Legal

Privacy Policy

This policy explains what VoltaAMP collects, why, which providers process it and where, how long it is kept, and the rights you have over it under Jordan's Personal Data Protection Law.

Effective 18 October 2026

1.Summary

VoltaAMP is built to hold as little personal data as it can while it runs accounts, trip history, home charger rentals, and community reporting.

  • You can use the map, search, route planning, and turn-by-turn guidance without an account.
  • Trip recording is off until you switch it on, and you can delete any trip at any time.
  • Driver network is off until you switch it on. You choose each person who can see your live location, and VoltaAMP keeps only your latest position.
  • A home charger's exact address and phone number go only to members the host approves.
  • VoltaAMP runs no advertising, no third-party analytics, and no tracking, and never sells personal data.
  • Your data is stored outside Jordan, mainly in Germany, by the providers named in this policy.
  • You can download your data and delete your account yourself, at any time.

2.Who is responsible

VoltaAMP is operated by ALMA Studio, the controller of the personal data described in this policy. ALMA Studio publishes VoltaAMP on Google Play under the name ALMA Studios. VoltaAMP is run from Jordan, and Jordan is its primary market.

Our Data Protection Officer is Essam Alhyari. You can reach the Data Protection Officer about any question or request concerning your personal data through the privacy channel on the Contact page.

This policy is published in Arabic and English. Both texts have equal standing; if they differ, the Arabic text prevails in Jordan.

3.Using VoltaAMP without an account

You can browse the map and the station and service directories, search for places, plan routes, and follow guidance without an account. We do not ask who you are for any of this.

To answer a search, name a point on the map, or calculate a route, your browser sends the search text or the coordinates to our server, which forwards them to our routing provider without any account identity. These requests are not stored as a history.

Your browser loads map tiles directly from the map provider, which, like any website, sees your network address and the area you are viewing.

4.Your account and profile

When you create an account we collect only what the account needs. Optional profile fields stay empty unless you fill them in.

  • Account: your email address, the name shown on your contributions, a hashed password (never the password itself), email verification state, account role, and suspension state.
  • Consent records: which consents you gave (18 or older, the Terms of Use and this Privacy Policy, storage outside Jordan, and trip recording if you switch it on), the document version, the language, the date, and the date of any withdrawal.
  • Optional profile: display name, public handle, bio, city, country, preferred language, phone number, date of birth, and gender. Your phone number, date of birth, and gender are never shown to other members. A date of birth that shows you are under 18 is not saved; the Age section explains what happens instead.
  • Settings: profile visibility, notification preferences, and whether your reliability score is shown.
  • Sessions: the network address and browser description of each signed-in device and when the session started, so you can review and revoke it.
  • Sign-in and posting log: from 18 October 2026, the account identifier, the network address, and the time of each sign-in and of each item you publish or change — road events, check-ins, listings, location requests and host replies, reports, shared trips, Driver network messages, and your public profile. It records the kind of item and its number, never its text.
  • Reliability: a trust score and contribution counts calculated from how your contributions were confirmed or disputed.
  • Vehicles: nickname, make, model, year, usable battery capacity, estimated range, and connectors. A vehicle stays on your device unless you are signed in and choose to save it to your account.

5.Location

VoltaAMP uses your device's precise location only while you use a feature that needs it: Locate me, route planning, turn-by-turn guidance, and trip recording. You can refuse, and everything else keeps working. VoltaAMP never asks for your location when you are not using it.

Locate me is handled in your browser and is not sent to VoltaAMP. Route planning and guidance send the start, the stops, and the destination — during guidance, your live position — to our server and our routing provider to calculate the route.

VoltaAMP stores where you drove only if trip recording is on, as described in the next section.

Driver network live sharing also uses your location, only while you have turned it on and VoltaAMP is open, as described in the Driver network section. The web app never reads your location in the background.

6.Trip history

Trip recording is off by default. The first time you start guidance, VoltaAMP asks whether to record your drives, and your answer is recorded as a consent. You can switch recording off at any time in Profile › Trips.

While recording is on, VoltaAMP keeps the path your car takes during guidance: imprecise position fixes are ignored, a point is kept about every 20 metres, and the line is simplified. The drive so far is held on your device and uploaded when guidance ends; a drive interrupted by closing the app is finished on your next visit. Drives shorter than 200 metres and simulated drives are never saved.

You can also save a planned route to your history. Each trip stores its path, the plan (start, stops, destination, charging stops, and a snapshot of the vehicle used), its dates, and your optional title. VoltaAMP keeps your newest 200 trips, and you can delete one trip or all of them at any time.

Sharing a trip creates a link that you can revoke at any time. By default a shared trip hides its first and last 500 metres, names places only by area, and leaves out your title. You can choose to share the exact ends instead. A shared page never shows the time of day or your vehicle and is hidden from search engines.

7.Driver network

Driver network lets you share your live location with people you choose, see the people who share with you, send them emoji, and join a monthly leaderboard. All of it is off by default.

Turning live sharing on records its own consent. While sharing is on and VoltaAMP is open, your device sends your position to VoltaAMP at most every 15 seconds, and only after you have moved about 50 metres or a minute has passed. VoltaAMP rounds it to about 11 metres and keeps only your latest position, with its accuracy and direction of travel: each update replaces the previous one. Your position is deleted when you pause, when a timed share ends, when you turn sharing off, or about ten minutes after the last update, for example after you close the page. No history of your live positions is kept. Turning sharing off withdraws the consent.

Only people you invited, and who accepted, can see your position, and only while your sharing is on. Each invite link works once and expires after seven days; VoltaAMP stores only a one-way hash of it. You can stop sharing with anyone, and stop seeing anyone, at any time. A block ends sharing in both directions at once. While an account is suspended, its sharing is paused.

People who share with each other can send emoji from a fixed set of twelve. No text, numbers, links, or images can be sent. A message is kept until either of you clears the conversation, either of you stops sharing with the other, one of you blocks the other, or either account is deleted. You can report any message you receive.

If you join the leaderboard, other signed-in members see your display name and your points for the month. Points come from confirmed road events, confirmed check-ins, and applied station corrections; speed, trip times, and distance are never used. You can leave at any time.

Live positions are never used for analytics or advertising, are never written to logs, and are not shown to VoltaAMP administrators, who see only totals.

8.Community contributions

Road events and check-ins expire after a few hours. The expired record stays in your private history until you delete your account.

  • Road events: the type, severity, location, optional place name and description, and time. Other members see your name or handle next to the event according to your profile visibility.
  • Station check-ins: what you observed at a station, the connector, the queue time, an optional note, and the time. Check-ins are shown without your name.
  • Votes: your confirmations and disputes. Other members see only the totals.
  • Station corrections and missing-station suggestions: what you report, its location, and a name and email only if you choose to give them. They reach only the VoltaAMP team.
  • Before any text is published, VoltaAMP checks it automatically for abusive language and for contact or payment details, and asks you to change it if it finds any. No person reads your text at this stage.

9.Home charger rentals

If you list a home charger, VoltaAMP stores the title, description, connector, power, price, price notes, availability, amenities, photos, the charger's exact location and address, and an optional phone number.

The public map, the listing page, and the public feed show only an approximate point snapped to a grid of about 250 metres, and an area name. The exact location, the address, and the phone number are released only to a member whose request you personally approve, and you can revoke that access at any time. An administrator approving your listing gains no access to them.

Photos are re-encoded and stripped of their metadata, including any GPS position, before they are stored. They are kept with our storage provider, shown only on the listing once it is approved, and deleted when you delete the listing or your account.

When you ask a host for the exact location, VoltaAMP stores your request, your optional message, the host's optional reply, and the outcome. The host sees your name and message, never your email address.

The first time you read a home charger safety card, VoltaAMP records that you read it and which version, so the card is shown again only when its text changes.

10.Reports, blocks, moderation, and messages to us

The Community Content Policy explains how reports are handled and when repeated breaches lead to suspension.

  • When you report content, VoltaAMP stores your account — or, if you are signed out, a one-way keyed hash of your network address — the reason, your optional details, and a copy of the reported content. The member you report is never told who reported them.
  • When you block a member, VoltaAMP stores the block, where you made it, and the name you were shown there. The blocked member is not told.
  • Moderation decisions, warnings, and suspensions are recorded in an audit trail that names the administrator who acted.
  • When VoltaAMP removes your content, warns you, or suspends your account, it keeps the statement of reasons it gives you: the rule, a short excerpt of the content, the action, and the end of any suspension. If you appeal, it keeps what you wrote and the decision.
  • Reporting a Driver network message copies the emoji and the time it was sent into the report.
  • When you write to us on the Contact page, VoltaAMP stores the topic you chose, whether it is a complaint, your message, and the time — with your account if you are signed in, or the email address and optional name you give if you are not — together with our answer and how the case was closed. Your message, name, email address, and our answer are encrypted, and only the VoltaAMP team reads them. A request or complaint that reaches us another way, such as by email or phone, is recorded in the same way.
  • When an authority presents a legal order about an account, VoltaAMP records the order, its legal basis, what was disclosed and when, and whether the member was told. We tell you about an order concerning your account unless the order forbids it.

11.Why we use personal data

  • To create and secure your account, verify your email, and let you recover access.
  • To show charging stations, services, road events, check-ins, and home chargers, and to plan and guide routes.
  • To keep your trip history and your vehicles when you choose to.
  • To share your live location with the people you choose, and to deliver emoji between people who share with each other, when you turn Driver network on.
  • To run home charger rentals, including the host-controlled release of the exact location.
  • To calculate community confidence and reporter reliability.
  • To moderate content, prevent abuse and fraud, and enforce our terms, including the minimum age of 18.
  • To answer your questions, requests, and complaints, and to keep a record of how each complaint was handled.
  • To keep the service secure, available, and working correctly.
  • To meet legal obligations, including answering requests from Jordanian authorities that come with a valid legal order, for which we keep the sign-in and posting log.

12.Consent

VoltaAMP processes personal data on the basis of your explicit consent, given for each purpose. At sign-up you confirm that you are 18 or older, accept the Terms of Use and this Privacy Policy, and agree to storage outside Jordan. Trip recording asks for its own consent, and so will any later optional feature. Where Jordanian law requires or allows processing without consent — for example, to answer a valid legal order — we rely on that law.

The sign-in and posting log does not rest on your consent and cannot be switched off: VoltaAMP keeps it for every account so that it can answer valid legal orders under Jordanian law, such as those under Article 33 of the Cybercrime Law No. 17 of 2023. It is handed over only against such an order.

Driver network live sharing asks for its own consent when you turn it on, separate from trip recording, and turning sharing off withdraws it.

You can withdraw a consent at any time. Withdrawal does not affect processing that already took place. A feature cannot work without the consent it depends on: an account cannot exist without the sign-up consents, so withdrawing them means deleting the account.

13.Cookies, local storage, and offline caches

VoltaAMP sets one strictly necessary session cookie when you sign in. Local storage on your device keeps your vehicle, your interface settings, and — while trip recording is on — the drive in progress until it is uploaded. An offline cache keeps the public map shell and map tiles.

No account page, admin page, or API response is written to the offline cache. The Cookie and Storage Notice lists each item and how to clear it.

14.Who processes your data

We do not sell personal data, we do not share it for advertising, and we do not send it to artificial-intelligence services. These providers process it on our behalf, each only for its part of the service:

  • Neon, our database provider, running on Amazon Web Services in Frankfurt, Germany: all account, trip, contribution, listing, and moderation records.
  • Netlify, our hosting provider (United States, global network): serves the application and processes every request, including your network address. From that address Netlify works out your approximate country and region, which VoltaAMP uses only to decide whether it may offer the satellite map type where you are, because Esri's licence excludes some countries; it is not stored.
  • Cloudflare: stores listing photos in its European Union region, and runs the Turnstile bot check on public forms once it is switched on.
  • HeiGIT, the operator of openrouteservice (Heidelberg, Germany): receives search text and coordinates for searches, place names, and routes, without your identity.
  • OpenFreeMap: serves the map tiles your browser loads. If you choose the terrain or satellite layer, OpenTopoMap or Esri serve those tiles.
  • Resend (United States): will send verification and password-reset emails. It is not active yet.

15.Storage outside Jordan

Your personal data is stored and processed outside Jordan: the database is in Germany, and several providers are based in the United States or run global networks. You agree to this at sign-up. We use only providers that commit to protecting personal data, and we keep a record of the safeguards each one offers, as Jordan's Personal Data Protection Law requires.

16.How long we keep it

  • Account, profile, vehicles, and consent records: until you delete your account.
  • An account suspended because its holder is under 18: until the appeal period ends or the appeal is decided, then deleted as the Age section explains.
  • Sessions: until the session expires, you sign out, or you revoke it.
  • Sign-in and posting log: 12 months from each entry, also after you delete your account, then deleted.
  • Trips: until you delete them; only your newest 200 are kept. A share link lasts until you revoke it.
  • Driver network live position: only the latest one, deleted when sharing pauses, ends, or is turned off, or about ten minutes after its last update.
  • Driver network connections and invites: a connection lasts until either of you removes it, one of you blocks the other, or an account is deleted. Invite links are removed 30 days after they expire.
  • Emoji messages: until either of you clears the conversation, sharing between you ends in either direction, one of you blocks the other, or an account is deleted. A reported message is copied into the report.
  • Road events and check-ins: they expire after a few hours and stay in your private history until you delete your account.
  • Listings, photos, and location requests: until you delete the listing or your account. Photos are deleted from storage at the same time.
  • Blocks: until you unblock the member or delete your account.
  • Reports: until they are decided, then for 12 months after the decision. A report keeps its copy of the reported content for that time, even if the author deletes the content or the account.
  • Statements of reasons and appeals: until you delete your account. The audit trail keeps its own record of each decision.
  • Safety card records: until you delete your account.
  • Station corrections and suggestions: kept with the moderation record. A name or email you chose to give is used only to follow up on the report, and we delete it on request.
  • Messages to us: until 12 months after the case is closed. Then your message, name, email address, and our answer are deleted, and only the date, topic, channel, outcome, and the time it took stay in our complaints record, linked to your account only while it exists. You can ask us to delete them sooner once the case is closed.
  • Abuse-prevention data: a one-way hash of a network address stays with the report it belongs to; rate-limit counters, which hold a network address or an account for a short time window, are removed in regular clean-ups.
  • Hosting request logs: kept by our hosting provider for its standard short period, for security and diagnostics.
  • Administrative audit records: kept permanently so that they stay tamper-evident. They may include the email address an account had when it was sanctioned.
  • Records of authority requests: kept permanently, like other administrative audit records.
  • Backups: our database provider keeps a restore history of up to seven days. Deleted data can remain in that history until it rolls out of the window. Listing photos have no backup copies.

17.Your rights

Under Jordan's Personal Data Protection Law No. 24 of 2023 you have these rights over your personal data:

  • Access: to know what we hold about you and to receive a copy.
  • Rectification: to correct data that is inaccurate or incomplete.
  • Erasure: to have your data deleted, except records the law requires us to keep.
  • Restriction and objection: to limit or object to particular processing.
  • Portability: to receive your data in a structured, machine-readable file.
  • Withdrawal of consent: at any time, for any purpose that relies on it.
  • Complaint: to complain to the Personal Data Protection Unit in Jordan.

18.Using your rights

Most rights take effect immediately, without asking us. In Security and privacy you can change your email and password, review and revoke sessions, sign out everywhere, manage blocked members, download all your data as a file, and permanently delete your account. Profile › Trips lets you switch trip recording off and delete trips.

Deleting your account removes your profile, vehicles, consent records, trips, listings and their photos, location requests, road events, check-ins, votes, blocks, statements of reasons and appeals, safety card records, and sessions. Reports, station corrections, and messages you sent us stay, without your account attached, for the periods above, and station records already corrected because of an approved contribution stay without your identity. The sign-in and posting log stays for the rest of its 12 months.

For anything else, write to our Data Protection Officer through the privacy channel on the Contact page. We may ask you to confirm your identity before we act on a request.

19.Security

Data travels over encrypted connections, and our database provider encrypts it at rest. Passwords are stored only as hashes. Database credentials never reach your browser, every request that reads or changes private data is authorised on our server, and administrator access requires two-factor authentication.

If a serious breach affects your personal data, we will tell you within 24 hours of discovering it and notify the Personal Data Protection Unit within 72 hours.

20.Age

VoltaAMP accounts are only for people aged 18 or older. The map, search, route planning, and guidance can be used without an account.

The date of birth in your profile is optional. If you enter one that shows you are under 18, VoltaAMP does not save it. It suspends the account permanently instead, signs it out on every device, and shows you a statement of reasons that you can appeal within 14 days — for example, if you mistyped the date.

If you do not appeal, or your appeal does not change the decision, we delete the account and everything it holds, including its content and listing photos, and we erase the messages you sent us; only their line in our complaints record stays. The suspension and the deletion are recorded in the moderation audit trail, and the sign-in and posting log keeps its entries for the rest of their 12 months.

If you believe someone under 18 has an account, report their content or tell us through the Contact page. When a report or a message shows that a member is under 18, our moderators apply the same rule: the account is suspended in the same way, with the same right of appeal, and then deleted.

Our Child safety standards explain how we prevent, detect, and act on child sexual abuse and exploitation. You can read them on the Child safety page.

21.Changes to this policy

Each version of this policy shows the date it takes effect. We keep every earlier version and provide it on request.

We announce a material change — such as a new purpose, a new kind of provider, or weaker protection for you — in the app, and by email once email delivery is active, at least 14 days before it takes effect. If a change adds a purpose that needs your consent, we ask for that consent again, and you can keep using everything that does not depend on it.

22.Contact

Operator: ALMA Studio. Data Protection Officer: Essam Alhyari. Privacy questions and requests go through the privacy channel on the Contact page.