, use, disclose, and share.

  • Right to Delete: You may request the deletion of your personal information, subject to certain exceptions.

You may request the deletion of your personal information, subject to certain exceptions. Upon verifying your identity, we will delete your personal data from our records and direct our service providers to do the same, unless an exception applies.

We may deny your deletion request if retaining the information is necessary for us or our service providers to:

  • Complete a transaction or fulfill a contract between you and us;

  • Detect security incidents and prevent fraud;

  • Collect an outstanding debt or enforce payment obligations;

  • Comply with a legal obligation, such as maintaining records for tax, accounting, or financial reporting purposes, or retaining payment and transaction data required under federal or state law;

  • Exercise or defend legal claims;

  • Collect outstanding debts or enforce contractual obligations.

These exceptions are permitted under California Civil Code § 1798.105(d) of the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

Please note that we may also retain certain data in aggregate or de-identified form that is not reasonably capable of being associated with you.

  • Right to Correct: You may request correction of inaccurate personal information.

  • Right to Opt-Out of Sale or Sharing: You may opt-out of the sale or sharing of your personal data (note: we do not sell your data in the traditional sense).

Some partner programs (for example, our DoorDash partnership) require us to confirm your eligibility with the partner. This exchange is limited to the data needed to provide the discount and never includes your mobile phone number or messaging consent for the partner's marketing purposes.

  • Right to Limit Use of Sensitive Personal Information: You may limit the use of sensitive personal information to only necessary business purposes.

  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

3. How to Exercise Your Rights

You can exercise your rights by contacting us via:

  • Email: support@getwhizz.com

  • Mail: My Device, Inc. d/b/a Whizz, 229 W 13th Street, New York, NY 10011 

We will respond to verified requests within 45 days. If we require more time, we will inform you of the reason and extension period (up to an additional 45 days) in writing. We will provide the requested information covering the 12-month period preceding your request, as required under California law. We are not obligated to retain personal information for a single, specific purpose longer than reasonably necessary, and we do not provide information beyond the 12-month period unless legally required or we choose to do so voluntarily.

To verify your request, we may require information that matches what we have on file (such as your name, contact information, or account details).

You may also designate an authorized agent to make a request on your behalf. The agent must provide written proof of authorization and verify their identity.

If we deny your request, you may appeal our decision by contacting us at support@getwhizz.com. We will review your appeal and respond in accordance with applicable law.

4. Do Not Track and Global Privacy Control

Our websites and apps currently do not respond to “Do Not Track” browser signals. However, we do recognize Global Privacy Control (GPC) signals where applicable.

Whizz © 2026