Voke
MenuClose

Consumer health data notice

What health data Voke collects, why, who receives it, and how to see, delete or stop sharing it.

Effective 7 October 2026.

Voke is run by Rida F’kih, an individual in Alberta, Canada, who is responsible for this notice and is Voke’s privacy officer. Voke has no parent company, subsidiaries or other affiliates. For anything on this page, email [email protected].

This notice is written for Washington’s My Health My Data Act, Nevada’s consumer health data law (NRS 603A.500 to 603A.590), the Connecticut Data Privacy Act and similar US state laws. We apply it to everyone who uses Voke, wherever you live. The privacy policy covers the rest of the personal data Voke handles.

What we collect

Voke collects health data only from sources you connect and only the types you allow. Depending on what you allow, it can include these categories:

  • Sleep: sleep stages and the times you were asleep and in bed.
  • Heart: heart rate, resting heart rate, heart rate variability, time in heart rate zones and VO2 max.
  • Vitals: blood oxygen, breathing rate, and wrist or skin temperature while you sleep.
  • Activity: steps, distance, floors climbed, active and resting energy burned, and active, zone and sedentary minutes.
  • Workouts: workout type, start and end time, effort, and the energy and distance recorded.
  • Body: weight.

Voke doesn’t read nutrition, cycle tracking or other reproductive health data, ECG or irregular rhythm results, blood pressure, blood glucose, or mood. If that changes, we’ll update this notice and ask for your consent first.

We also collect:

  • What Voke works out from that data: daily summaries, scores, naps, heart events and activity entries.
  • Which device or app each reading came from, such as “Apple Watch” or “Fitbit”, so the same thing isn’t counted twice.
  • Health data in your AI features: the questions you ask Ask Voke, its answers, and your morning summaries, which can describe your health.
  • Who has read your health data: a log of each time a person or an AI read it, with the categories, level of detail and dates.

Voke doesn’t collect your location. It doesn’t read workout routes or precise location, and it doesn’t use geofencing.

Where it comes from

  • Apple Health on your iPhone, after you allow each data type. Apple Health can hold data from Apple Watch and from other apps and devices that write to it.
  • Your Google account, if you connect it and approve Google Health data on Google’s consent screen. This can include data from Fitbit and Pixel Watch.
  • You, when you ask Ask Voke a question.
  • Voke itself, which works out summaries, scores and events from the data above.

Why we collect it and how we use it

We use consumer health data only to:

  1. show you your own data, scores, trends and feed;
  2. show the categories you choose to the people you choose in your circles;
  3. answer your questions in Ask Voke and write your morning summary, unless you turn AI features off;
  4. let AI apps you connect, and the AI of people you allow, read the categories approved;
  5. keep a log of who read your data, so we can tell you who has seen it;
  6. keep your account secure, for example by checking that uploads come from your own iPhone and by stopping misuse;
  7. run and fix the service, for example finding out why a sync failed;
  8. send service notifications, such as telling you an AI app was connected. Notifications never contain health values, so Apple, which delivers them, receives no health data; and
  9. meet legal obligations.

We don’t use your data for advertising, to decide anything with legal or similarly significant effects on you, or to train large language models or other AI models. The AI providers we use aren’t allowed to train on it either.

Your consent

We collect and share consumer health data only with your consent, given separately for each step:

  • Collecting: you allow each Apple Health data type on your iPhone and each Google data group on Google’s consent screen.
  • Sharing with people: nothing is shared until you join or create a circle and pick a category and level of detail. When you set up Voke, the sharing step comes with sleep (detail), heart (summary) and readiness (score) already selected. Untick anything you don’t want to share before you tap Continue.
  • Your AI apps: you approve each AI app on your phone and choose which categories it can read.
  • Other people’s AI: for each of your circles, the “Let their AI see this too” switch is off until you turn it on. It covers everyone in that circle.

AI features are on when you create an account. Unless you turn them off, Voke sends the health data needed to answer your Ask Voke questions and write your morning summary to Vercel and an AI model provider, which process it for us (see below). You can turn this off at any time with the “Use AI features” switch in your account settings.

Withdrawing consent

  • Stop collection: remove Voke’s access in the Health app (Settings, Health, Data Access & Devices, Voke) or in your Google account’s third-party connections. Voke stops reading new data. Data it already imported stays in your account until you delete your account, or until you ask us to delete it by email. You can’t yet disconnect a source and delete its data from inside Voke.
  • Stop sharing with people: lower a category to none, remove someone, or leave or delete a circle. They lose access straight away.
  • Stop AI: disconnect an AI app in your account settings, turn off “Let their AI see this too” for a circle, or turn off “Use AI features”. Turning off AI features disconnects your AI apps, stops everyone’s AI from reading your data, and deletes your Ask Voke chats and morning summaries.

Who receives it

We don’t sell consumer health data, and we don’t share it for targeted advertising.

Service providers (processors)

These companies process consumer health data only on our behalf, under contract, to run Voke:

  • Amazon Web ServicesWhat it does: Hosts Voke’s servers, encrypted database, backups and encryption keysWhere: Canada
  • Vercel (AI Gateway)What it does: Passes Ask Voke and morning summary requests to an AI model providerWhere: United States
  • AI model providers reached through VercelWhat it does: Write Ask Voke answers and morning summariesWhere: United States

Each AI request tells the provider not to keep your data after answering and not to train on it. If no provider can serve the request on those terms, or in the United States, the request fails instead of going elsewhere.

Apple handles Sign in with Apple and delivers notifications, and Cloudflare runs voke.co’s DNS. Neither receives your health data from Voke.

Third parties you choose

  • People in your circles, who see the categories you share at the level you pick, along with your display name. They never see your email address or account identifiers. Body measurements, such as weight, are never shared with people, whatever you choose.
  • AI apps you connect, such as Claude or ChatGPT. The company that runs the app receives the categories you approved, under its own privacy policy. Voke’s zero data retention terms don’t apply to it.
  • The AI of people in your circles, only in circles where you turned on “Let their AI see this too”, and only for what you already share with them. Their Ask Voke runs through Voke’s AI providers above. The companies running AI apps they’ve connected receive the data under their own policies.

Other disclosures

We disclose consumer health data to authorities only when the law requires it, and we tell you first where we can. If Voke is ever sold, merged or reorganized, we’ll ask for your consent before your health data moves to the new owner.

Where it’s stored

Your health data is stored encrypted, with a separate key for each account, on Amazon Web Services in Canada. Voke’s servers can decrypt it to run the service, so it isn’t end-to-end encrypted. Ask Voke and morning summary requests are processed in the United States. Read more on the security page.

How long we keep it

  • Health data, derived data and sharing settings: until you delete your account or ask us to delete them.
  • Ask Voke chats: 30 days after each message.
  • Morning summaries: until you turn off AI features or delete your account.
  • The log of who read your data: until you delete your account. Ask us by email for a copy.
  • Backups: when you delete your account, Voke destroys your account’s key, and within 7 days no copy of it exists in any backup, so the encrypted data left in backups can’t be read.

Full details are in the privacy policy.

Your rights

You have the right to:

  • confirm whether we collect, share or sell your consumer health data;
  • access it, and get a list of every third party and affiliate we’ve shared it with or sold it to, with their contact details (we have no affiliates and sell to nobody);
  • correct it where it’s wrong;
  • delete it. We delete it from our systems, including backups as described above, and pass your request on to our service providers and to every third party we’ve shared it with. Data an AI company already received through an AI app is held under that company’s policy, so we can’t delete it for them; ask them too;
  • withdraw consent at any time, as described above; and
  • appeal if we turn down your request.

To delete everything, use Delete account in the app, or follow the steps on the delete account page. For any other request, email [email protected]. An authorized agent can make a request for you where the law allows it.

Checking it’s you. We’ll confirm your identity before acting, normally by asking you to send the request from the email address on your account or to confirm it in the app. We only ask for what we need to check.

Timing and cost. We respond within 45 days. If we need more time, we’ll tell you why within those 45 days and can take up to 45 more. Requests are free, at least twice a year.

Appeals. If we deny your request, we’ll tell you why. You can appeal by replying to our answer or emailing [email protected] with “Appeal” in the subject. We’ll decide within 45 days, explain the result in writing, and if we still deny it, tell you how to complain to your state’s attorney general, such as the Washington, Nevada or Connecticut Attorney General.

No penalty. We won’t refuse service, charge you more or give you a worse service because you used these rights.

HIPAA and medical use

Voke isn’t a healthcare provider, health plan or business associate, and doesn’t receive data from doctors, hospitals or insurers, so HIPAA doesn’t apply to it. State consumer health data laws and the US Federal Trade Commission’s Health Breach Notification Rule do. Voke isn’t a medical device and isn’t for diagnosing or treating any condition. Read the health disclaimer.

If there’s a breach

If someone gets your health data without authorization, we’ll tell you, and the regulators where the law requires, including the Federal Trade Commission, within the time the law sets.

Age

Voke isn’t for anyone under 18. We don’t knowingly collect health data from children. If you think a child has an account, email [email protected] and we’ll delete it.

Changes to this notice

When we change this notice, we update the effective date at the top. If a change affects what we collect, why, or who receives it, we’ll tell you in the app before it takes effect and ask for your consent again where the law requires it.

Contact

Rida F’kih, Alberta, Canada [email protected]