Privacy Policy

Last updated: 3 May 2026

1. Who we are

VoltMate is operated by VoltMate EV, ABN 58 675 419 563, registered in New South Wales, Australia. Contact us at support@voltmate.app.

For UK users, VoltMate acts as a data controller under UK GDPR and the Data Protection Act 2018. Our ICO registration number is CSN2579618.

2. Data we collect

• Account details such as email address, name, plan, and account region.
• Tesla vehicle data authorised through Tesla Fleet API, including battery, charging, odometer, location, vehicle state, and Sentry-related state where available.
• Derived records such as trips, charging sessions, cost estimates, logbook tags, fleet assignments, automation rules, reports, and Sentry incidents.
• Usage, diagnostics, crash, and security event data needed to operate and protect the service.
• AI messages and AI insight context where the user has enabled AI features.

3. How we use data

We use data to provide the app, calculate charging and trip costs, generate reports, operate fleet workflows, send transactional messages, maintain security, and improve reliability. We do not use user data for third-party advertising or sale.

4. Regional storage

Core app records for United Kingdom users are stored in the UK/EU Supabase project. Some integrations may process limited data outside that region where required to operate the enabled feature, including Tesla, Apple, RevenueCat, Cloudflare, Resend, Expo, PostHog, Sentry, and AI providers.

5. Tesla access

VoltMate connects to Tesla through the official Tesla Fleet API after the user authorises access. VoltMate does not ask for or store Tesla account passwords.

6. AI features

AI features are designed around the user's own VoltMate data. Users can disable AI features, and sensitive prompts are processed through VoltMate-controlled server logic rather than relying on client-side instructions.

7. Fleet and accountant sharing

Fleet admins can access fleet vehicle, driver, trip, charging, and report data needed to manage the fleet. Driver personal vehicle data must remain separate from fleet admin access. Accountant links are scoped to the specific report shared with them.

8. User rights

Users can request access, correction, deletion, export, or restriction of their personal data by contacting support. UK users also have rights under UK GDPR, including the right to complain to the ICO.

9. Retention

We keep records only for as long as needed to provide the service, meet legal or tax record expectations, resolve disputes, protect security, and support requested exports. Users may request deletion where legally permitted.

10. Security

VoltMate uses region-separated data storage, row-level security, server-side entitlement checks, secure token handling, production log restrictions, and security headers on the public website. No security system is perfect, but our architecture is designed to reduce unnecessary exposure.