Privacy Policy

Last updated: 12 June 2026

Google Health for Claude ("the Software") is open-source software that you deploy and operate yourself. It is a remote Model Context Protocol (MCP) connector that lets an AI assistant (Claude) read your Google Health data on your behalf. This policy explains how the Software handles data. It is provided as a template; if you deploy your own instance, you are the data controller for that instance.

Who operates the Software

Each deployment runs on infrastructure controlled by the person who deploys it ("the Operator") — typically your own Cloudflare account. The authors of the Software do not host a shared service, do not operate a central server, and never receive, store, or have access to your data.

What data is processed

Health & fitness data from the Google Health API — for example sleep, heart rate, heart-rate variability, resting heart rate, active-zone-minutes, steps, distance, calories, weight, body fat, respiratory rate, blood-oxygen saturation, VO₂ max, and (optionally) nutrition and hydration.
Your Google account email, used solely to label the connection and key per-user data.
OAuth tokens issued by Google so the Software can make read-only requests on your behalf.

Access is read-only: the Software requests only .readonly scopes and never writes to or modifies your Google Health data.

How data is used

Data is fetched on demand when you (through Claude) invoke a tool, and is returned to your AI assistant so it can answer your questions. The Software does not use your data for advertising, profiling, or training any model, and does not sell or share it with third parties.

Storage and retention

OAuth tokens are stored encrypted at rest in the Operator's Cloudflare KV namespace, so the connection persists between sessions. They remain until you disconnect/revoke access or the Operator deletes them.
Response caching: to reduce calls to Google, responses for past (completed) days may be cached in the Operator's Cloudflare KV for up to 30 days. Cached data is the same health data described above and is keyed per user.
The Software keeps no other logs of your health data. Standard infrastructure logs (e.g. Cloudflare request metadata) are governed by Cloudflare's own policies.

Third-party services

Google — source of the health data, via the Google Health API and Google OAuth. Your use of Google is governed by the Google Privacy Policy.
Cloudflare — hosts the Operator's worker and storage, per the Cloudflare Privacy Policy.
Anthropic (Claude) — the AI assistant that receives tool results, per the Anthropic Privacy Policy.

This Software's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Your choices & rights

Revoke access at any time from your Google Account permissions page, or by removing the connector in Claude.
Delete stored tokens and cache by clearing the Operator's Cloudflare KV namespaces, or by deleting the deployment entirely.

Children

The Software is not directed to children under 13 (or the minimum age in your jurisdiction) and should not be used by them.

Changes

This policy may be updated; material changes will be reflected by the "Last updated" date above.

Contact

Questions about the Software can be raised via the project's GitHub issues. For a specific deployment, contact its Operator.