Mahindra Last Mile Mobility Limited (“we” “us” “our” “MLMML” “Company”) including its subsidiaries and affiliates (collectively referred to as “Mahindra Last Mile Mobility”) is committed to protecting the privacy and security of your personal data. Your privacy is important to us. This Privacy Policy (“Policy”) applies to the services offered by us to the users of the Mahindra NEMO Application ("you", "your" or “user”). This Policy shall be referred and read as an integral part of the Terms of Use of the Mahindra NEMO Platform and Application.

The scope of this policy is limited to the product and/or services provide by us within the territory of India and applies to users who request for these product and/or services within the Indian territory.

When you interact with us, we may collect different types of information from you based on the type of interaction.

“Personal Data” means any data about an individual who is identifiable by or in relation to such data. Any personal data provided by you will not be considered as private and confidential if it is freely accessible in the public domain like any comments, messages, blogs, available on social media platforms like Facebook, Twitter etc.

We endeavour to collect only such information that is reasonably necessary to perform our services for you, deliver our products to you or to respond to your enquiries.

3.1 Personal data we collect
1. User Registration Details:
   • Name and email address
   • Mobile number
   • Login Credentials
2. User generated Content
   • Comments
   • Feedback
   • Support and Inquires
3. Electronic Information:
   Our app makes use of cookies and other tracking technologies to collect information about you, the device you are using to interact with our app, and how you interact with our app. These tools may collect the following information about you and the device you are using during your visit on our app:
   • The IP address of the device used to access the app
   • The date and time of access
   • The location data of the device
   • Your devices operating system (shown by the user agent)
   • The type of device, if access is obtained through a mobile phone
   • The transmission protocol used

Where we receive personal data from you directly, then you will be responsible for ensuring that such data is given to us in compliance with applicable data protection laws.

There is no obligation to provide the personal data that we ask you for. However, if you do not provide your personal data, you will not be able to make use of all the features of this App or use the products and /or services offered thereon.

1. To provide you with our products and service to:
   • Make the Mahindra NEMO App and its services available to you and to further optimize and develop it for an improved user experience.
   • Use your Information to manage your account, to contact, communicate with you and to operate, improve, and deliver the services. We may use your information to give you a customized, interactive experience as you use our Mahindra NEMO Technology, if opted for.
   • Be able to recognize, prevent and investigate attacks on this application.
   • Provide you with relevant information regarding our products and services.
   • Contact you via email for surveys or feedback, if you opt in for the same.
   • Respond to queries or requests submitted by you when you want to exercise your rights with respect to your personal data that was given to us.
   • Transfer Data to third party service providers to get better insights to provide personalised and better services to you
   • Conduct data analytics, research, and diagnosis
   • To sort out any vehicle related concerns
   • To use or disclose data collected from mobile's location, contacts, and camera in the mobile application features
   • Discover and navigate nearby offerings based upon vehicles location.
   • Provide you navigation features such as trip planner, geofence, dealer locator etc
   • Provide you with gamification features such as score card, rankings etc
   • Provide you with emergency assistance.
   • To send app notifications
   • Provide you with vehicle alerts and reminders.
   • Provide you with driving, charging, maintenance insights.
   • Protect our rights and legitimate interests.
   • Comply with legal and regulatory obligations
   • Comply with obligations to public authorities
   • Enforce any legal right or claim.
   • Provide you with services & products you explicitly requested for, directly or through third- party service provider.
   • To use the data in an aggregated/compiled form to produce statistical/demographic analyses for marketing, strategy purposes. However, these will be used in ways that will not be able to identify you or link any specific information to an individual. Such aggregated information and results/analyses shall be our property, and you will not be entitled to any compensation for the use thereof.
   • For any other use as described in this Policy or at the point where we collect your personal data with your consent
   • To improve application performance, identify and fix bugs, and analyse user behaviour to enhance the user experience.
2. For our internal business purposes to:
   • Monitor the use of our app
   • To receive feedback to help in further development of our products and services
   • Manage your accounts, services, and other personalized features
   • Improve the user experience of the app
   • Be able to recognize, prevent and investigate attacks on this app
   • Protect our rights and legitimate interests

The Application may contain links to other apps whose privacy practices differ from those of MLMML. We have no control over such apps and are not responsible for the privacy policies/notices/statements or the content of such apps even if:

• You accessed the third-party app using links from our app; or
• You accessed our app using links from a third-party app.

If you provide your personal data to any third-party app, then the use of your personal data is governed by their privacy policies. This Policy applies to our Application only. We encourage you to be aware when you leave our Application and to read the privacy policies of other Apps that may collect your personal data.

We use your personal data only if we have a legal basis for doing so. We only use your personal data based on the following legal basis:

• In case, we wish to process your personal data for purposes other than the legitimate uses, we shall seek a specific consent from you prior to processing your personal data for such additional purposes.
• To process your information for legal and regulatory purposes, such as:
1. To ensure compliance with our legal obligations and to also comply with our obligations towards public authorities;
2. To enforce our terms and conditions;
3. For legal and compliance reasons, such as the prevention, detection, or investigation of a crime, loss prevention or prevention of fraud. We may also use Personal Data to meet our internal and external audit requirements and for information security purposes;
4. As otherwise described to you at the time of collection of your Personal Data.

As far as this is necessary for the purposes set out above, we will transfer your personal data to the following recipients who either have a need to know and who will process it for us based on our instructions and for no other purpose:

• 7.1 Mahindra & Mahindra group companies and potential partnerships: Our businesses around the world are supported by different teams and functions, and personal data will be made available to them if necessary, for the provision of product and/or services, account administration, sales and marketing, customer and technical support, and business and product development. All our employees and contractors are required to follow our data protection and security policies when handling personal data. Your personal data might also have to be shared in the event of a merger, sale, restructure, acquisition, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).

• 7.2 External service providers: Occasionally, to provide our product and/or services, it is necessary to collaborate with external service providers. We may use these service providers to assist us with some features of our application. These external service providers process your information on our behalf only insofar as it is necessary for them to provide their services to us. Our prior consent is required before they are permitted to transfer responsibility for processing personal data to a third party.

  We only transfer your personal data to recipients that have an adequate level of data protection by implementing appropriate technical and organizational security measures, or we take measures to ensure that all recipients provide an adequate level of data protection as prescribed by applicable law. We do not sell your personal data to anyone.

  Subject to your explicit consent, we may disclose or transfer your personal data to other data fiduciaries, strictly in accordance with the scope of such consent and in compliance with applicable data protection laws and regulations.

• 7.3 Courts and authorities: We will share personal data when this is required:
  • To comply with legal obligations and respond to requests from government agencies, including law enforcement and other public authorities.
  • To prevent or detect or investigate offences or cyber incidents or for the prosecution or punishment of offences.
  • To raise or defend against legal claims.
  • To protect our users, systems, and product and/or services.

We operate globally and may transfer your personal data to Mahindra Group affiliates or third parties in territories outside India for the purposes described in this Policy, provided that no such restriction is notified by the Central Government of India.

Notwithstanding the obligation on us to put in place all necessary means to maintain the accuracy of your personal data, you agree to provide us with accurate personal data at all times and you will notify us promptly upon any changes to your personal data.

We are strongly committed to protecting your privacy online and the security of your personal data. Accordingly, we implement appropriate technical and organizational measures in relation to the information and personal data that is processed by us.

While we endeavour to always protect our systems, app, operations and information against unauthorized access, use, modification, and disclosure, due to the inherent nature of the Internet, we cannot guarantee that any information, during transmission or while stored on our systems, will be absolutely safe and secure from intrusion by others.

You too have an important role in protecting your personal data. You should not share your user id, password or other authentication data provided to you with anyone. If you have any reason to believe that your user id or password has been compromised, please contact us as detailed below.

11.1 We respect your right to access and control your personal data, and we will respond to requests for information and, where applicable, will correct, update, or erase your personal data.

Please note that applicable law might require that we cannot comply with every request. We will be required to retain your personal data due to statutory retention requirements despite your request for erasure.

You have the following rights:
• The right to access information: At any point, you can contact us for a summary of personal data we hold about you, the processing activities undertaken, with whom this personal data is shared by us, and any other information related to your personal data.
• The right to request correction: If your personal data is incomplete, incorrect, or out of date, you can inform us about the inaccuracy, and your personal data will be updated.
• The right to request erasure: If you believe that we should discontinue the use of your personal data, you have the option to request the deletion of your personal data.
• The right of grievance redressal: We are committed to protect your personal data collected by us. In case of any act or omission of our obligation in relation to the personal data, we encourage you to contact us using the contact details provided in Section 13.
• The right to nominate: In the event of incapacity to exercise the rights, you can nominate any other individual to exercise such rights.
• The right to withdraw your consent to process personal data: You can withdraw/revoke your consent at any time, to the processing of your personal data for which consent was sought earlier. You can withdraw your consent easily by contacting us on the details given below in Section 13. The withdrawal of consent previously granted for the processing does not affect the lawfulness of the processing until the withdrawal. However, opting out will result in cessation of the respective services

11.2 We will need you to furnish proof of your identity before you can exercise these rights. MLMML may not be able to process any requests made in the event the user fails to identify themselves or if MLMML is unable to authenticate such a user. MLMML may also decline to process requests that are unreasonably repetitive, requiring disproportionate effort, jeopardizing the privacy of others, or would be extremely impractical.

MLMML shall not charge you for fulfilling any of the above requests. However, if the fulfilment of any such request leads to certain costs being incurred by MLMML, then MLMML will notify you prior to processing such request.

It is important that the personal data we hold about you is accurate and updated. Please write to us if the personal data given to us changes during the period for which we hold it.

We will retain your personal data which we have collected for as long as we reasonably consider it necessary for achieving the abovementioned purposes and as is permissible under applicable law. This is determined on a case-to-case basis. We will delete your personal data whenever you request us to do so. However, we may archive and/or retain your personal data for as long as there are statutory retention obligations or potential legal claims are not yet time barred.

We reserve the right to change this Policy at our sole discretion at any time. Any material changes to this Policy will be posted on this page. We encourage you to review this Policy regularly for such changes. The updated Privacy Policy will take effect as soon as it has been updated.

This Policy was last updated as of 10/11/25.

If you have questions or comments regarding this Policy or want to exercise any of your rights or express your grievances regarding the processing of your personal data, please contact us at [email protected].

MLMML shall not charge you for fulfilling any of your rights. However, if the fulfilment of any such request leads to certain costs being incurred by MLMML, then MLMML will notify you prior to processing such request.

We do not knowingly collect or solicit personal data from minors, and we do not knowingly permit such persons to register with the services or share information through any of the web forms without verifiable consent from minor’s parents or lawful guardians. If you believe that we might have any information from or about a minor, please contact us using the contact information provided in Section 13.

Further, we do not undertake tracking and behavioural monitoring of children or targeted advertising directed to minors.

The section is to be update with the manner in which a user may make a complaint to the Data Protection Board, in such manner and as may be prescribed, once the details are received by the board.