Voke
MenuClose

How Voke uses your Google data

What Voke reads from your Google account, what it does with it, who else receives it, and how to remove it.

Effective 9 October 2026

Voke is run by Rida F’kih, an individual in Alberta, Canada. For privacy questions about your Google data, email privacy@voke.co.

Our Limited Use statement

The use of information received from Google Health API and/or Developer Tools will adhere to the Google Health API Developer and User Data Policy, including the Limited Use requirements.

Connecting your Google account and Google’s consent screen are also covered by the Google API Services User Data Policy.

What Voke reads

If you connect your Google account, including data from Fitbit and Pixel Watch, Voke first shows you what it will collect and asks you to tap Agree and connect. Only after you agree in Voke does it ask Google for read-only access to three groups of Google Health data:

  • activity and fitness, such as steps, workouts and active minutes;
  • health metrics and measurements, such as heart rate and heart rate variability; and
  • sleep.

Google shows these groups on its consent screen, and you choose which to allow. Voke stores only the data types it uses within the groups you allow. It doesn’t ask for ECG, irregular rhythm or nutrition data, and it never writes anything to your Google account.

When you first connect, Voke imports up to 365 days of history. After that it keeps reading new data until you remove its access.

Voke doesn’t receive data from doctors, hospitals or other healthcare providers through Google.

What Voke uses it for

Voke uses your Google data only for features you can see in the app:

  • Showing it to you, including your scores, charts, trends and the events in your feed.
  • Sharing with your circles. The people you share with see only the categories and level of detail you choose. You can change or stop this at any time.
  • Ask Voke and the morning summary. AI features are off until you turn them on. Once they’re on, Voke sends the Google data a feature needs to an AI model so it can answer your questions in Ask Voke and write your morning summary each day. You can turn AI on or off with the “Use AI features” switch in your account settings.
  • AI apps you connect. If you connect an AI app, such as Claude or ChatGPT, it can read only the categories you approve on its own Allow screen on your phone. The connection is read-only.
  • AI for the people you share with. In each circle, you can turn on “Share with their AI” for each person, one at a time. If you do, that person’s Ask Voke, and the AI apps they’ve connected to Voke, can read what you share with them. It’s off unless you turn it on, and you can turn it off at any time.

Who receives it

Voke shares your Google data only with these recipients:

  • Amazon Web ServicesWhy: Hosts Voke’s servers, encrypted database and backupsWhere: The region you choose: Canada, Europe or the United States
  • Vercel (AI Gateway)Why: Routes Ask Voke and morning summary requests to an AI modelWhere: United States and other countries where Vercel operates
  • AI model providers reached through VercelWhy: Write Ask Voke answers and morning summariesWhere: United States, or the European Union for accounts hosted in Europe
  • People you share withWhy: See what you choose to shareWhere: Wherever they are
  • AI apps you connect, and AI apps of people you allowWhy: Read the categories you, or they, approvedWhere: Set by each AI company

Ask Voke and morning summary requests ask for zero data retention and no training on your data, and if a request can’t be served that way, it fails instead of going elsewhere. Under Vercel’s terms, some AI providers may still keep data for a short time to check for abuse. This processing can happen outside the region you chose: the AI model runs in the United States, and Vercel may route requests through other countries.

Before Ask Voke answers, it checks that your message is about health. Only the text of your own last 6 messages in that conversation, at most, is sent through Vercel’s AI Gateway to Jev, a model run by TypeSafe AI, asking for zero data retention. This check never receives your Google data.

AI apps that you or the people you share with connect aren’t covered by Voke’s zero data retention. The company that runs each app receives the data under its own privacy policy and retention rules.

Voke also discloses your Google data if the law requires it. If Voke is ever merged, sold or reorganized, it will ask for your consent before your Google data is transferred.

The full list of service providers is in section 6 of the privacy policy.

What Voke doesn’t do with it

Voke doesn’t:

  • sell your Google data, or transfer it to advertising platforms, data brokers or information resellers;
  • use it to serve ads of any kind, including personalized or interest-based ads;
  • use it to decide creditworthiness or for lending;
  • use it for research involving people;
  • use it to train AI or machine learning models, and the AI providers it uses can’t train on it either;
  • use it in any product or service that is, or could count as, a medical device; or
  • use Protected Health Information.

Voke isn’t a medical device and isn’t for diagnosing, treating or preventing any condition. Heart rate patterns and other events Voke shows are for general wellness only. Read the health disclaimer.

Nobody at Voke reads your Google data, except:

  • with your consent, which includes the people you choose to share with in your circles;
  • when it’s needed for security, such as investigating abuse;
  • to comply with the law; or
  • when the data has been aggregated and anonymized for running the service.

How Voke protects it

Voke’s server fetches your Google data over TLS, reads each page only in memory while it puts it into Voke’s format, and then seals it to keys only your devices hold. It stores only that ciphertext, on Amazon Web Services in the region you choose. After that, the server reads your Google data only in memory, under a short-lived key your phone lends it for a request.

Your Google refresh token is the one Google record the server can open itself, so it can fetch new data while your phone is asleep. It’s stored encrypted with AES-256-GCM under a separate key for your account, which AWS Key Management Service protects. Voke never stores Google’s access tokens. Read more on the security page and in section 13 of the security white paper.

Removing access and deleting your data

Removing access in Google. You can remove Voke’s access at any time in your Google account’s third-party connections. Voke then stops reading new data. Data Voke already imported stays in your Voke account.

Deleting imported data. Voke can’t yet disconnect Google and delete only your Google data from inside the app, or delete one category at a time. For now, the only way to delete data Voke has imported from Google is to delete your Voke account. To delete just your Google data without closing your account, email privacy@voke.co.

When you delete your account, Voke:

  1. signs you out everywhere and stops anyone seeing your data straight away;
  2. revokes its access to your Google account through Google;
  3. deletes your health data, Ask Voke chats, morning summaries and sharing settings, and destroys your account’s encryption key; and
  4. within 7 days, the last backup copy of that key expires, so any encrypted data left in backups can no longer be read.

While your account is open, Ask Voke chats are deleted 30 days after each message, and morning summaries are kept until you turn off AI features or delete your account.

Delete your Voke account

Age

Voke isn’t for anyone under 18. If you think a child has connected a Google account, email privacy@voke.co and we’ll delete the data.

More information