After you direct a transfer, the third party's own practices govern; disconnecting does not recall data
If you direct Oura to transfer your data to a third party, that third party's own privacy practices and terms govern what it does with the data, and Oura tells you to review the third party's privacy policy before authorizing a connection. You can disconnect an integration at any time, which prevents future access. Because Oura cannot recall data a third party has already received, you should also exercise deletion or withdrawal rights directly with that third party.
Supporting quotations
If you direct Oura to transfer your data to a third party
will govern what it does with your personal data
You can disconnect a third party integration at any time. Disconnecting prevents future access.
Because we cannot recall data that a third party has already received, you should also exercise any deletion or withdrawal rights directly with the third party
Qualifications & exceptions
Disconnecting stops future access only; it does not recall data already received.
Cross-references
qualifies (model-proposed): Third-party integrations: processed when you choose them or consent — qualifies: After you direct a transfer, the third party's own practices govern and Oura cannot recall data already received, qualifying the integration processing described.
Sharing & Disclosure · User right or choice
Opt-in sharing of sleep and readiness scores with other Oura Members
If you give opt-in consent through the Services, you may share limited personal information, such as your current and past sleep and readiness scores, with other Oura Members. What you choose to share can be seen by members in the circle(s) you join and by any additional members later added to those circles. You can change what you share, including opting out of sharing any data.
Supporting quotations
If you give your opt-in consent through our Services, you may share limited personal information like your current and past sleep and readiness scores with other Oura Members
The information you choose to share may be shared with other members in the circle(s) you join, and with any additional members who are added to those circles
You can make changes to what data you share with other members, including opting out of sharing any data
Qualifications & exceptions
Sharing requires your opt-in consent.
Members added to a circle later can also see what is shared with the circle.
Sharing & Disclosure · Context
Communicating with other members
Depending on your use of the Services, you may choose to communicate with and react to other members' information and scores. Oura asks you to keep communication respectful and supportive and refers you to the Terms of Use for more information.
Supporting quotations
you may also choose to communicate with and react to other members
Please remember to always maintain a respectful and supportive environment when communicating with other members
Not stated here
The Terms of Use text is not part of this source.
Sharing & Disclosure · User right or choice
Oura Enterprise Platform: sharing your data with a Data Recipient you accept
Oura Enterprise Platform lets you share Services data with people or organizations you choose after receiving an invitation, such as your doctor, coach, trainer, employer or researchers (Data Recipients). The invitation tells you the scope, type and time period of the data requested, and the relevant requested data becomes available to the Data Recipient once you consent. Once the data is shared to the platform, the Data Recipient becomes the controller of your personal data, as explained in the next section.
Supporting quotations
Oura Enterprise Platform is a service that allows you to share Services data with your doctor, coach, trainer, employer, researchers, and/or any other person or entity
The invitation you receive will notify you of the scope, type, and time period of your data that is requested to be shared with your consent
once you consent to sharing your personal data with the Data Recipient the relevant requested data that you sync to the Services will become available to your Data Recipient in Oura Enterprise Platform
the Data Recipient becomes the controller of your personal data
Qualifications & exceptions
Sharing happens only after you consent to an invitation.
Once shared, the Data Recipient becomes the controller of the data.
Sharing & Disclosure · Restriction or exception
Enterprise Platform: the Data Recipient becomes the controller and Oura is not responsible for its handling
Once your data is shared to Oura Enterprise Platform, the Data Recipient becomes the controller of your personal data and is responsible for its use under applicable data protection laws. The Data Recipient may use the data under its own privacy practices, so Oura asks you to review the Data Recipient's privacy policy before accepting the invite and opting in. Oura says it is not responsible for the Data Recipient's processing of your data or the security of data the Data Recipient has extracted from the platform.
Supporting quotations
allows you to share Services data with your doctor, coach, trainer, employer, researchers, and/or any other person or entity
Once your data is shared to Oura Enterprise Platform, the Data Recipient becomes the controller of your personal data
Your personal data may be used by the Data Recipient in accordance with its own privacy practices
before accepting the invite and opting in to Oura Enterprise Platform
Oura is not responsible for the Data Recipient
Qualifications & exceptions
Applies once you have consented and your data has been shared to the platform.
The Data Recipient's own privacy policy, which is not part of this source, governs its use.
Enterprise Platform: account data a Data Recipient may access
Once you consent to share your Oura data with a Data Recipient, the Data Recipient may get access to personal data such as account data you entered: name, e-mail address, gender, birth date and year, height and weight, activities, and notes and tags.
Supporting quotations
Once you give consent to share your Oura data with the Data Recipient, the Data Recipient may get access to the following personal data, such as:
Account data as inserted by you:
Name
E-mail address
Gender
Birth date and year
Height and weight
Activities
Notes and tags
Qualifications & exceptions
Access follows your consent.
The list is introduced with "such as" and is not stated to be exhaustive.
Sharing & Disclosure · Permission or license
Enterprise Platform: automatically collected and generated data a Data Recipient may access
The data a Data Recipient may access also includes automatically collected and generated data: heart rate, movement data, temperature data, duration of sleep, sleep phases, activity data throughout the day, and automatically generated tags.
Supporting quotations
Automatically collected and generated data:
Heart rate
Movement data
Temperature data
Duration of sleep
Sleep phases (deep, light, REM, awake)
Activity data throughout the day
Automatically generated tags
Qualifications & exceptions
Access follows your consent.
The data a Data Recipient sees is within the scope the invitation requested.
Not stated here
How the scope in an invitation maps to these categories is not specified.
Sharing & Disclosure · Permission or license
Enterprise Platform: usage-related and technical data a Data Recipient may access
A Data Recipient may also get usage-related and technical data: a randomly generated User ID, IP address and high-level location, and metadata about service use.
Supporting quotations
Usage-related and technical data:
User ID (randomly generated)
IP address and high-level location
Metadata regarding service use
Qualifications & exceptions
Access follows your consent.
Sharing & Disclosure · Procedure
After transfer to the Enterprise Platform, ask the Data Recipient about its use of your data
If you have questions or requests about your data after it has been transferred to Oura Enterprise Platform, such as how the Data Recipient uses it, where it goes, who can access it, retention or your rights, Oura directs you to the Data Recipient that invited you, and to that Data Recipient's privacy policy for contact details.
Supporting quotations
please contact the Data Recipient that invited you to participate in Oura Enterprise Platform
Please see the privacy policy of the Data Recipient for contact details
Not stated here
The Data Recipient's privacy policy is not part of this source.
Sharing & Disclosure · User right or choice
Enterprise Platform: disclosure only with consent; withdrawing does not reach data already extracted
Oura says your data is disclosed to the Data Recipient only if you consent. You can withdraw consent at any time through Membership Hub or the settings menu, which stops new data reaching the Data Recipient. You can also delete data on the platform that was already shared. But withdrawing consent or changing other consent settings does not affect the processing of data the Data Recipient has already extracted from the platform.
Supporting quotations
Your personal data is disclosed to the Data Recipient only if you give consent
You can withdraw your data sharing consent at any time via Membership Hub
You can stop the flow of data to the Data Recipient so that the Data Recipient cannot receive new data from you or through Oura Enterprise Platform
You can also choose to delete your data on Oura Enterprise Platform that was already shared with the Data Recipient
withdrawing your consent from the service or changing any other consent settings do not affect the processing of data that the Data Recipient already extracted from Oura Enterprise Platform
Qualifications & exceptions
Withdrawal stops new data only; data already extracted stays with the Data Recipient.
U.S. notice: no sale of personal information in the preceding twelve months
Oura says that in the preceding twelve months it has not sold personal information to third parties, including data aggregators, because doing so is against its policies. It says it has collected and disclosed only the categories of personal information described in the Data Sharing and Transfers section.
Supporting quotations
In the preceding twelve (12) months, Oura has not sold personal information to third parties, including data aggregators, as it is against our policies
We have collected and disclosed only the categories of personal information processed by Oura under this Policy as described in the Data Sharing and Transfers section
Qualifications & exceptions
The statement covers the preceding twelve months; it is not stated as a permanent rule.
Sharing & Disclosure · Company commitment
Sharing: Oura says it does not sell or rent personal information; shares with trusted providers and partners
Oura says it does not sell or rent your personal information and only shares your personal data with certain trusted service providers and partners so it can provide and improve its services, provide partner services and other offerings, and operate its business. When it shares data with third-party service providers it requires them to use the information only for purposes it has authorized and the limited reasons in the Policy, and to protect it to at least the same standards that Oura does.
Supporting quotations
Personal data sharing
Oura does not sell or rent your personal information, and only shares your personal data with certain trusted service providers and partners so that we can provide and improve our services, to provide partner services and other offerings, and to operate our business
we require that they use your information only for the purposes we
We also require these service providers to protect your personal information to at least the same standards that we do
Sharing & Disclosure · Company practice
Sharing: service provider purposes Oura lists
Oura says that, like most companies, it uses service providers for providing and improving its online service platform, storing users' data, providing customer services, managing and organizing its marketing activities, and analyzing information about use of its Sites and Services to improve service quality.
Supporting quotations
Like most companies, Oura uses service providers for purposes such as
Providing and improving our online service platform
Storing our users
Providing customer services
Analyzing information regarding the use of our Sites and Services to improve our service quality
Qualifications & exceptions
The list is introduced with "such as" and is not stated to be exhaustive.
Sharing & Disclosure · Company commitment
Marketing providers: Oura says it does not share Service data with third-party advertisers
Among the service provider purposes, Oura lists managing and organizing its marketing activities and says it does not share Service data with third-party advertisers.
Supporting quotations
Managing and organizing our marketing activities. Oura does not share Service data with third-party advertisers
Qualifications & exceptions
The statement refers to "Service data"; the source does not define it separately from other personal data.
Sharing & Disclosure · User right or choice
Consent to share with a partner you choose, such as a medical provider or insurer
In certain limited cases you may be asked for consent to share your Oura user personal data with a third-party partner of your choice, such as a medical provider or health care insurer you select. If you do, Oura says you should review the third party's consent language and privacy notices, which control the use of your data.
Supporting quotations
In certain limited cases, you may be asked for consent to share your Oura user personal data with a third-party partner of your choice, such as a medical provider or health care insurer that you select
you should carefully review the third-party consent language and privacy notices that are available to you from the third-party, which will control the use of your personal data
Qualifications & exceptions
Applies in "certain limited cases" and only if you consent.
Sharing & Disclosure · Company commitment
International processing: servers worldwide, same protections applied
Oura says it is a global company with servers around the world, so your personal data may be processed on servers outside the country where you live. It says that regardless of where data is processed it applies the protections described in the Policy, and that it complies with certain legal frameworks for transfers of personal data.
Supporting quotations
LEGAL FRAMEWORKS FOR INTERNATIONAL TRANSFERS
your personal data may at times be processed on servers located outside of the country where you live
regardless of where your personal data is processed, we apply the same protections described in this Policy
We also comply with certain legal frameworks relating to the transfer of personal data
Sharing & Disclosure · Permission or license
Disclosures: Oura reserves the right to disclose data with consent, to protect its rights or to meet legal requirements
Oura says it reserves the right to disclose personal data under certain specific circumstances, including when it has your express consent, to protect Oura's legal rights and property, and when it believes in good faith that disclosure is necessary or appropriate to comply with valid legal requirements.
Supporting quotations
Personal data disclosures
We also reserve the right to disclose personal data under certain specific circumstances, including
When we have your express consent to do so
To protect Oura
When we believe in good faith such disclosure is necessary or appropriate to comply with valid legal requirements
Qualifications & exceptions
The list is introduced with "including" and is not stated to be exhaustive.
Legal-requirement disclosure turns on Oura's good-faith belief.
Sharing & Disclosure · Permission or license
Disclosures: when reasonably necessary for Oura's legitimate interests, such as a merger, acquisition or sale
Oura reserves the right to disclose personal data when it is reasonably necessary for its legitimate interests in conducting its business, such as in the event of a merger, acquisition or sale.
Supporting quotations
When it is reasonably necessary for our legitimate interests in conducting our business, such as in the event a merger, acquisition, or sale
Qualifications & exceptions
The merger, acquisition or sale is given as an example; the "legitimate interests" ground is not otherwise defined.
Not stated here
The source does not say what happens to your data or your choices in a merger, acquisition or sale, or whether you are notified.