Privacy Policy

1. About Us

Volted Labs, LLC is a Delaware limited liability company.

• Registered Office: 131 Continental Dr, Suite 305, Newark, DE 19713, County of New Castle, USA
• Registered Agent (Delaware): Legalinc Corporate Services Inc.
• Website: https://volted.app
• General contact: help@volted.app
• Privacy contact: help@volted.app

2. Information We Collect

We collect information in three ways: information you give us, information collected automatically, and information from third-party sign-in services.

2.1 Information You Provide

• Account information — name, email address, date of birth (used to verify the 16+ requirement)
• Authentication credentials — managed through Apple Sign-In or Google Sign-In; we do not store passwords directly
• Profile information — fitness goals, training history, body weight, body fat percentage, height, training preferences
• Workout and training data — workouts you create or complete, sets, reps, weights logged, exercise selections, program enrollment, notes
• Photos — only photos you explicitly upload (e.g., progress photos). Currently stored in-app only and not shared externally
• Communications — messages you send us via support channels (email, in-app feedback)

2.2 Information Collected Automatically

• Device information — device model, operating system version, app version, language preferences, time zone
• Identifiers — device identifiers (Apple IDFA / Google AAID, when permitted), Firebase Installation IDs
• Usage data — features used, screens viewed, session duration, in-app interactions, error logs, and crash reports
• Performance data — app stability metrics, performance traces

This data is collected primarily through Google Firebase / Google Analytics for Firebase.

2.3 Information We Do NOT Collect

• We do not access your photo library outside of explicit user-initiated uploads
• We do not collect or process location data
• We do not access Apple HealthKit, Google Fit, or any other health platform (planned for future releases — separate consent will be required at that time)
• We do not record audio or video without explicit user action
• We do not access your contacts, calendar, or other on-device data
• We do not purchase personal information from data brokers

3. How We Use Your Information

We use your information to:

• Provide the Service — authenticate your account, deliver training programs, save your workouts, sync your progress
• Personalize your experience — recommend programs and content based on your goals and history
• Send service communications — account notices, security alerts, important updates to Terms or this Policy
• Operate and improve the Service — analyze how features are used, fix bugs, monitor stability, develop new functionality
• Detect and prevent abuse — identify fraud, abuse, harassment, security threats, or violations of our Terms
• Comply with legal obligations — respond to lawful requests from authorities, defend against legal claims

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. We do not deliver targeted ads in the Service.

4. AI-Generated and AI-Assisted Content

Some content within the Service — including images, exercise descriptions, and certain coaching materials — may have been generated, edited, or assisted by artificial intelligence tools.

We use commercially licensed AI services (such as Adobe Firefly and OpenAI's DALL-E) that provide intellectual property indemnification to their customers. AI-generated content is reviewed by humans before publication where reasonably practicable. We do not represent that AI-generated content is free from inaccuracies, and you should not rely on it as professional advice.

We do not use your personal data to train third-party AI models.

5. Third-Party Services

The following third-party services help us operate the Service. Each has its own privacy policy, which we encourage you to review:

Services we do NOT currently use: Sentry, Crashlytics, Mixpanel, PostHog, Amplitude, Segment, RevenueCat, Stripe (Stripe will be added for paid features in the future and this Policy will be updated at that time).

We share information with these services only as necessary to operate the Service and under contractual obligations that restrict their use of your information.

6. How We Share Information

We share your personal information only in these situations:

• With service providers acting on our behalf (e.g., hosting, analytics) under data-protection agreements
• For legal reasons — to comply with law, court order, subpoena, or government request; to enforce our Terms; to protect rights, property, safety, or the public interest
• Business transfers — if Volted Labs, LLC is acquired, merged, or transferred, your information may be transferred as part of that transaction. We will notify users and post an updated Policy before any change in data ownership takes effect.
• With your consent — for any other purpose disclosed to you and authorized by you

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service.

If you delete your account, we will delete or anonymize your personal information within 45 days, except where retention is required by law (e.g., tax records, regulatory obligations) or necessary to resolve disputes or enforce agreements.

You can delete your account at any time from within the app settings, or by emailing help@volted.app.

8. Cookies and Tracking Technologies

8.1 Website (volted.app)

Our website uses:

• Essential cookies — required for the website to function (e.g., session management, security)
• Analytics cookies — Firebase / Google Analytics to understand how visitors use the site (anonymized where possible)

We do not use:

• Advertising cookies
• Third-party tracking pixels
• Marketing cookies

8.2 Mobile App

The mobile app uses Software Development Kits (SDKs) that may collect device identifiers and usage data for analytics and crash reporting. You can limit some tracking by adjusting your device's privacy settings:

• iOS:Settings → Privacy & Security → Tracking → "Allow Apps to Request to Track"
• Android:Settings → Privacy → Ads → "Delete advertising ID"

8.3 Do Not Track

We do not respond to Do Not Track (DNT) browser signals, as there is no industry-standard interpretation of these signals. We minimize tracking by design regardless of DNT settings.

9. Your Privacy Rights

9.1 All Users

Regardless of where you live, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your account and associated personal data
• Export your data in a portable format (JSON or CSV)
• Object to certain processing activities

To exercise any of these rights, email help@volted.app. We will respond within 45 days, or longer if more time is reasonably necessary (we will notify you of any extension).

9.2 California Residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to know — what personal information we collect, how we use it, and to whom we disclose it
• Right to delete — request deletion of your personal information
• Right to correct — request correction of inaccurate personal information
• Right to opt out of sale or sharing — we do not sell or share personal information for cross-context behavioral advertising, so this right is automatically satisfied
• Right to limit use of sensitive personal information — your fitness, body composition, and training data may be considered sensitive personal information; we use this only to provide the Service to you and do not disclose it to third parties for any other purpose
• Right to non-discrimination — we will not discriminate against you for exercising your CCPA rights

To exercise any CCPA right, email help@volted.appwith "CCPA Request" in the subject line. You may also designate an authorized agent to act on your behalf.

Categories of personal information collected in the past 12 months:

• Identifiers (name, email, device IDs)
• Customer records (account information)
• Internet activity (app usage, interactions)
• Sensitive personal information (health/fitness data)

Categories disclosed for business purposes: All of the above to service providers (Firebase, Apple, Google) as described in Section 5.

Categories sold: None.

9.3 Washington Residents (My Health My Data Act)

Washington residents have additional rights regarding consumer health data under the Washington My Health My Data Act (MHMDA). See our standalone Washington Consumer Health Data Privacy Notice for full disclosure of categories, sources, purposes, sharing, and Washington-specific rights.

9.4 Nevada Residents

Nevada residents may opt out of the sale of certain personal information. We do not sell personal information, so this right is automatically satisfied.

9.5 Other US States

If you reside in Colorado, Connecticut, Virginia, Utah, or any other state with comprehensive privacy legislation, you have rights similar to those described above. Contact help@volted.app to exercise them.

9.6 International Users (EU/UK/Other)

If you reside outside the United States, additional rights may apply under your local laws (e.g., GDPR for EU/UK residents, including the right to lodge a complaint with your data protection authority). Contact help@volted.app for assistance.

10. Security

We implement reasonable technical and organizational measures to protect your personal information, including:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest where appropriate
• Restricted access to personal information (only authorized personnel)
• Authentication via established providers (Apple Sign-In, Google Sign-In)

However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security. If we become aware of a data breach affecting your personal information, we will notify you and applicable authorities as required by law.

11. Children's Privacy

The Service is not intended for users under 16 years of age. We do not knowingly collect personal information from anyone under 16. If we discover that we have collected information from a user under 16, we will promptly delete it.

Parents or guardians who believe their child under 16 has provided us with information should contact help@volted.app immediately.

12. International Data Transfers

We are based in the United States. If you access the Service from outside the US, your information will be transferred to, stored, and processed in the US. By using the Service, you consent to this transfer.

For users in the European Economic Area (EEA), UK, or Switzerland: where we transfer data internationally, we rely on appropriate safeguards including Standard Contractual Clauses where applicable.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be communicated via:

• In-app notification, or
• Email to your registered address, or
• Prominent notice on volted.app

The "Last Updated" date at the top of this Policy reflects the most recent revision. Your continued use of the Service after changes constitutes acceptance of the updated Policy.

14. Contact Us

For any questions, requests, or concerns about this Privacy Policy or our data practices:

• Email: help@volted.app
• General Support: help@volted.app
• Mail: Volted Labs, LLC, c/o Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, USA