Consumer Health Data Privacy Policy

Consumer health data we collect, and why

Voco collects the following categories of consumer health data, in each case to provide the service you asked for: calculating your calorie and macro plan, turning your descriptions into food and workout logs, showing your progress, streaks, and weekly summary, and remembering your corrections so repeat foods come back right.

• Body measurements and characteristics: sex, age, height, weight entries, and activity level.
• Diet and nutrition information: your goal (lose, maintain, or gain), goal pace, calorie and macro targets, and your food logs, including the text transcript of what you said or typed, the estimated foods, calories, macros, confidence grade, meal type, and date.
• Exercise information: workout logs you describe, with activity, duration, and estimated calories.
• Derived summaries: streaks, weekly averages, and a short AI-written weekly recap built from your own logs.
• Voice audio, transiently: when you log by voice, your audio is processed to produce a transcript and is not stored by Voco. Our general Privacy Policy describes this in detail.

We use this data only for the purposes above and to prevent abuse of the service. We do not use it for advertising or marketing, and we do not sell it. If we ever wanted to collect new categories of health data or use them for new purposes, we would disclose that first and, where the law requires, ask for your consent.

Sources

All of this data comes from one source: you. You speak or type it into the app. Voco's AI derives the nutrition estimates and summaries from what you provide. We do not buy health data about you and we do not collect it from other apps or devices.

What we share, and with whom

We do not sell consumer health data, and we do not share it for advertising. We disclose it only to service providers that process it on our behalf to run the app:

• Supabase (with Amazon Web Services as its infrastructure): hosts the database that stores your profile, logs, and summaries.
• Speech-to-text providers (US-based): transcribe your voice clips, transiently.
• An AI model provider (US-based): interprets transcripts into foods and estimated macros.

These processors act under contracts limiting them to processing on our instructions. No other third party receives your consumer health data. Our analytics and crash-reporting vendors (PostHog, Sentry) receive only content-free technical events keyed to a random user ID: no food text, no weights, no body stats. Apple and RevenueCat handle your subscription, not your health data.

Your rights

You have the right to:

• Know what consumer health data we collect (this page) and access your own data by requesting an export;
• Withdraw consent to further collection at any time by stopping use of the relevant features or deleting your data;
• Delete your consumer health data. The complete path is in the app: Settings, then Delete Account, which permanently deletes your profile, logs, transcripts, and summaries. You can also email us to request deletion, including deletion of specific data, and we will carry it out and pass the request to our processors as the law requires;
• Not be discriminated against for exercising any of these rights.

To exercise any right, use the in-app controls or email hello@voco.fit. We will respond within the time your state's law sets (in Washington, 45 days). If we decline a request, we will say why, and you may appeal by replying to our response; if the appeal fails, you may contact your state attorney general.

Changes

If our health-data practices change, we will update this policy and its effective date, and material changes will be disclosed before they apply to data we have already collected.

Contact

Privacy questions and requests: hello@voco.fit.