Privacy Policy
Last updated: November 14, 2026
In short: we store the patrol data your workspace puts in, location is taken only when scanning a checkpoint or reporting an incident, there is no background tracking, no ads, and we do not sell data.
1. Who we are
Voltrus Genba is a service of PT Joyo Digitama Solusi, East Java, Indonesia ("we"). The service is the guard app (Android and iOS), the web console at app.genba.voltrus.id, and this site.
Data inside a workspace is entered and managed by the organisation that created the workspace, for example the security company or building manager you work for. That organisation decides who is registered and what the patrol data is used for; we process the data on its behalf to run the service.
2. Data we store
| Data | Contents | Source |
|---|---|---|
| Member account | Name, employee code, role (admin, supervisor, guard), phone number if entered, language, assigned sites. The PIN is stored only as a salted hash (PBKDF2), never in plain form. | Workspace admin |
| Sign-in sessions | Session token (stored hashed on the server), a random device ID created by the app, client type (app or web), last activity time, wrong-PIN count for temporary lockout. | App and console |
| Patrols and scans | Patrol start and end times; for each scan: checkpoint, time, method (QR, NFC or manual confirmation), location and its accuracy if location permission is granted, distance to the checkpoint, check flags, note and photo if any. | Guard app |
| Incidents and SOS | Category, severity, title, description, photos, location, and who acknowledged and resolved it. | Guard app and console |
| Photos | Checkpoint and incident photos: taken with the camera in the app or picked from the gallery (up to 5 per incident), resized on the phone (long side 1280 pixels) and re-saved as JPEG. Supervisors and admins can also add incident photos from the console. | Guard app and console |
| Notification token | Push token and device platform, only for supervisors and admins who allow notifications. | App |
| Site data | Site names and addresses, checkpoints, their coordinates, QR codes, NFC tag UIDs, routes and schedules. | Admins and supervisors |
| Technical data | IP address and request details in Cloudflare server logs, used for security, sign-in rate limiting and troubleshooting. | Automatic |
The app does not read contacts, the microphone, the IMEI or the advertising ID, and it does not browse your photo library: gallery photos come through the system photo picker, which only hands over the photos you select. It contains no third-party advertising or analytics SDK. This site uses no cookies or analytics.
3. Location
The app asks for location permission while the app is in use only. Location is taken at four moments: when a guard scans a checkpoint, reports an incident, presses SOS, and when a supervisor registers an NFC tag. There is no background tracking and no movement history. If permission is denied, the scan is still recorded with a "no location" flag.
4. Camera
The camera is used to scan QR codes (processed on the phone, the image is not sent) and to take the photos you choose to attach. The app does not record video or sound.
5. What the data is used for
- Running the service: recording patrols, working out round status and compliance, showing dashboards and reports to your workspace's admins and supervisors.
- Notifying supervisors about missed rounds, high-severity incidents and SOS.
- Security: PIN sign-in, a temporary lockout after 5 wrong PINs, sign-in rate limiting.
- Helping you when you contact support.
We do not use the data for advertising, do not sell it, and do not share it except with the providers in section 7 or when the law requires it.
6. Who can see the data
Members of the same workspace, by role: guards see their own patrols and reports; supervisors see the sites they are assigned to; admins see the whole workspace. Our team opens workspace data only when needed for support or security.
7. Service providers
- Cloudflare, Inc.: servers, database (D1) and photo storage (R2). The database and photo storage are placed in the Asia Pacific region.
- Expo (650 Industries, Inc.), Google Firebase Cloud Messaging and Apple Push Notification service: deliver notifications to supervisors' phones. They receive the push token and the notification text (for example a round name, or "SOS" with the guard's name and the site).
8. How long data is kept
- Patrol data, incidents and photos are kept while the workspace is active, as your organisation's security records.
- Sign-in sessions end after 60 days without use. Sign-in rate-limit records are deleted after 1 day, missed-round notification records after 7 days.
- A deactivated member is signed out on every device at once and cannot sign in again. Deleting a member's data or a whole workspace is done on request, within 30 days; see Delete account.
9. Security
All connections use HTTPS. PINs and session tokens are stored hashed. Photos can only be opened by signed-in members of the workspace. No system is immune, so tell us right away if you suspect misuse.
10. Your rights
Under Indonesia's Personal Data Protection Law (Law No. 27 of 2022) you may ask to access, correct and delete your personal data. Because the data is entered by the organisation you work for, contact your workspace admin first. You can also contact us directly; we will coordinate with the workspace admin.
11. Children
Voltrus Genba is a work tool for organisations and is not directed at children.
12. Changes
When this policy changes, the date above changes too. We tell workspace admins about important changes before they take effect.
13. Contact
PT Joyo Digitama Solusi, email support@voltrus.id, WhatsApp +62 896-8083-9591.