Voke
MenuClose

Consumer health data notice

What health data Voke collects, why, who receives it, and how to see, delete or stop sharing it.

Effective 9 October 2026

Voke is run by Rida F’kih, an individual in Alberta, Canada, who is responsible for this notice and is Voke’s privacy officer. Voke has no parent company, subsidiaries or other affiliates. For anything on this page, email privacy@voke.co.

This notice is written for Washington’s My Health My Data Act, Nevada’s consumer health data law (NRS 603A.500 to 603A.590), the Connecticut Data Privacy Act and similar US state laws. We apply it to everyone who uses Voke, wherever you live. The privacy policy covers the rest of the personal data Voke handles.

What we collect

Voke collects health data only from sources you connect and only the types you allow. Depending on what you allow, it can include these categories:

  • Sleep: sleep stages and the times you were asleep and in bed.
  • Heart: heart rate, resting heart rate, heart rate variability, time in heart rate zones and VO2 max.
  • Vitals: blood oxygen, breathing rate, and wrist or skin temperature while you sleep.
  • Activity: steps, distance, floors climbed, active and resting energy burned, and active, zone and sedentary minutes.
  • Workouts: workout type, start and end time, effort, and the energy and distance recorded.
  • Body: weight.

Voke doesn’t read nutrition, cycle tracking or other reproductive health data, ECG or irregular rhythm results, blood pressure, blood glucose, or mood. If that changes, we’ll update this notice and ask for your consent first.

We also collect:

  • What Voke works out from that data: daily summaries, scores, naps, heart events and activity entries.
  • Which device or app each reading came from, such as “Apple Watch” or “Fitbit”, so the same thing isn’t counted twice.
  • Health data in your AI features: the questions you ask Ask Voke, its answers, and your morning summaries, which can describe your health.
  • Who has read your health data: a log of each time a person or an AI read it, with the categories, level of detail and dates.

Voke doesn’t collect your location, and it doesn’t use geofencing. Voke’s servers never receive workout routes: the app draws them on your iPhone.

To show a workout’s map, the Voke app reads its route from Apple Health on your iPhone, and the route never leaves your iPhone. Apple Maps draws the streets around it, so Apple sees which area the map shows. To name the place, the app asks Apple’s geocoder on your iPhone about one point of the route, so that point goes to Apple, not to Voke.

Where it comes from

  • Apple Health on your iPhone, after you tap Agree and connect in Voke and allow each data type. Apple Health can hold data from Apple Watch and from other apps and devices that write to it.
  • Your Google account, if you connect it, tap Agree and connect in Voke, and approve Google Health data on Google’s consent screen. This can include data from Fitbit and Pixel Watch.
  • You, when you ask Ask Voke a question.
  • Voke itself, which works out summaries, scores and events from the data above.

Why we collect it and how we use it

We use consumer health data only to:

  1. show you your own data, scores, trends and feed;
  2. show the categories you choose to the people you choose in your circles;
  3. answer your questions in Ask Voke and write your morning summary, if you turn AI features on;
  4. let AI apps you connect, and the AI of people you allow, read the categories approved;
  5. keep a log of who read your data, so we can tell you who has seen it;
  6. keep your account secure, for example by checking that uploads come from your own iPhone and by stopping misuse;
  7. run and fix the service, for example finding out why a sync failed;
  8. send service notifications, such as telling you an AI app was connected. Notifications never contain health values. If you turn on circle alerts, only the members you choose are told that something changed, not what, and Apple delivers that notification; and
  9. meet legal obligations.

We don’t use your data for advertising, to decide anything with legal or similarly significant effects on you, or to train large language models or other AI models. The AI providers we use aren’t allowed to train on it either.

We collect and share consumer health data only with your consent, given separately for each step:

  • Collecting: before Voke collects from a source, it shows you what it will collect and you tap Agree and connect. Then you allow each Apple Health data type on your iPhone, or each Google data group on Google’s consent screen. If you connected a source before Voke asked for this, Voke asks you once in the app, and you can tap Not now to pause collection from it until you agree.
  • Sharing with people: nothing is shared until you join or create a circle and pick a category and level of detail. When you set up Voke, nothing is selected at the sharing step, and tapping Continue with nothing ticked shares nothing.
  • Your AI apps: you approve each AI app on its own Allow screen on your phone and choose which categories it can read. The company that runs it receives the data under its own privacy policy.
  • Other people’s AI: in each circle, the “Share with their AI” switch for each person is off until you turn it on. It covers only that person.

AI features are off until you turn them on. Once you turn them on, Voke sends the health data needed to answer your Ask Voke questions and write your morning summary to Vercel and an AI model provider, and your Ask Voke messages to TypeSafe AI to check they’re about health. They process it for us (see below). You can turn this off at any time with the “Use AI features” switch in your account settings.

  • Stop collection: tap Not now when Voke asks you to agree to collection from a source, or remove Voke’s access in the Health app (Settings, Health, Data Access & Devices, Voke) or in your Google account’s third-party connections. Voke stops reading new data. Data it already imported stays in your account until you delete your account, or until you ask us to delete it by email. Deleting your Voke account stops all collection and deletes the data. You can’t yet disconnect a source and delete its data from inside Voke.
  • Stop sharing with people: lower a category to none, remove someone, or leave or delete a circle. They lose access straight away.
  • Stop AI: disconnect an AI app in your account settings, turn off “Share with their AI” for a person, or turn off “Use AI features”. Turning off AI features disconnects your AI apps, stops everyone’s AI from reading your data, and deletes your Ask Voke chats and morning summaries.

Who receives it

We don’t sell consumer health data, and we don’t share it for targeted advertising.

Service providers (processors)

These companies process consumer health data only on our behalf, under contract, to run Voke:

  • Amazon Web ServicesWhat it does: Hosts Voke’s servers, encrypted database, backups and encryption keysWhere: The region you choose: Canada, Europe or the United States
  • Vercel (AI Gateway)What it does: Passes Ask Voke and morning summary requests to an AI model providerWhere: United States and other countries where Vercel operates
  • AI model providers reached through VercelWhat it does: Write Ask Voke answers and morning summariesWhere: United States, or the European Union for accounts hosted in Europe
  • TypeSafe AI, reached through VercelWhat it does: Checks that each Ask Voke message is about health before Voke answers. It receives only the text of your own last 6 messages in that conversation, at most: never Ask Voke’s answers, health data from your account or your account detailsWhere: Not limited to a region

Each AI request tells the provider not to keep your data after answering and not to train on it. If no provider can serve an answer or morning summary request on those terms, or in the United States (the European Union for accounts hosted in Europe), the request fails instead of going elsewhere. The topic check can’t be limited to a region in the same way, so we can’t promise where it runs. It also asks for zero data retention, and TypeSafe AI is on Vercel’s list of providers that offer zero data retention.

Apple handles Sign in with Apple and delivers notifications, Cloudflare runs voke.co’s DNS and measures page views and load times with Cloudflare Web Analytics, and Visitors and, if you allow it, Google Analytics measure visits to voke.co. None of them receives your health data from Voke.

Third parties you choose

  • People in your circles, who see the categories you share at the level you pick, along with your display name. They never see your email address or account identifiers. Body measurements, such as weight, are never shared with people, whatever you choose.
  • AI apps you connect, such as Claude or ChatGPT. The company that runs the app receives the categories you approved, under its own privacy policy. Voke’s zero data retention terms don’t apply to it.
  • The AI of people in your circles, only for people you turned on “Share with their AI” for, and only for what you already share with them. Their Ask Voke runs through Voke’s AI providers above. The companies running AI apps they’ve connected receive the data under their own policies.

Other disclosures

We disclose consumer health data to authorities only when the law requires it, and we tell you first where we can. If Voke is ever sold, merged or reorganized, we’ll ask for your consent before your health data moves to the new owner.

Where it’s stored

Your health data is stored encrypted, with a separate key for each account, on Amazon Web Services in the region you choose. Voke’s servers can decrypt it to run the service, so it isn’t end-to-end encrypted. Ask Voke and morning summary requests are processed in the United States. Read more on the security page.

How long we keep it

  • Health data, derived data and sharing settings: until you delete your account or ask us to delete them.
  • Ask Voke chats: 30 days after each message.
  • Morning summaries: until you turn off AI features or delete your account.
  • The log of who read your data: until you delete your account. Ask us by email for a copy.
  • Backups: when you delete your account, Voke destroys your account’s key, and within 7 days no copy of it exists in any backup, so the encrypted data left in backups can’t be read.

Full details are in the privacy policy.

Your rights

You have the right to:

  • confirm whether we collect, share or sell your consumer health data;
  • access it, and get a list of every third party and affiliate we’ve shared it with or sold it to, with their contact details (we have no affiliates and sell to nobody);
  • correct it where it’s wrong;
  • delete it. We delete it from our systems, including backups as described above, and pass your request on to our service providers and to every third party we’ve shared it with. Data an AI company already received through an AI app is held under that company’s policy, so we can’t delete it for them; ask them too;
  • withdraw consent at any time, as described above; and
  • appeal if we turn down your request.

To delete everything, use Delete account in the app, or follow the steps on the delete account page. For any other request, email privacy@voke.co. An authorized agent can make a request for you where the law allows it.

Checking it’s you. We’ll confirm your identity before acting, normally by asking you to send the request from the email address on your account or to confirm it in the app. We only ask for what we need to check.

Timing and cost. We respond within 45 days. If we need more time, we’ll tell you why within those 45 days and can take up to 45 more. Requests are free, at least twice a year.

Appeals. If we deny your request, we’ll tell you why. You can appeal by replying to our answer or emailing privacy@voke.co with “Appeal” in the subject. We’ll decide within 45 days, explain the result in writing, and if we still deny it, tell you how to complain to your state’s attorney general, such as the Washington, Nevada or Connecticut Attorney General.

No penalty. We won’t refuse service, charge you more or give you a worse service because you used these rights.

HIPAA and medical use

Voke isn’t a healthcare provider, health plan or business associate, and doesn’t receive data from doctors, hospitals or insurers, so HIPAA doesn’t apply to it. State consumer health data laws and the US Federal Trade Commission’s Health Breach Notification Rule do. Voke isn’t a medical device and isn’t for diagnosing or treating any condition. Read the health disclaimer.

If there’s a breach

If someone gets your health data without authorization, we’ll tell you, and the regulators where the law requires, including the Federal Trade Commission, within the time the law sets.

Age

Voke isn’t for anyone under 18. We don’t knowingly collect health data from children. If you think a child has an account, email privacy@voke.co and we’ll delete it.

Changes to this notice

When we change this notice, we update the effective date at the top. If a change affects what we collect, why, or who receives it, we’ll tell you in the app before it takes effect and ask for your consent again where the law requires it.

Contact

Rida F’kih, Alberta, Canada privacy@voke.co