Oura says that in most cases it collects personal data directly from you, such as when you register, tag your data in the Oura app or use your Oura Ring. It may also process data produced from the information you provide and may receive personal data about you from third parties such as partners. Oura may rely on trusted third-party processors, such as cloud service providers, to process data on its behalf.
Supporting quotations
In most cases, Oura collects personal data directly from you, such as when you register for an account, tag your data in the Oura mobile or web app, or use your Oura Ring
we may receive personal data about you from third parties, such as partners
Oura may also rely on trusted third-party processors to process data on our behalf, such as our cloud service providers
Qualifications & exceptions
Direct collection is described as "in most cases".
Not stated here
The source does not name the partners from which Oura may receive data.
Data Access & Collection · Company practice
Data categories: contact, user and device information
When you use the Services, Oura processes contact information (such as email or physical address), user information (such as gender, height, weight and User ID, and other information you give about yourself or your account) and device information (such as IP address and location data).
Supporting quotations
Oura processes the following personal data categories when you use our Services
Contact information such as email address or physical address
User information such as gender, height and weight, User ID
Device information such as IP address and location data
Qualifications & exceptions
The categories are introduced with "such as" examples, not an exhaustive list.
Data Access & Collection · Company practice
Data categories: what you provide, including AI assistant text and health records
The user-provided information Oura processes includes activities, notes, photos, comments, user feedback and tags you add within the app, text you submit to AI assistants, and uploaded Electronic Health Records or health panels.
Supporting quotations
User-provided information such as the activities, notes, photos, comments, user feedback, tags you provide within the app, text you submit to AI assistants, and uploaded Electronic Health Records or health panels
Qualifications & exceptions
Introduced with "such as"; not stated to be exhaustive.
Data Access & Collection · Company practice
Data categories: measured sensor data and calculated sleep, health and activity data
Oura processes measured data such as heart rate, movement, temperature and respiration data, and calculated data such as sleep phases, activity levels throughout the day, readiness level and body mass index calculated from height and weight.
Supporting quotations
Measured data such as heart rate, movement data, temperature data, and respiration data
Calculated user, sleep, health, and activity data such as sleep phases (deep, light, REM, awake), activity levels throughout the day, readiness level, and body mass index (calculated based on height and weight)
Data Access & Collection · User right or choice
Location data: processed with consent while a location-based service is active
If you use a location-based service, such as GPS-based activity tracking, Oura may process the approximate or precise location of your device while the service is active, obtained through the device's service provider network ID, GPS or Wi-Fi data. Oura says it does not process such location data without first obtaining your consent. You can turn it off through your device's location permission settings, but if you do, some Services, features or functions may no longer be available.
Supporting quotations
If you access or use any of Oura's location-based services, such as by enabling GPS-based activity tracking through our Services, Oura may process the approximate or precise location of your device while the service is active
Oura does not process such location data without first obtaining your consent
You may disable such location processing at any time using your device's location permission settings
certain Services, features, or functionalities may no longer be accessible
Qualifications & exceptions
Applies while the location-based service is active.
Disabling location access can make some features unavailable.
Data Access & Collection · User right or choice
Importing health records: you choose the source, what to import and when to disconnect
Oura lets you bring your own health records into the Services. When you connect a healthcare provider, health plan or other source you are directing that organization to share your electronic health records with Oura. You choose which source to connect, what to import and when to disconnect. Records may include visit summaries, clinical notes, diagnoses, medications, allergies, immunizations, lab results, vital signs and care plans, depending on the source. Disconnecting stops new records flowing to Oura, and you can access, delete or download imported records as described in the data subject rights sections.
Supporting quotations
HEALTH RECORDS YOU IMPORT
When you choose to connect a healthcare provider, a health plan, or another source of your health information to Oura, you are directing that organization to share your electronic health records with Oura
you choose which source of records to connect, what to import, and when to disconnect
records may include visit summaries, clinical notes, diagnoses, medications, allergies, immunizations, lab results, vital signs, and care plans
Disconnecting stops new records from flowing to Oura
You can access, delete, or download your imported records as described in sections of this Policy covering data subject rights
Qualifications & exceptions
The records available depend on the source you connect.
Data Access & Collection · Procedure
Research App: a signed informed consent form describes the study's data use before you enroll
Before enrolling in a study you must review and sign an informed consent form (ICF) from the Research Sponsor. The ICF describes the study's purpose, the categories of data collected including sensor and derived data where applicable, how the data will be used and disclosed, the legal basis for processing where applicable, how long the study lasts, and your rights in relation to research data.
Supporting quotations
Before enrolling in a study, you will be required to review and sign an informed consent form
the categories of data that will be collected (including sensor and derived data, where applicable), how that data will be used and disclosed
Not stated here
The content of any specific ICF is not part of this source.
Data Access & Collection · Company practice
Where site visitor and customer data comes from
For online customers and site visitors, Oura says that in most cases it collects personal data directly from you, such as when you register for an account, tag your data in the Oura app or use your Oura Ring. It may also process data produced from information you give and may receive personal data about you from third parties such as partners. It may rely on trusted third-party processors, such as cloud service providers.
Supporting quotations
In most cases, Oura collects personal data directly from you, such as when you register for an account, tag your data in the Oura mobile or web app, or use your Oura Ring
we may receive personal data about you from third parties, such as partners
Oura may also rely on trusted third-party processors to process data on our behalf, such as our cloud service providers
Qualifications & exceptions
Direct collection is described as "in most cases".
Not stated here
The source does not name the partners from which Oura may receive data.
Data Access & Collection · Company practice
Site visitor and customer data categories
For online customers and site visitors, Oura processes contact information (name, email address and address), delivery information (such as your purchases and chosen payment method), device information (such as IP address, time of visit and location data) and user activity (such as browsing patterns on the Site and communications you have with Oura).
Supporting quotations
Oura processes the following personal data categories when you use our Services
Contact information such as name, email address and address
Delivery information such as your purchases and chosen payment method
Device information such as IP address, time of visit, and location data
User activity such as browsing patterns on the Site and any communications you have with us
Qualifications & exceptions
The categories are introduced with "such as" examples, not an exhaustive list.
Data Access & Collection · Context
U.S. notice: what counts as personal information, including consumer health data
For the U.S. notice, personal information (or personal data) means information that identifies, relates to, describes, references or could reasonably be linked, directly or indirectly, with a particular consumer, device or household, and where applicable consumer health data. It is described as what Oura collects when a customer interacts with its Sites or Services.
Supporting quotations
Collection, use, and sharing of information
Oura collects information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, device, or household
Data Access & Collection · User right or choice
U.S. rights: right to know what Oura collected and shared, after a validated request
U.S. state laws may give you the right to ask Oura to disclose the personal information it collected about you over the past 12 months. Oura says it provides this only after it receives and validates your request. Once confirmed, it will disclose the categories of information collected, the categories disclosed (if any), the categories of sources, its business or commercial purposes for collecting or selling the information, the categories of third parties it shares with, and the specific pieces of information collected about you.
Supporting quotations
Right to know about the personal information we collect and share
U.S. State laws may give you the right to request that we disclose the personal information we have collected about you over the past 12 months, which we only provide after we receive and validate your request
The categories of personal information we collected about you
The categories of personal information we have disclosed about you (if any)
The categories of sources for the personal information we collected about you
Our business or commercial purposes for collecting or selling that personal information
The categories of third parties with whom we share that personal information
The specific pieces of personal information we collected about you
Qualifications & exceptions
Provided only after Oura receives and validates a verifiable request.
Covers the past 12 months.
Data Access & Collection · Company practice
Cookies and similar technologies: used for analytics, personalization and advertising, first- and third-party
Oura says it uses cookies and other technologies to collect and store analytics and other information when customers use its Site, and for personalization and advertising purposes. The cookies include both first-party and third-party cookies.
Supporting quotations
Use of cookies
We use cookies and various other technologies to collect and store analytics and other information when customers use our Site, as well as for personalization and advertising purposes
The cookies we use include both first-party and third-party cookies
Not stated here
The source does not say what the third-party cookies collect or who the third parties are.
Cross-references
contrast (model-proposed): U.S. notice: sensitive information and consumer health data used only for the Policy's purposes — contrast: The cookies card says cookies and other technologies are used for personalization and advertising purposes, including third-party cookies. The U.S. notice says Oura does not use sensitive personal information for targeted advertising and does not sell or share personal information for cross-context behavioral advertising. The source does not reconcile what the advertising use of cookies covers with those statements.
Data Access & Collection · Company practice
Cookies: identify visitors, tailor the Site to individual interests and integrate social media accounts
Oura describes cookies as small text files saved on your device that let it identify visitors to its Site, ease use of the Site and create aggregate information about visitors. It says it uses cookies and similar technologies to tailor the Site and the information it provides to customers' individual interests, and to integrate its social media accounts on the Site.
Supporting quotations
Cookies are small text files sent and saved on your device that allows us to identify visitors of our Site, facilitate the use of our Site, and to create aggregate information of our visitors
We use cookies and similar technologies to tailor our Site and the information we provide in accordance with the individual interests of our customers
We also use cookies and similar technologies for integrating our social media accounts on our Site
Data Access & Collection · Procedure
Cookie Policy: further details and preference settings are in a separate policy
Oura refers you to its Cookie Policy for more information about its use of cookies and how to set cookie preferences.
Supporting quotations
Please see our
Not stated here
The Cookie Policy is linked but its text is not part of this source, so this card cannot say what choices it offers.