Privacy Policy

Effective date: September 30, 2026
Last updated: October 1, 2026

Voltage HQ is a space for tending your inner world, so a lot of what you share here is personal. This policy explains, in plain language, what we collect, why, who helps us run things, and the choices you have. The short version:

• We collect what we need to run your membership, sessions and emails, and to understand how the site is used.
• What you write inside the tools is yours. We don’t sell it, we don’t use it for advertising, and you can delete it.
• We never sell your personal information, and we don’t share it for cross-context behavioral advertising.
• You can unsubscribe, download your data, correct it or delete it by writing to us.

Contents

• 1. Who we are and how to reach us
• 2. What we collect and where it comes from
• 3. Wellbeing and other sensitive information
• 4. We are not a healthcare provider
• 5. How we use information
• 6. Legal bases (EU and UK visitors)
• 7. Who we share information with
• 8. We don’t sell your information
• 9. Cookies, local storage and analytics
• 10. Emails from us
• 11. How long we keep information
• 12. Security
• 13. International visitors and transfers
• 14. Your privacy rights and how to use them
• 15. Children
• 16. Do Not Track and Global Privacy Control
• 17. Changes to this policy
• 18. Contact

1. Who we are and how to reach us

Voltage HQ (“Voltage,” “we,” “us,” “our”) is a paid, self-led wellness membership and a 1:1 session practice founded by Kristen Mackoul and operated by The Kris Collective LLC, a Florida limited liability company based in Miami, Florida, USA. This policy covers joinvoltage.co, the member hub and tools, our emails, and our 1:1 LightSource sessions (together, the “Service”).

For anything privacy related, email support@joinvoltage.co (subject “Privacy”) or write to The Kris Collective LLC, Attn: Privacy, 7990 Baymeadows Road East, Unit 1801, Jacksonville, FL 32256. For the purposes of EU and UK data protection law, The Kris Collective LLC is the “controller” of your personal data.

2. What we collect and where it comes from

We collect information in three ways: what you give us, what’s created automatically when you use the site, and what our service providers send back to us.

2.1 Email sign-ups, quizzes and free resources

When you sign up for our emails, take a free quiz or assessment (such as the Love Capacity Quiz or the Energetic Architecture Assessment), try the free Rewire Room round, or ask for the LightSource “Session Files,” we collect your email address and, where the form asks, your first name. We also record which form you used and, if you arrived from one of our blog posts, which post, so we know what’s helpful.

Your quiz answers and results are calculated in your browser to show you your result. We do not attach your individual quiz answers to your email address. We do record summary usage events (for example, that a quiz was started or finished) as described in Section 9.

2.2 Your account and membership

When you create an account or buy a membership, product or session, we collect your username, email address, password (stored in scrambled, hashed form; we can’t see it), name if you give it, the plan or product you bought, your membership dates and status, discount codes used, and your order history. If you add a profile photo, we store it (see Section 12 about how profile photos are stored).

2.3 Payments

Payments are processed by Stripe. Your full card number goes directly to Stripe and never touches our servers. We receive limited details from Stripe such as the card brand, last four digits, expiration date, billing country or postal code if collected, and the status of each payment. Stripe also collects device and fraud-prevention information under its own privacy policy.

2.4 Inside the member tools

The member hub includes interactive tools such as Inner Atlas, the Rewire Room, The Arcana, The Code, Lunar Oracle, the Energetic Field Reading and Pattern Pulse. Depending on the tool, you might enter reflections, journal-style entries, check-ins about how you’re feeling, intensity ratings, intentions, values, tarot questions, and birth date, time and place (for the astrology features).

• Where it lives. Tool entries are saved in your browser’s local storage on your device, and are also backed up to your Voltage account so they aren’t lost if you clear your browser or switch devices.
• Who can see it. Your tool entries are private to your account. They are not visible to other members. Like any website operator, our administrator and hosting provider technically have access to the database the backup lives in; we access it only when needed to support you, keep the Service secure, or meet a legal obligation.
• Generated responses. Some tools (for example, the guided dialogue in Inner Atlas and parts of the Rewire Room, The Arcana and The Code) create responses to what you type. To do that, the text you enter in that tool, along with your first name or intention if you’ve given them to the tool, is sent to an artificial-intelligence (AI) language model provided by Anthropic, which generates the response and returns it to you. These responses are written by software, not by Kristen or any other person, and they are not therapy or professional advice. We send your text without your email address or account ID. See Section 7 for who that provider is and the limits on how it can use your text.
• Birthplace lookup. If you enter a birth city in Lunar Oracle, the place name you type is sent from your browser to OpenStreetMap’s Nominatim location service to find its coordinates and time zone.
• Deleting it. You can clear a tool’s data from inside the tool, which also removes the backup, or ask us to delete everything (Section 14).

2.5 The Atmosphere (members’ community space)

When you post, reply, react, bookmark or ask a question in the Atmosphere, including our live Q&A, we store what you post, the time, and your display name and profile photo, which are shown to other members next to your post. Anything you post in the Atmosphere is visible to other members, so please don’t share anything there you want kept confidential, and don’t share other people’s private information. We may also record which posts you’ve read so we can show you what’s new.

• Asking anonymously. In Questions you can choose to ask anonymously. Other members then see “Anonymous” instead of your name and photo. Kristen can still see who asked, so she can respond and, if needed, support your safety. We still store the question with your account.
• How Kristen is notified. When a member asks a question or replies in a thread Kristen has answered, a notification with the question’s text and the asker’s first name (or “Anonymous member”, with the first name visible only to Kristen) is sent to Kristen through Telegram, using a small service we run on Cloudflare. Your email address and account ID are never sent.
• Replies. Kristen reads and answers questions herself. Occasionally she may ask an AI writing assistant (Anthropic’s Claude) for a first draft of a reply; when she does, the question’s text and your first name are sent to it, never your email or account ID. Kristen reviews and edits every reply before it’s posted, and every reply is posted by her.
• Weekly readings. Kristen pulls the cards for the weekly Atmosphere reading herself. An AI writing assistant may help draft the reading from her pull; she reviews and approves every reading before it’s scheduled. Readings never include anything members have posted.

2.6 1:1 LightSource sessions

If you book a LightSource session, we collect your booking details (name, email, chosen time, and anything you write in the booking form) through our scheduling provider, and the answers you give in our intake form, which is hosted on Google Forms. The intake form asks for your name, email, birthday and gender; what drew you to the session and what you’d like to release, shift or bring clarity to; how emotionally supported you feel right now (on a 1–10 scale); which healing practices you’ve tried before (for example talk therapy, bodywork or plant medicine); your consent to muscle testing during the session; and whether you’re comfortable with Kristen anonymously sharing parts of your experience on social media (we only do this if you say yes, and never with your name). Sessions take place over Google Meet. We do not record sessions. After your session Kristen sends you a personalized written recap of what was released, and keeps a copy along with your intake answers to support continuity if you book again.

2.7 Messages and support

If you email us or reply to our emails, we keep the conversation and whatever you include in it so we can help you.

2.8 Information collected automatically

When you visit the site, our servers and service providers automatically receive standard technical information: your IP address, browser and device type, operating system, pages visited, referring page, the date and time of each request, and approximate location derived from your IP address. We use cookies and similar technologies, explained in Section 9. We also count things like how many people visit the pricing page, start a quiz or reach checkout, and we note when a signed-in visitor reaches checkout without finishing so we can follow up once (Section 10).

2.9 Social media

If you interact with us on Instagram, Threads, TikTok or other platforms, those platforms share information with us under their own policies (for example, your handle and messages you send us). We link to these platforms from our site; clicking a link takes you to them.

3. Wellbeing and other sensitive information

Much of what you might share with Voltage, such as how you’re feeling, what you’re working through, emotional patterns, and answers in quizzes and tools, can reveal things about your emotional and mental wellbeing. Some laws treat this as “sensitive” information or “consumer health data.” We treat it with extra care, wherever you live:

• You choose what to share. Entering this kind of information is always optional. You can use most of the Service while keeping entries brief or general.
• We ask first. By choosing to enter wellbeing information in a tool, quiz, community post or intake form, you consent to us collecting and using it for the purpose of that feature. The first time you open an interactive tool, we show a short notice explaining how your entries are handled and ask you to continue.
• We use it only to provide the feature you’re using, to back it up for you, to support you if you ask for help, and to keep the Service safe. We don’t use it to build advertising profiles, and we don’t use it to make decisions about you that have legal or similarly significant effects.
• We never sell it, and we never share it for advertising.
• Service providers receive it only when needed to deliver the feature (for example, the AI provider that generates a response to what you typed), under contracts or terms that restrict their use of it.
• Analytics are set up to measure how features are used, not what you wrote or how you felt (Section 9).
• You can delete it at any time, from inside the tool or by writing to us.
• We don’t collect precise geolocation, biometric, or genetic data. Birth date, time and place are used only to calculate your astrology chart.

Washington and Nevada residents: please also read our Consumer Health Data Privacy Policy, which explains how we handle “consumer health data” under Washington’s My Health My Data Act and Nevada’s consumer health data law.

4. We are not a healthcare provider

Voltage is a self-led wellness and personal-growth service. We are not a healthcare provider, and we are not a “covered entity” or “business associate” under HIPAA (the US health-privacy law). Information you share with Voltage is not a medical record and isn’t protected by HIPAA. We protect it under this policy and applicable privacy laws instead. Please don’t use Voltage to store medical records or information your doctor or therapist needs.

5. How we use information

We use personal information to:

• Provide the Service: create and run your account, give you access to the tools, vault and community, back up your tool data, and deliver sessions and products you buy.
• Process payments and manage subscriptions: charge renewals, send receipts and renewal reminders, handle refunds, apply discount and free-month codes, and prevent fraud.
• Communicate with you: service and account emails (receipts, password resets, renewal notices, changes to terms), member content emails such as the weekly Atmosphere reading and Lunarium updates, and, with your consent, newsletters and marketing emails.
• Support you: answer questions, troubleshoot, and respond to requests.
• Understand and improve Voltage: measure which pages, tools and emails are useful, fix bugs, and plan new features, mostly using aggregated or de-identified information.
• Keep the Service safe: rate-limit abuse, prevent spam sign-ups, protect accounts, moderate the community, and enforce our Terms.
• Meet legal obligations: tax and accounting records, responding to lawful requests, and establishing or defending legal claims.

We do not use your tool entries, quiz answers or community posts to train our own or anyone else’s artificial-intelligence models, and our AI provider (Anthropic) does not use them to train its models under its commercial terms, and keeps them only for a limited period (currently up to 30 days) for safety and abuse monitoring unless the law requires otherwise. If we ever want to use your information for a purpose that’s materially different from what’s described here, we’ll ask you first.

6. Legal bases (EU and UK visitors)

If you’re in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases:

• Contract: to provide your membership, sessions, products and account, and to process payments.
• Consent: for marketing emails, non-essential cookies and analytics (where consent is required), and for wellbeing information you choose to enter. Where that information is “data concerning health” or other special-category data, we rely on your explicit consent (GDPR Article 9(2)(a)). You can withdraw consent at any time; this doesn’t affect what we did before you withdrew it.
• Legitimate interests: to keep the Service secure, prevent fraud and abuse, understand how the Service is used in aggregate, and follow up once on an unfinished checkout, balanced against your rights. You can object at any time.
• Legal obligation: to keep tax and accounting records and respond to lawful requests.

7. Who we share information with

We share personal information only with the service providers who help us run Voltage (often called “processors” or “service providers”), when the law requires it, or with your direction. Our service providers may use your information only to provide their services to us, and are bound by contracts or terms that require them to protect it.

7.1 Our service providers

We may add or change providers as Voltage grows. We’ll update this list when we do.

7.2 Other situations

• Other members see what you post in the Atmosphere, along with your display name and profile photo.
• Legal and safety. We may disclose information if we believe in good faith that the law requires it (such as a valid subpoena or court order), or that it’s necessary to protect someone’s life or safety, prevent fraud, or protect our rights, property or users.
• Business changes. If Voltage is sold, merged or reorganized, or its assets transferred, personal information may transfer to the new owner, who must honor this policy for information collected under it or give you notice and choices.
• With your direction. When you ask us to share something, for example with a practitioner you name.

8. We don’t sell your information

We do not sell personal information, and we do not “share” personal information for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA) and other US state laws. We have not done so in the past 12 months. We do not use or disclose sensitive personal information for purposes other than providing the Service you requested and the other purposes the law allows, so we don’t offer a separate “limit the use of my sensitive personal information” link. We do not knowingly sell or share the personal information of anyone under 16.

We do not run advertising pixels (such as Meta or TikTok pixels) on joinvoltage.co, and we keep Google Analytics advertising features, Google signals, and data sharing for ads personalization turned off.

9. Cookies, local storage and analytics

Cookies are small files a website stores in your browser. “Local storage” is similar storage on your device that holds larger amounts of data. Here’s what we use:

What analytics sees. We use analytics to understand things like how many people start and finish a quiz or tool, which pages lead to sign-ups, and where people get stuck. Analytics does not receive your name, your email address, or the text you write in the tools, and we don’t connect your analytics data to your account.

Your choices.

• You can block or delete cookies in your browser settings. Blocking strictly necessary cookies will stop login and checkout from working.
• You can opt out of Google Analytics across all sites with Google’s browser add-on.
• Clearing your browser’s site data removes local-storage tool data from that device. If you’re a member, your account backup remains until you clear it from inside the tool or ask us to delete it.

10. Emails from us

• Marketing emails (newsletters, quiz follow-ups, the free resources you asked for, offers) are sent through Flodesk only if you signed up or, where allowed by law, bought from us and didn’t opt out. Every marketing email has an unsubscribe link. Unsubscribing takes effect promptly (and in any case within 10 business days).
• Members are added to our member email list when they join so we can send member updates. You can unsubscribe from these at any time.
• Member content emails, like the weekly Atmosphere reading and Lunarium updates, are part of the membership. Each one includes a link to stop receiving them. You can ask us to stop them at any time.
• Unfinished checkout. If you’re signed in and start checkout but don’t finish, we may send you one reminder email. It includes a way to opt out of further marketing email.
• Service emails (receipts, password resets, renewal reminders, changes to our terms, security notices) aren’t marketing. We’ll send them as long as you have an account or active purchase.
• Email engagement (whether an email was opened or a link clicked) may be recorded by Flodesk to help us send less and better. You can limit this by turning off automatic image loading in your email app.

11. How long we keep information

We keep information only as long as we need it for the purposes in this policy, then delete or de-identify it. Our general timelines:

• Account and membership data: while your account is open, then up to 24 months after it closes (so you can come back without losing everything), unless you ask us to delete it sooner.
• Tool entries and backups: until you clear them in the tool, delete your account, or ask us to delete them. Deleted backups are removed from active systems right away and from routine hosting backups within 90 days.
• Payment and tax records: 7 years, as required for tax and accounting.
• Email list: until you unsubscribe; we keep a minimal record of your unsubscribe (your email address) so we don’t email you again.
• Session booking, intake and notes: 3 years after your last session, unless you ask us to delete them sooner.
• Atmosphere posts: until you or we remove them, or your account is deleted. Replies other members wrote remain, but your name is removed from your deleted posts.
• Analytics data: Google Analytics retains event-level data for 14 months; aggregate reports may be kept longer.
• Server logs: per our hosting provider’s standard schedule; we don’t use them to identify visitors except to investigate abuse or security issues.

We may keep information longer if the law requires it or it’s needed to resolve a dispute or enforce our agreements.

12. Security

We use reasonable administrative, technical and physical safeguards for a business of our size, including encrypted connections (HTTPS), hashed passwords, restricted administrator access, rate limits on sign-in and forms, and payment processing through Stripe so we never store card numbers. Keys to our service providers are kept on the server, not in your browser.

Please note: profile photos are stored as image files that can be viewed by anyone who has the direct link, so upload only a photo you’re comfortable being seen. No method of storage or transmission is 100% secure, and we can’t guarantee absolute security. Please use a strong, unique password and keep it private. If we learn of a security breach that affects your personal information, we’ll notify you and the authorities as the law requires.

13. International visitors and transfers

Voltage is based in the United States, and our service providers process information in the US and other countries. If you use Voltage from outside the US, your information will be transferred to, stored in and processed in the US, where data protection laws may differ from those where you live. Where EU, UK or Swiss law applies, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum) offered in our providers’ data processing terms, or providers’ certification under the EU-U.S. Data Privacy Framework, or, for transfers necessary to provide a service you asked for, the performance of our contract with you.

14. Your privacy rights and how to use them

Wherever you live, you can ask us to:

• Access the personal information we hold about you and get a copy in a portable format;
• Correct information that’s inaccurate;
• Delete your information (we may keep what the law requires, such as tax records);
• Stop marketing emails; and
• Withdraw consent you’ve given.

Many of these you can do yourself: update your profile on your account page, clear tool data inside each tool, cancel your membership from your account page, and unsubscribe from any marketing email. For anything else, email support@joinvoltage.co with the subject “Privacy Request.” We’ll respond within the time the law requires (generally 30 days in the EU/UK and 45 days under US state laws, which may be extended when the law allows) and won’t charge you unless a request is clearly excessive.

Verifying requests. To protect you, we’ll confirm your identity before acting, usually by asking you to reply from the email address on your account or to confirm details only you would know. You may use an authorized agent; we’ll ask for proof of their authority and may still need to verify your identity with you directly.

No discrimination. We won’t deny you service, charge you a different price or give you a different quality of service because you used your privacy rights.

14.1 EU, UK and Swiss residents (GDPR / UK GDPR)

You also have the right to restrict or object to our processing (including processing based on legitimate interests), and to data portability. You have the right to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner’s Office). We’d appreciate the chance to address your concern first.

14.2 California residents (CCPA/CPRA)

In the past 12 months we have collected these categories of personal information, from the sources and for the purposes described in Sections 2 and 5: identifiers (name, email, IP address, account username); customer records (billing details via Stripe); commercial information (purchases and membership history); internet or network activity (pages visited, feature usage); approximate location derived from IP address; audio/visual information (profile photo; live video during sessions, not recorded); inferences (quiz and tool results you choose to generate); and sensitive personal information (account login credentials; information about your emotional or mental wellbeing that you choose to share). We disclose these categories for business purposes to the service providers listed in Section 7. We do not sell or share personal information, and we use sensitive personal information only as permitted by law. Retention is described in Section 11.

You have the right to know, access, correct and delete, to opt out of sale or sharing (we don’t sell or share), and to limit the use of sensitive personal information (we already limit it). California’s “Shine the Light” law also lets you ask whether we disclosed personal information to third parties for their direct marketing; we don’t.

14.3 Other US states

Residents of Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, Virginia and other states with consumer privacy laws have rights similar to those above, including to confirm whether we process your data, access, correct (where available), delete, get a portable copy, and opt out of targeted advertising, sale, and profiling in furtherance of decisions that produce legal or similarly significant effects. We don’t do any of those three things. We process sensitive data only with your consent, which you can withdraw. Florida residents: we are not subject to Florida’s Digital Bill of Rights, but we offer the same choices described in this policy.

Appeals. If we decline your request, you can appeal by replying to our decision with the subject “Privacy Appeal.” We’ll respond within the time the law requires (generally 45–60 days) and explain our reasoning. If you’re still not satisfied, you can contact your state Attorney General.

15. Children

Voltage is for adults. You must be 18 or older to use the Service, create an account, take our quizzes or sign up for our emails. We don’t knowingly collect personal information from anyone under 18. If you believe a minor has given us information, email support@joinvoltage.co and we’ll delete it.

16. Do Not Track and Global Privacy Control

We honor Global Privacy Control (GPC) signals as a request to opt out of the sale or sharing of personal information and of targeted advertising. Because we don’t do either, receiving a GPC signal doesn’t change how the site works for you, but we treat it as a valid request for your browser. There’s no common industry standard for “Do Not Track” browser signals, so we don’t respond to them separately; our practices are the same whether or not you send one.

17. Changes to this policy

We may update this policy as Voltage changes or the law does. We’ll post the new version here with a new “last updated” date. If a change is material, especially one about how we use wellbeing information, we’ll tell you in advance by email or in the member hub, and where the law requires it, we’ll ask for your consent.

18. Contact

Questions, requests or concerns:
Email: support@joinvoltage.co (subject “Privacy”)
Mail: The Kris Collective LLC (Voltage HQ), Attn: Privacy, 7990 Baymeadows Road East, Unit 1801, Jacksonville, FL 32256, USA