Effective Date: May 12, 2026 · Last Updated: November 2, 2026
This Privacy Policy describes how Volted Labs, LLC ("Volted," "we," "us," or "our") collects, uses, discloses, and protects your personal information when you use the Volted mobile application, our website at volted.app, and any related services we offer (collectively, the "Service").
By using the Service, you agree to the practices described in this Privacy Policy.
Age requirement: The Service is intended for users 16 years of age and older. If you are under 16, do not use the Service.
Volted Labs, LLC is a California limited liability company.
We collect information in three ways: information you give us, information collected automatically, and information from third-party sign-in services.
This data is collected primarily through Google Firebase / Google Analytics for Firebase.
Volted's own servers keep four things about each device you sign in from: the platform (iOS, Android or web), the app version, the push notification token used to deliver reminders, and the IP address, for account security. Turning reminders off stops the messages but keeps the token, so turning them back on works right away. Tokens are removed when you sign out on that device or delete your account.
App analytics. The app records how it is used (for example, screens opened, programs started, and workouts completed or moved) so we can improve it. These events are linked to your Volted account ID, not your name or email. They never include body measurements or their values, data from Apple Health or Health Connect, or medical information. The app does not collect the advertising identifier (Apple IDFA / Google AAID), does not track you across other companies' apps or websites, and does not ask for permission to track. When you delete your account, we ask Google to delete the analytics data linked to your account ID.
Crash reports. When the app crashes or hits an unexpected error, Firebase Crashlytics sends an anonymous crash report: device model, operating system and app version, the screen that was open, and technical details of the error (for a server error, only the request path and status code). Crash reports are not linked to your account and never include your name, email, answers or workout details. Google keeps them for up to 90 days, then deletes them automatically. Google Analytics also records that a crash happened, without its details, linked to your account ID like other app analytics.
We use your information to:
We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. We do not deliver targeted ads in the Service.
Some content within the Service — including images, exercise descriptions, and certain coaching materials — may have been generated, edited, or assisted by artificial intelligence tools.
We use commercially licensed AI services (such as Adobe Firefly and OpenAI's DALL-E) that provide intellectual property indemnification to their customers. AI-generated content is reviewed by humans before publication where reasonably practicable. We do not represent that AI-generated content is free from inaccuracies, and you should not rely on it as professional advice.
We do not use your personal data to train third-party AI models.
The following third-party services help us operate the Service. Each has its own privacy policy, which we encourage you to review:
| Service | Provider | Purpose |
|---|---|---|
| Firebase / Google Analytics for Firebase, Firebase Crashlytics | Google LLC | Analytics, crash reporting |
| Apple Sign-In | Apple Inc. | Authentication |
| Google Sign-In | Google LLC | Authentication |
| Cloud hosting | Google Cloud Platform | Application and database hosting |
Services we do NOT currently use: Sentry, Mixpanel, PostHog, Amplitude, Segment, RevenueCat, Stripe (Stripe will be added for paid features in the future and this Policy will be updated at that time).
We share information with these services only as necessary to operate the Service and under contractual obligations that restrict their use of your information.
We share your personal information only in these situations:
We retain your personal information for as long as your account is active or as needed to provide the Service.
If you delete your account, we will delete or anonymize your personal information within 45 days, except where retention is required by law (e.g., tax records, regulatory obligations) or necessary to resolve disputes or enforce agreements.
When you delete your account, we also ask Google to delete the app analytics data linked to your account ID. Anonymous crash and diagnostic data through Firebase Crashlytics is not linked to an account and is kept up to 90 days, then deleted automatically.
You can delete your account at any time from within the app settings, or by emailing help@volted.app.
Our website uses:
We do not use:
The mobile app uses Software Development Kits (SDKs) that collect usage data and Firebase Installation IDs for analytics, linked to your Volted account ID, and anonymous crash and diagnostic data through Firebase Crashlytics, not linked to an account, kept up to 90 days, as described in Section 2.2. The app does not collect the advertising identifier (Apple IDFA / Google AAID) and does not track you across other companies' apps or websites.
We do not respond to Do Not Track (DNT) browser signals, as there is no industry-standard interpretation of these signals. We minimize tracking by design regardless of DNT settings.
Regardless of where you live, you have the right to:
To exercise any of these rights, email help@volted.app. We will respond within 45 days, or longer if more time is reasonably necessary (we will notify you of any extension).
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):
To exercise any CCPA right, email help@volted.app with "CCPA Request" in the subject line. You may also designate an authorized agent to act on your behalf.
Categories of personal information collected in the past 12 months:
Categories disclosed for business purposes: All of the above to service providers (Firebase, Apple, Google) as described in Section 5.
Categories sold: None.
Washington residents have additional rights regarding consumer health data under the Washington My Health My Data Act (MHMDA). See our standalone Washington Consumer Health Data Privacy Notice for full disclosure of categories, sources, purposes, sharing, and Washington-specific rights.
Nevada residents may opt out of the sale of certain personal information. We do not sell personal information, so this right is automatically satisfied.
If you reside in Colorado, Connecticut, Virginia, Utah, or any other state with comprehensive privacy legislation, you have rights similar to those described above. Contact help@volted.app to exercise them.
If you reside outside the United States, additional rights may apply under your local laws (e.g., GDPR for EU/UK residents, including the right to lodge a complaint with your data protection authority). Contact help@volted.app for assistance.
We implement reasonable technical and organizational measures to protect your personal information, including:
However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security. If we become aware of a data breach affecting your personal information, we will notify you and applicable authorities as required by law.
The Service is not intended for users under 16 years of age. We do not knowingly collect personal information from anyone under 16. If we discover that we have collected information from a user under 16, we will promptly delete it.
Parents or guardians who believe their child under 16 has provided us with information should contact help@volted.app immediately.
We are based in the United States. If you access the Service from outside the US, your information will be transferred to, stored, and processed in the US. By using the Service, you consent to this transfer.
For users in the European Economic Area (EEA), UK, or Switzerland: where we transfer data internationally, we rely on appropriate safeguards including Standard Contractual Clauses where applicable.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be communicated via:
The "Last Updated" date at the top of this Policy reflects the most recent revision. Your continued use of the Service after changes constitutes acceptance of the updated Policy.
For any questions, requests, or concerns about this Privacy Policy or our data practices:
© 2026 Volted Labs, LLC. All rights reserved.