Privacy Policy

VOLTR is a fitness marketplace operated by Inevara Pty Ltd (ABN [TBD — confirm with Inevara Pty Ltd before public launch]), a company incorporated in Australia (“Inevara”, “we”, “us”, or “our”). VOLTR is one of the SINGULARITY family of marketplace platforms operated by Inevara.

This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you use the VOLTR platform, accessible at app.voltr.fit and associated mobile applications (collectively, the “Platform”).

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (“APPs”). By creating an account or using the Platform you acknowledge you have read this Policy. If you do not agree, please do not use the Platform.

2.1 Account information

When you register, we collect:

• Full name and display name
• Email address
• Password (stored as a salted cryptographic hash — never in plain text)
• Mobile phone number (optional)

2.2 Fitness profile (consumers)

To enable AI-powered matching, we collect:

• Fitness goals and current fitness level
• Health conditions and injuries (disclosed voluntarily)
• Preferred training type and locations
• Service areas (suburb or postcode)

2.3 Wearable and biometric data

If you connect a wearable device (Apple Watch, Garmin, Fitbit, WHOOP, or Oura Ring), VOLTR may receive and store health metrics including resting heart rate, VO2 max, weekly activity minutes, sleep data, and training load scores. This data is used exclusively to improve trainer matching and is never sold to third parties. You may disconnect your wearable at any time from your account settings.

2.4 Provider profile information

If you register as a fitness professional, we also collect:

• Professional certifications and licence details (e.g. Certificate IV in Personal Training)
• Specialisations, training locations, and service areas
• Pricing and availability
• Profile and portfolio images (optional)
• Bank account details for payment disbursement (held by our payment processor)

2.5 Booking and transaction records

For every booking, we record:

• Date, time, service type, and duration
• Consumer and provider identifiers
• Booking status history
• Payment metadata (we do not store full card numbers)

2.6 Device and analytics data

We automatically collect technical information including IP address, browser type, device identifiers (anonymised), pages visited, and session data. We do not sell this data to third-party advertisers.

We use your information only for the following purposes:

• Creating and managing your account (contract)
• Processing bookings and payments (contract)
• Delivering AI trainer-matching results (contract / consent)
• Sending booking confirmations and reminders (contract)
• Fraud detection, security monitoring, and abuse prevention (legitimate interests)
• Analytics and product improvement using aggregate/de-identified data (legitimate interests)
• Complying with legal obligations
• Optional marketing communications, with your consent (opt-out any time)

We do not sell your personal information. We disclose it only:

4.1 With trainers upon booking

When you confirm a booking, your name, contact information, fitness goals, and relevant health notes are shared with the trainer. Trainers may not use this information outside the context of providing services through the Platform.

4.2 Payment processors

Payments are processed by third-party providers including Stripe and/or Paddle. We do not store full card details.

4.3 Infrastructure providers

We host the Platform on Amazon Web Services in Australia (Sydney region, ap-southeast-2). We have data processing agreements with AWS requiring them to process data only on our instructions.

4.4 Legal requirements

We may disclose information if required by law, court order, or regulatory direction, or where disclosure is necessary to prevent harm.

• Account and profile data: retained for the life of your account plus 24 months after closure.
• Booking and transaction records: retained for 7 years as required by Australian taxation law.
• Wearable data: retained until you disconnect your wearable or close your account.
• Device and analytics logs: retained for 13 months in identifiable form, then aggregated and de-identified.

• TLS 1.2+ encryption for all data in transit
• AES-256 encryption at rest for sensitive fields
• Passwords stored using cryptographic hashing (never in plain text)
• Role-based access controls and multi-factor authentication for administrative access
• Data stored in AWS ap-southeast-2 (Sydney) — Australian soil

If you believe your account has been compromised, contact us immediately at [email protected].

We use essential cookies to maintain your session and authentication state. We may use preference and analytics cookies with your consent. You can manage cookie preferences through your browser settings.

The Platform is not directed at individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. Contact us at [email protected] if you believe we have inadvertently collected information from a minor.

Under the Australian Privacy Principles and, where applicable, the GDPR, you have rights to:

• Access a copy of the personal information we hold about you
• Correction of inaccurate or incomplete information
• Deletion of your account and associated data (subject to legal retention obligations)
• Withdrawal of consent for marketing communications or wearable data processing at any time
• Complaint to the Office of the Australian Information Commissioner (OAIC)

To exercise any of the above rights, contact us using the details in Section 10.

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or wish to make a complaint, please contact our Privacy Officer:

We aim to respond to all privacy enquiries within 30 days.

We may update this Privacy Policy from time to time. When we make a material change, we will notify you by email and/or by a prominent notice on the Platform at least 14 days before the changes take effect.