124 of 124 cards
Legal Rights & Agreement Rules · Context
The document is titled the Oura Health Privacy Policy and shows the date June 15, 2026 under the title. The source does not say whether that date is an effective date, a last-updated date or a publication date.
Health Privacy Policy
June 15, 2026
Use & Processing · Company commitment
Oura says it takes protecting personal data seriously and describes its products as helping you track daily habits, reproductive health and sleep quality, data it says does not get much more personal. It says it believes you should be in charge of your personal data, and that the Policy is meant to give you the information you need to take control of it.
protecting your personal data is a task we take seriously
track important aspects of your health like your daily habits, reproductive health, and the quality of your sleep
you should be in charge when it comes to your personal data
designed to provide you with the information you need to take control of your personal data
Legal Rights & Agreement Rules · Context
The Policy applies to processing of personal data by Oura Inc, Oura Health Oy, Ouraring Inc. and subsidiaries (together, Oura) when you visit Oura's web properties (the Sites), or use the Oura Ring with the Oura App, Membership Hub or other Oura services (the Services). Those defined words are used throughout the Policy.
Oura Inc, Oura Health Oy, Ouraring Inc., and subsidiaries
when you visit our web properties
use the Oura Ring with the Oura App, Membership Hub or use other Oura services
Use & Processing · Context
This part of the Policy is addressed to people who use Oura Services (device and application users). It introduces the purposes for which Oura says it collects and processes their personal data. The sections that follow also cover the categories of data, the legal basis for processing and the sources of the data.
The sections below explain the categories of personal data we collect and process, as well as the reasons we do so
Device & application users
When you use Oura Services, we collect and process your personal data for the following purposes
Inference & Profiling · Company practice
Oura processes personal data when you use the Services in order to give you personalized insights about your readiness, sleep and activity, and other inferences about your health status.
We process personal data when you use our Services, such as to provide you with personalized insights about your readiness, sleep, activity, and other inferences about your health status
Inference & Profiling · Company practice
Some Service features use artificial intelligence and machine learning. Oura Advisor is an AI assistant that, when you engage with it, gives personalized wellness guidance based on information you submit to Oura or direct the Services to collect. Oura also uses AI and algorithmic analysis to suggest that you follow up with partner services, and you decide whether to engage with or share any personal data with partner services when it does.
Some features in our Services use artificial intelligence and machine learning
Oura Advisor is an AI assistant that, when you engage with the feature, provides personalized wellness guidance based on information you submit to Oura or direct our Services to collect
We also use AI and algorithmic analysis to provide you with suggestions to follow up with partner services
You get to decide whether you want to engage with or share any personal data with partner services when we do this
Use & Processing · Company practice
Oura processes personal data to provide customer service and manage customer communication. For example, if you contact its AI assistant with questions about your account, Oura may use the information you provide to answer your questions and solve issues.
We process personal data to provide customer service and manage our customer communication
if you contact our AI assistant with questions regarding your account, we may use the provided information to answer your questions, and for solving any issues you may have
Use & Processing · Company practice
Oura may process personal data about your use of the Services in order to protect your privacy, which may involve privacy enhancing technologies and other privacy-protective techniques. The Policy says that when information is aggregated or anonymized it is no longer personal data.
We may process personal data regarding your use of the Services to protect your privacy
When information is aggregated or anonymized, it is no longer personal data
Use & Processing · Company practice
Oura processes personal data about how you use the Services to understand usage and improve the Services, including your experience in the Oura App. It may also use personal data to develop or refine AI-powered features that give you new insights about your health. It says that where appropriate it uses privacy-protective measures such as pseudonymization, aggregation or de-identification.
We process personal data regarding your use of our Services to understand how you use our Services and how we can improve them
We may also use personal data to develop or refine AI-powered features that provide you with new insights about your health
Where appropriate, we use privacy-protective measures, like pseudonymization, aggregation, or de-identification
Use & Processing · Company practice
Oura may process personal data about human performance and wellbeing to benefit users and improve the insights it provides. Some features may use third-party automated technology to personalize the experience, and Oura says intelligent features may use responses you provide. When feasible it uses data that has been processed to protect your privacy.
We may process personal data about human performance and wellbeing to benefit our users and improve the cutting-edge insights we provide with our Services
Some features of our Services may use third-party automated technology to provide a more personalized experience
When feasible, we do this using data that has been processed in a manner to protect your privacy
Use & Processing · Company practice
Oura processes personal data to provide marketing communications for Oura Services and partner opportunities. The Policy says it uses cookies and similar technologies on its website to create audiences for online advertisement, and refers to the Cookie Policy. It says it does not sell or share your personal data for cross-context behavioral advertising. You can opt out of direct marketing from Oura by unsubscribing within emails, and you may see personalized opportunities in the Services to connect with partners.
We process personal data to provide marketing communications for Oura Services and partner opportunities
we use cookies and similar technologies on our website to create audiences for online advertisement
We do not sell or share your personal data for cross-context behavioral advertising
You can opt out of direct marketing communications from Oura by unsubscribing within emails
You may see personalized opportunities surfaced within our Services to connect with partners who can support your health journey
Linking & Identification · Company practice
Oura processes personal data you provide to it in order to enable third-party integrations, services and features. With your permission the Services may integrate with third parties, including Google Health Connect and Apple HealthKit, LLM providers or other partner experiences. Oura says it only processes your data for third-party integrations when you choose to integrate them or give the necessary consents. It processes data it receives from these third parties according to applicable terms, such as Google Health Connect Permissions policy and Google Limited Use requirements and third-party developer license agreements, as it becomes aware of them.
We process personal data you provide to Oura to enable third party integrations, services, features, and offerings
with your permission, our Services may integrate with third parties, including Google Health Connect and Apple HealthKit, LLM providers, or other partner experiences
Oura only processes your data with respect to third-party integrations when you choose to integrate them with our Services, or when you provide the necessary consents
We process the data we receive from these third-parties according to applicable terms, such as the Google Health Connect Permissions policy and Google Limited Use requirements
Sharing & Disclosure · Restriction or exception
If you direct Oura to transfer your data to a third party, that third party's own privacy practices and terms govern what it does with the data, and Oura tells you to review the third party's privacy policy before authorizing a connection. You can disconnect an integration at any time, which prevents future access. Because Oura cannot recall data a third party has already received, you should also exercise deletion or withdrawal rights directly with that third party.
If you direct Oura to transfer your data to a third party
will govern what it does with your personal data
You can disconnect a third party integration at any time. Disconnecting prevents future access.
Because we cannot recall data that a third party has already received, you should also exercise any deletion or withdrawal rights directly with the third party
Legal Rights & Agreement Rules · Company practice
Oura says that in certain cases it must process data when applicable laws and regulations require it, for example for accounting and tax requirements, legal claims or other legal purposes.
In certain cases, we must process certain data when it is required by applicable laws and regulations
accounting and tax requirements, legal claims, or other legal purposes
Legal Rights & Agreement Rules · Context
This heading and introduction explain that data protection law in Europe requires a lawful basis for collecting and retaining personal information of residents of the European Economic Area and the U.K. Oura says its lawful bases depend on the particular processing purposes. The list of bases that follows begins with Contract; each basis is explained in the cards that follow.
Legal basis for processing
for collecting and retaining personal information from residents of the European Economic Area and the U.K.
Our lawful bases for processing your data depend on the particular processing purposes
Contract
Legal Rights & Agreement Rules · Company practice
When Oura processes personal data to provide the Services, it says it relies on a user contract, which is formed when you create your account and accept this Policy and the Terms of Use. This is one of the lawful bases listed for residents of the European Economic Area and the U.K.
Legal basis for processing
Contract
we process personal data on the basis of a user contract, which is formed when you create your account and accept this Policy
Terms of Use
Legal Rights & Agreement Rules · Company commitment
Oura says it processes your sensitive personal data only with your consent. In some cases you can give consent through your actions, such as by adding sensitive personal data to your notes or adding health related tags in the Oura App.
Consent
We process your sensitive personal data only with your consent
you can provide your consent to us for processing your data through your actions, such as by adding sensitive personal data into your notes, or by adding health related tags in the Oura App
Legal Rights & Agreement Rules · Company practice
Oura says it relies on its legitimate interests when it processes personal data to market its Services and Sites, provide customer service and improve its Services. When it relies on legitimate interests it says it weighs its own interests against your right to privacy, in compliance with applicable law.
Legitimate Interest
We process your personal data based on our legitimate interests when we process it for the purposes of marketing our Services and Sites, providing our customer service, and improving our Services
we carefully weigh our own interests against your right to privacy, in compliance with applicable law
Legal Rights & Agreement Rules · Company practice
Oura says it must process certain information to comply with legal obligations, which may vary in each country, for example consumer protection or tax laws.
Legal Obligation
Oura must process certain information to comply with legal obligations which may vary in each country
such obligations can relate to consumer protection or tax laws
Data Access & Collection · Company practice
Oura says that in most cases it collects personal data directly from you, such as when you register, tag your data in the Oura app or use your Oura Ring. It may also process data produced from the information you provide and may receive personal data about you from third parties such as partners. Oura may rely on trusted third-party processors, such as cloud service providers, to process data on its behalf.
In most cases, Oura collects personal data directly from you, such as when you register for an account, tag your data in the Oura mobile or web app, or use your Oura Ring
we may receive personal data about you from third parties, such as partners
Oura may also rely on trusted third-party processors to process data on our behalf, such as our cloud service providers
Data Access & Collection · Company practice
When you use the Services, Oura processes contact information (such as email or physical address), user information (such as gender, height, weight and User ID, and other information you give about yourself or your account) and device information (such as IP address and location data).
Oura processes the following personal data categories when you use our Services
Contact information such as email address or physical address
User information such as gender, height and weight, User ID
Device information such as IP address and location data
Data Access & Collection · Company practice
The user-provided information Oura processes includes activities, notes, photos, comments, user feedback and tags you add within the app, text you submit to AI assistants, and uploaded Electronic Health Records or health panels.
User-provided information such as the activities, notes, photos, comments, user feedback, tags you provide within the app, text you submit to AI assistants, and uploaded Electronic Health Records or health panels
Data Access & Collection · Company practice
Oura processes measured data such as heart rate, movement, temperature and respiration data, and calculated data such as sleep phases, activity levels throughout the day, readiness level and body mass index calculated from height and weight.
Measured data such as heart rate, movement data, temperature data, and respiration data
Calculated user, sleep, health, and activity data such as sleep phases (deep, light, REM, awake), activity levels throughout the day, readiness level, and body mass index (calculated based on height and weight)
Charges & Financial Obligations · Company practice
Oura processes payment information such as card number, merchant and billing address.
Payment information such as card number, merchant, and billing address
Legal Rights & Agreement Rules · Company practice
Oura says some of the personal data it processes, including data concerning your health, is considered special or sensitive personal data, and that under applicable law such data is processed only if you have given your consent.
some of the personal data we process, including any data concerning your health, is considered special or sensitive personal data
Under applicable law, such data is processed only if you have given your consent for processing
Data Access & Collection · User right or choice
If you use a location-based service, such as GPS-based activity tracking, Oura may process the approximate or precise location of your device while the service is active, obtained through the device's service provider network ID, GPS or Wi-Fi data. Oura says it does not process such location data without first obtaining your consent. You can turn it off through your device's location permission settings, but if you do, some Services, features or functions may no longer be available.
If you access or use any of Oura's location-based services, such as by enabling GPS-based activity tracking through our Services, Oura may process the approximate or precise location of your device while the service is active
Oura does not process such location data without first obtaining your consent
You may disable such location processing at any time using your device's location permission settings
certain Services, features, or functionalities may no longer be accessible
Sharing & Disclosure · User right or choice
If you give opt-in consent through the Services, you may share limited personal information, such as your current and past sleep and readiness scores, with other Oura Members. What you choose to share can be seen by members in the circle(s) you join and by any additional members later added to those circles. You can change what you share, including opting out of sharing any data.
If you give your opt-in consent through our Services, you may share limited personal information like your current and past sleep and readiness scores with other Oura Members
The information you choose to share may be shared with other members in the circle(s) you join, and with any additional members who are added to those circles
You can make changes to what data you share with other members, including opting out of sharing any data
Sharing & Disclosure · Context
Depending on your use of the Services, you may choose to communicate with and react to other members' information and scores. Oura asks you to keep communication respectful and supportive and refers you to the Terms of Use for more information.
you may also choose to communicate with and react to other members
Please remember to always maintain a respectful and supportive environment when communicating with other members
Sharing & Disclosure · User right or choice
Oura Enterprise Platform lets you share Services data with people or organizations you choose after receiving an invitation, such as your doctor, coach, trainer, employer or researchers (Data Recipients). The invitation tells you the scope, type and time period of the data requested, and the relevant requested data becomes available to the Data Recipient once you consent. Once the data is shared to the platform, the Data Recipient becomes the controller of your personal data, as explained in the next section.
Oura Enterprise Platform is a service that allows you to share Services data with your doctor, coach, trainer, employer, researchers, and/or any other person or entity
The invitation you receive will notify you of the scope, type, and time period of your data that is requested to be shared with your consent
once you consent to sharing your personal data with the Data Recipient the relevant requested data that you sync to the Services will become available to your Data Recipient in Oura Enterprise Platform
the Data Recipient becomes the controller of your personal data
Sharing & Disclosure · Restriction or exception
Once your data is shared to Oura Enterprise Platform, the Data Recipient becomes the controller of your personal data and is responsible for its use under applicable data protection laws. The Data Recipient may use the data under its own privacy practices, so Oura asks you to review the Data Recipient's privacy policy before accepting the invite and opting in. Oura says it is not responsible for the Data Recipient's processing of your data or the security of data the Data Recipient has extracted from the platform.
allows you to share Services data with your doctor, coach, trainer, employer, researchers, and/or any other person or entity
Once your data is shared to Oura Enterprise Platform, the Data Recipient becomes the controller of your personal data
Your personal data may be used by the Data Recipient in accordance with its own privacy practices
before accepting the invite and opting in to Oura Enterprise Platform
Oura is not responsible for the Data Recipient
Sharing & Disclosure · Permission or license
Once you consent to share your Oura data with a Data Recipient, the Data Recipient may get access to personal data such as account data you entered: name, e-mail address, gender, birth date and year, height and weight, activities, and notes and tags.
Once you give consent to share your Oura data with the Data Recipient, the Data Recipient may get access to the following personal data, such as:
Account data as inserted by you:
Name
E-mail address
Gender
Birth date and year
Height and weight
Activities
Notes and tags
Sharing & Disclosure · Permission or license
The data a Data Recipient may access also includes automatically collected and generated data: heart rate, movement data, temperature data, duration of sleep, sleep phases, activity data throughout the day, and automatically generated tags.
Automatically collected and generated data:
Heart rate
Movement data
Temperature data
Duration of sleep
Sleep phases (deep, light, REM, awake)
Activity data throughout the day
Automatically generated tags
Sharing & Disclosure · Permission or license
A Data Recipient may also get usage-related and technical data: a randomly generated User ID, IP address and high-level location, and metadata about service use.
Usage-related and technical data:
User ID (randomly generated)
IP address and high-level location
Metadata regarding service use
Sharing & Disclosure · Procedure
If you have questions or requests about your data after it has been transferred to Oura Enterprise Platform, such as how the Data Recipient uses it, where it goes, who can access it, retention or your rights, Oura directs you to the Data Recipient that invited you, and to that Data Recipient's privacy policy for contact details.
please contact the Data Recipient that invited you to participate in Oura Enterprise Platform
Please see the privacy policy of the Data Recipient for contact details
Sharing & Disclosure · User right or choice
Oura says your data is disclosed to the Data Recipient only if you consent. You can withdraw consent at any time through Membership Hub or the settings menu, which stops new data reaching the Data Recipient. You can also delete data on the platform that was already shared. But withdrawing consent or changing other consent settings does not affect the processing of data the Data Recipient has already extracted from the platform.
Your personal data is disclosed to the Data Recipient only if you give consent
You can withdraw your data sharing consent at any time via Membership Hub
You can stop the flow of data to the Data Recipient so that the Data Recipient cannot receive new data from you or through Oura Enterprise Platform
You can also choose to delete your data on Oura Enterprise Platform that was already shared with the Data Recipient
withdrawing your consent from the service or changing any other consent settings do not affect the processing of data that the Data Recipient already extracted from Oura Enterprise Platform
Use & Processing · Company practice
Oura says it uses aggregated Oura Enterprise Platform data for analytics, statistics, research and development, and that Oura is the controller of that aggregated data, which may no longer be personal data because of aggregation. For other data Oura processes that is not at the Data Recipient's direction, the rest of the Policy applies.
Oura uses aggregated Oura Enterprise Platform data for analytics, statistics, research and development purposes
Oura is the controller of such aggregated data, which may no longer qualify as personal data due to aggregation
the rest of the terms in this Policy apply
Data Access & Collection · User right or choice
Oura lets you bring your own health records into the Services. When you connect a healthcare provider, health plan or other source you are directing that organization to share your electronic health records with Oura. You choose which source to connect, what to import and when to disconnect. Records may include visit summaries, clinical notes, diagnoses, medications, allergies, immunizations, lab results, vital signs and care plans, depending on the source. Disconnecting stops new records flowing to Oura, and you can access, delete or download imported records as described in the data subject rights sections.
HEALTH RECORDS YOU IMPORT
When you choose to connect a healthcare provider, a health plan, or another source of your health information to Oura, you are directing that organization to share your electronic health records with Oura
you choose which source of records to connect, what to import, and when to disconnect
records may include visit summaries, clinical notes, diagnoses, medications, allergies, immunizations, lab results, vital signs, and care plans
Disconnecting stops new records from flowing to Oura
You can access, delete, or download your imported records as described in sections of this Policy covering data subject rights
Legal Rights & Agreement Rules · Company practice
The Policy says imported health records come from a third-party source you direct to share them, unlike ring data generated by sensors you wear. Once those records reach Oura, Oura acts as controller of that data and this Policy governs its processing. When you authorize or direct an entity regulated by HIPAA to disclose your records to Oura, the disclosure is at your request rather than the entity's, and Oura is not a Business Associate of that entity for that sharing.
Once those records reach Oura, we act as the controller of that data, and this Policy governs our processing
When you authorize or direct an entity regulated by the Health Insurance and Portability and Accountability Act
the disclosure is at your request, not the entity
Oura is not a Business Associate of that entity for purposes of this sharing
Use & Processing · Context
The Oura Research App is a separate application that lets people take part in research studies run by or for Oura or an independent research sponsor (Research Sponsor). Participation in any study is voluntary.
The Oura Research App is a separate application that enables individuals to participate in research studies conducted by or on behalf of Oura or an independent research sponsor
Participation in any research study is voluntary
Data Access & Collection · Procedure
Before enrolling in a study you must review and sign an informed consent form (ICF) from the Research Sponsor. The ICF describes the study's purpose, the categories of data collected including sensor and derived data where applicable, how the data will be used and disclosed, the legal basis for processing where applicable, how long the study lasts, and your rights in relation to research data.
Before enrolling in a study, you will be required to review and sign an informed consent form
the categories of data that will be collected (including sensor and derived data, where applicable), how that data will be used and disclosed
Use & Processing · Company practice
If you enroll in a research study, the Research Sponsor acts as controller (or the equivalent role under applicable law) of the research data collected for the study. Oura may act as a processor or service provider to the Research Sponsor for hosting, storage or technical administration of the Oura Research App, unless the applicable ICF says otherwise. Questions about the protocol, use of research data or exercising data protection rights relating to research data should go to the Research Sponsor named in the ICF.
the Research Sponsor acts as the controller (or equivalent legal role under applicable data protection laws) of research data collected for the study
Oura may act as a processor or service provider to the Research Sponsor in connection with the hosting, storage, or technical administration of the Oura Research App, unless otherwise described in the applicable ICF
should be directed to the Research Sponsor as identified in the ICF
Use & Processing · Restriction or exception
Research studies may involve data blinding or other protocol-based restrictions. During a blinded period you may not be able to access certain personal data, scores or insights in the Oura Research App even though your ring keeps collecting sensor data. These limits follow the study protocol and the Research Sponsor's direction, and the ICF describes whether and when access will be restored and any conditions.
During a blinded period, you may not be able to access certain personal data, scores, or insights in the Oura Research App, even though your Oura Ring continues to collect sensor data
at the direction of the Research Sponsor
The ICF will describe whether and when access to such data will be restored, and any conditions that apply
Legal Rights & Agreement Rules · Restriction or exception
If the Privacy Policy and the ICF conflict about research data collected for a study, the ICF and study protocol govern that research data processing. The Policy continues to apply to personal data processed outside the scope of a specific research study.
To the extent there is a conflict between this Privacy Policy and the ICF with respect to research data collected in connection with a study, the terms of the ICF and study protocol will govern that research data processing
This Privacy Policy continues to apply to personal data processed outside the scope of a specific research study
Use & Processing · Context
This part of the Policy is addressed to people who visit Oura's Sites or complete orders in its online store. It lists the purposes for which Oura says it processes their personal data.
SITE VISITORS
Processing purposes
If you visit Oura's Sites or complete orders on Oura's online store, we process personal data for the following purposes
Use & Processing · Company practice
Oura processes personal data to power its offerings, which may include when you visit its Sites and to enable Site performance. Some features use AI. For example, when you use its virtual support agent, Finn, you are interacting with an AI-powered customer support chatbot.
We process personal data to power our offerings, which may include when you visit our Sites
you are interacting with an AI-powered customer support chatbot when you interact with our virtual support agent, Finn
Use & Processing · Company practice
Oura processes personal data to process, handle and deliver your purchases and to facilitate your shopping.
We process personal data to process, handle, and deliver your purchases, and to facilitate your shopping
Use & Processing · Company practice
Oura processes personal data to provide customer service and manage customer communication. For example, if you contact its virtual assistant with questions about the Sites or Services, it may use the information you provide to answer your questions and solve issues.
We process personal data to provide customer service and manage customer communication
if you contact our virtual assistant with questions regarding our Sites or Services, we may use the provided information to answer your questions, and for solving any issues you may have
Use & Processing · Company practice
Oura may process personal data about your use of the Services to protect your privacy, which may involve privacy enhancing technologies. The Policy says that aggregated or anonymized information is no longer personal data.
We may process personal data regarding your use of our Services to protect your privacy
When information is aggregated or anonymized, it is no longer personal data
Use & Processing · Company practice
Oura processes personal data to analyze and improve its Sites, for example to analyze Site performance, improve user experience and optimize content and layout. It may also use personal data to improve AI-powered features on the Sites, including its virtual support agent. When feasible it uses data processed to protect your privacy.
We process personal data to analyze and improve our Sites
We may also use personal data to improve AI-powered features on our Sites, including our virtual support agent
When feasible, we will do this using data that has been processed to protect your privacy
Use & Processing · Company practice
Oura processes personal data to provide marketing communications about Oura Services and partner opportunities. Under its Cookie Policy it uses cookies on its Site to measure marketing effectiveness, understand how visitors interact with the Sites and provide contextual advertising. It says it does not sell or share personal data for cross-context behavioral advertising. You can always opt out of Oura direct marketing communications, though you may still see marketing messages within the Oura App. If a third-party partner sends Oura-branded advertising, the Policy tells you to review that third party's privacy policy and contact it about opt-out requests.
We process personal data to provide marketing communications about Oura Services and partner opportunities
we use cookies on our Site to measure the effectiveness of our marketing, understand how visitors interact with our Sites, and provide contextual advertising
We do not sell or share your personal data for cross-context behavioral advertising
You can always opt out of Oura direct marketing communications, though you may still see marketing messaging within the Oura App
please review the third-party
Legal Rights & Agreement Rules · Company practice
Oura says that in certain cases it must process personal data when required by applicable legislation, for example for accounting and tax requirements, legal claims or other legal purposes.
In certain cases, we must process certain personal data when it is required by applicable legislation
accounting and tax requirements, legal claims, or other legal purposes
Legal Rights & Agreement Rules · Context
For online customers and site visitors, the Policy says that European and U.K. data protection law requires a lawful basis for collecting and retaining personal information from residents of the European Economic Area, and that Oura's lawful bases depend on the particular processing purposes.
Legal basis for processing
from residents of the European Economic Area
Our lawful bases for processing your data depend on the particular processing purposes
Legal Rights & Agreement Rules · Company practice
When Oura processes personal data to handle and deliver your purchases, it relies on a user contract, which it says is created when you place your order.
Contract
When processing personal data to handle and deliver your purchases, we rely on the legal basis of a user contract, which is created when you place your order
Legal Rights & Agreement Rules · Company practice
Oura says it processes your personal data for electronic direct marketing if you have given your consent.
Consent
We process your personal data for electronic direct marketing purposes if you have provided your consent for it
Legal Rights & Agreement Rules · Company practice
Oura says it relies on its legitimate interest to run, maintain and develop its business and to create and maintain customer relationships when it processes personal data for customer service, marketing and developing the Services. It says it weighs its own interests against your right to privacy under applicable laws.
Legitimate Interest
When we process your personal data for customer service purposes, marketing, and developing our Services, we do it on the basis of our legitimate interest to run, maintain, and develop our business and to create and maintain customer relationships
we carefully weigh our own interests against your right to privacy under applicable laws
Legal Rights & Agreement Rules · Company practice
Oura says it must process certain information to comply with legal obligations that may vary in each country, for example consumer protection or accounting legislation.
Legal Obligation
Oura must process certain information to comply with legal obligations which may vary in each country
consumer protection or accounting legislation
Data Access & Collection · Company practice
For online customers and site visitors, Oura says that in most cases it collects personal data directly from you, such as when you register for an account, tag your data in the Oura app or use your Oura Ring. It may also process data produced from information you give and may receive personal data about you from third parties such as partners. It may rely on trusted third-party processors, such as cloud service providers.
In most cases, Oura collects personal data directly from you, such as when you register for an account, tag your data in the Oura mobile or web app, or use your Oura Ring
we may receive personal data about you from third parties, such as partners
Oura may also rely on trusted third-party processors to process data on our behalf, such as our cloud service providers
Data Access & Collection · Company practice
For online customers and site visitors, Oura processes contact information (name, email address and address), delivery information (such as your purchases and chosen payment method), device information (such as IP address, time of visit and location data) and user activity (such as browsing patterns on the Site and communications you have with Oura).
Oura processes the following personal data categories when you use our Services
Contact information such as name, email address and address
Delivery information such as your purchases and chosen payment method
Device information such as IP address, time of visit, and location data
User activity such as browsing patterns on the Site and any communications you have with us
Use & Processing · User right or choice
By giving Oura your phone number you agree to receive text messages from Oura, such as shipping notifications or order updates. Message and data rates may apply and frequency varies. You can opt out at any time by replying STOP to any text message. Oura says it does not share or sell text messaging opt-in consent data with any third party or affiliate for marketing or promotional purposes.
SMS/TEXT MESSAGING
By providing your phone number, you agree to receiving text messages from Oura
Message and data rates may apply
You may opt out of receiving text messages at any time by replying STOP to any text message you receive from us
Oura does not share or sell text messaging opt-in consent data with any third party or affiliate for marketing or promotional purposes
Charges & Financial Obligations · Company practice
Depending on the transaction, Oura and its payment processors may process your payment card number, expiration date and security code, billing name and address, and the transaction amount, date and merchant. This applies across Oura Sites and Services.
PAYMENTS
This section describes how we process payment information across Oura Sites and Services
Depending on the transaction, Oura and our payment processors may process your payment card number, expiration date, and security code; billing name and address; transaction amount, date, and merchant
Charges & Financial Obligations · Company practice
Oura uses PCI-DSS-compliant payment processors and card networks, and for contactless payments issuing banks and token service providers, to process transactions. These partners receive the minimum information needed to facilitate your transaction and are bound by their own privacy and security obligations.
Oura uses PCI-DSS-compliant payment processors, card networks, and for contactless payments, issuing banks and token service providers, to process transactions
These partners receive the minimum information needed to facilitate your transaction, and they are bound by their own privacy and security obligations
Security & Safeguards · Company commitment
Oura says it maintains a payment environment designed to align with the Payment Card Industry Data Security Standard (PCI DSS) and that its payment processors are PCI DSS-validated service providers.
Oura maintains a payment environment designed to align with the Payment Card Industry Data Security Standard (PCI DSS)
Our payment processors are PCI DSS-validated service providers
Legal Rights & Agreement Rules · Restriction or exception
The Policy is a unified global privacy policy for people who use Oura Services and Sites worldwide. In some jurisdictions local law adds obligations or rights, and Oura publishes a country-specific addendum that supplements the Policy. If you live in a listed jurisdiction you should read both the Policy and the addendum. Where an addendum addresses a topic differently from the Policy, the addendum controls for members and users in that jurisdiction, and in all other respects the Policy applies. The source lists the Republic of Korea (South Korea).
COUNTRY-SPECIFIC ADDENDA
This Policy is a unified, global privacy policy that applies to those who use Oura Services and Sites worldwide
we publish a country-specific addendum that supplements this Policy
Where a specific addendum addresses a topic differently than this Policy, the addendum controls for members and users in that jurisdiction
Republic of Korea (South Korea)
Legal Rights & Agreement Rules · Procedure
If you live in a U.S. state with enhanced privacy requirements, the Policy tells you to read the section titled U.S. States With Enhanced Privacy Requirements.
If you reside in a U.S. state with enhanced privacy requirements, please read the section titled
Legal Rights & Agreement Rules · Context
The U.S. notice supplements the Privacy Policy and applies only to visitors, users and others who live in U.S. states with enhanced privacy notice requirements, such as California, and who use Oura's Sites or Services.
U.S. STATES WITH ENHANCED PRIVACY REQUIREMENTS
NOTICE FOR ALL U.S. CONSUMERS
This notice supplements the information contained in Oura's Privacy Policy and applies solely to all visitors, users, and others who reside in states within the U.S. with enhanced privacy notice requirements, such as California
Legal Rights & Agreement Rules · Company practice
Oura says it is generally not a Covered Entity under HIPAA for its direct-to-consumer Services. In some instances where Oura acts as a Business Associate under HIPAA, the U.S. state privacy rights in this section may not apply, and Oura may choose to offer self-serve tools to access and delete your data, subject to its HIPAA policies, the Covered Entity's practices and its Business Associate obligations.
Oura is generally not a Covered Entity under HIPAA for our direct-to-consumer Services
in some instances where Oura is acting as a Business Associate under HIPAA, the U.S. state privacy rights outlined in this section may not apply
Oura may choose to offer self-serve tools that enable you to access and delete your personal data from our Services
Legal Rights & Agreement Rules · Company practice
When you direct a HIPAA Covered Entity or Business Associate to share your health records with Oura through a patient-directed disclosure or HIPAA Authorization, the records Oura receives no longer fall under HIPAA while in Oura's possession, and the rights described in this section apply.
When you direct a HIPAA Covered Entity or Business Associate to share your health records with Oura through a patient-directed disclosure or HIPAA Authorization
the records we receive no longer fall under HIPAA while they are in Oura
Data Access & Collection · Context
For the U.S. notice, personal information (or personal data) means information that identifies, relates to, describes, references or could reasonably be linked, directly or indirectly, with a particular consumer, device or household, and where applicable consumer health data. It is described as what Oura collects when a customer interacts with its Sites or Services.
Collection, use, and sharing of information
Oura collects information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, device, or household
Legal Rights & Agreement Rules · Procedure
For the categories of personal information collected, the purposes of processing and any sharing, the U.S. notice points to relevant sections of the Policy: device and application user categories and purposes, online store and website visitor categories and purposes, and the sharing of personal data.
Information about the categories of personal information we collect, the purposes for which your personal information is processed, and any sharing of your personal information can be found from relevant sections of this Policy
Device and Application User: categories of collected personal information and processing purposes
Online Store and Website Visitor: categories of collected personal information and processing purposes
Sharing of personal data
Use & Processing · Company commitment
Some personal information Oura processes is classified as sensitive personal information, sensitive data or consumer health data under U.S. state law. This includes data about your health and measurements collected by Oura Services, health records you import, reproductive and sexual health information, diagnoses and other legally or socially sensitive data. Oura says it processes this information for the purposes described in the Policy and not to infer characteristics about you outside those purposes. It says it does not use sensitive personal information for targeted advertising and does not sell or share personal information for cross-context behavioral advertising.
Some of the personal information we process is classified as
This includes data about your health and measurements collected by Oura Services, health records you import to our Services, reproductive and sexual health information, diagnoses, or other legally or socially sensitive data
We process this information for the purposes described in this Policy, and not to infer characteristics about you outside those purposes
We do not use sensitive personal information for targeted advertising and we do not sell or share personal information for cross-context behavioral advertising
Sharing & Disclosure · Company practice
Oura says that in the preceding twelve months it has not sold personal information to third parties, including data aggregators, because doing so is against its policies. It says it has collected and disclosed only the categories of personal information described in the Data Sharing and Transfers section.
In the preceding twelve (12) months, Oura has not sold personal information to third parties, including data aggregators, as it is against our policies
We have collected and disclosed only the categories of personal information processed by Oura under this Policy as described in the Data Sharing and Transfers section
Use & Processing · Company practice
Oura says it may collect and use personal data to develop, test, improve and support its own AI, machine learning and large language model-powered features. It says it does not sell personal data for the purpose of training third-party large language models.
We may collect and use personal data to develop, test, improve, and support Oura
We do not sell personal data for the purpose of training third party Large Language Models
Inference & Profiling · Company commitment
Oura says some Service features rely on AI-based analysis of your data, and that these features are designed to provide general wellness information rather than to make legal or similarly significant decisions about you.
Some features of our Services rely on AI-based analysis of your data
designed to provide general wellness information and not to make legal or similarly significant decisions about you
Legal Rights & Agreement Rules · User right or choice
If you live in a state with enhanced rights over the personal information Oura may process, you have certain rights, set out in the cards that follow.
CONSUMER RIGHTS
If you are a resident of a state with enhanced rights related to the personal information Oura may process about you, you have certain rights
Data Access & Collection · User right or choice
U.S. state laws may give you the right to ask Oura to disclose the personal information it collected about you over the past 12 months. Oura says it provides this only after it receives and validates your request. Once confirmed, it will disclose the categories of information collected, the categories disclosed (if any), the categories of sources, its business or commercial purposes for collecting or selling the information, the categories of third parties it shares with, and the specific pieces of information collected about you.
Right to know about the personal information we collect and share
U.S. State laws may give you the right to request that we disclose the personal information we have collected about you over the past 12 months, which we only provide after we receive and validate your request
The categories of personal information we collected about you
The categories of personal information we have disclosed about you (if any)
The categories of sources for the personal information we collected about you
Our business or commercial purposes for collecting or selling that personal information
The categories of third parties with whom we share that personal information
The specific pieces of personal information we collected about you
Account & Service Control · User right or choice
You have the right to ask Oura to correct your personal information. After Oura receives and validates your request it will correct the information unless an exception applies. You can correct and update some basic information through the Oura App and Membership Hub.
Right of correction
You have the right to request correction of your personal information. After we receive and validate your request, we will correct your personal information, unless an exception applies
you can correct and update some of your basic information via the Oura App and via Membership Hub
Retention & Deletion · User right or choice
You have the right to ask Oura to erase your personal information, subject to certain exceptions such as a legal obligation to retain the data. After Oura receives and validates your request it will delete the information and direct its service providers to delete it, unless an exception applies.
Right of deletion
You have the right to request erasure of your personal information, subject to certain exceptions, such as when we have a legal obligation to retain the data in question
After we receive and validate your request, we will delete your personal information, as well as direct our service providers to delete your personal information unless an exception applies
Account & Service Control · Procedure
To request disclosure, access, correction or deletion, a resident of a state with enhanced privacy rights submits a verifiable consumer request by emailing dataprotection@ouraring.com with their full name, company name (if applicable), address, email address and phone number. Oura may ask for more information to confirm identity, which it says is for security and required by law in some cases.
How to make disclosure, access, correction, or deletion requests
you can request disclosure, access to, correction, and/or deletion of your personal data as described above by submitting a verifiable consumer request to us by
Sending an e-mail to dataprotection@ouraring.com including the following information along with your request: your full name, company name (if applicable), address, e-mail address, and a phone number
We may request that you provide additional information if necessary to confirm your identity
Account & Service Control · Procedure
Only you or your designated authorized agent, as applicable, may make a verifiable consumer request about your personal information. You may also make a verifiable request on behalf of your minor child.
Only you, or your designated authorized agent as applicable, may make a verifiable consumer request related to your personal information
You may also make a verifiable consumer request on behalf of your minor child
Account & Service Control · Procedure
You may make a free request up to two times in any 12-month period. Oura says it will respond to validated requests within 45 days of receiving the request, unless it requests an extension. If it reasonably needs an extension it will notify you within the initial 45-day period.
You have the right to make a free request up to two times in any 12-month period
We will respond to all validated requests within 45 days of receiving your request, unless we request an extension
we will notify you of any such extension within the initial 45-day period
Account & Service Control · User right or choice
If Oura decides not to act on your request you may appeal by emailing dataprotection@ouraring.com and marking the request Appeal. Oura says it will resolve the appeal within the time frames set by applicable law and, if it denies the appeal, explain why. If you still dispute the decision or want to complain, you can contact the regulator in your jurisdiction that handles privacy complaints, such as your state Attorney General.
Right to Appeal
If we decide not to take action in response to your request, you may submit an appeal by sending an email to dataprotection@ouraring.com and mark your request as an
We will resolve your appeal within the time frames established by applicable law. If your appeal is denied, we will explain why
you may contact the regulator in your jurisdiction that handles privacy complaints, such as your state Attorney General
Account & Service Control · Company commitment
Oura says it does not discriminate against users who exercise their privacy rights. Unless an exception applies, it promises not to deny goods or services, charge different prices or rates (including through discounts, benefits or penalties), provide a different level or quality of goods or services, or suggest that you may receive a different price or level of quality.
Non-Discrimination
Oura does not discriminate against users who request to exercise their privacy rights. Unless an exception applies, this includes our promise not to
Deny you goods or services
Charge you different prices or rates for goods or services, including granting discounts or other benefits, or imposing penalties
Provide you a different level or quality of goods or services
Account & Service Control · Company commitment
Continuing the non-discrimination promise, Oura says that unless an exception applies it will not provide you a different level or quality of goods or services, or suggest that you may receive a different price or rate or a different level or quality, because you exercised your privacy rights.
Unless an exception applies, this includes our promise not to
Charge you different prices or rates for goods or services, including granting discounts or other benefits, or imposing penalties
Provide you a different level or quality of goods or services
Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services
Legal Rights & Agreement Rules · Context
This notice supplements the Policy and applies only to visitors, users and others who live in Washington State, for their Consumer Health Data as defined under the Washington My Health My Data Act (MHMD). Oura says it collects, uses, processes and shares Consumer Health Data as described elsewhere in the Policy.
CONSUMER HEALTH DATA PRIVACY NOTICE
applies solely to visitors, users, and others who reside in the state of Washington, with respect to your Consumer Health Data as defined under the Washington My Health My Data Act
Oura collects, uses, processes, and shares Consumer Health Data as described above in this Policy
Account & Service Control · User right or choice
Washington consumers have the right to confirm whether Oura is collecting, sharing or selling their Consumer Health Data and to access it, including a list of all third parties and affiliates with whom Oura has shared or sold it and an active email address or other online way to contact them. They also have the right to request deletion, subject to certain exceptions, and the right to withdraw consent for collection and sharing of Consumer Health Data.
If you are a Washington consumer, you have certain rights with respect to your Consumer Health Data
You have the right to confirm whether Oura is collecting, sharing, or selling your Consumer Health Data, and to access such data, including a list of all third parties and affiliates with whom Oura has shared or sold your Consumer Health Data and an active email address or other online mechanism for contacting those third parties
You have the right to request that Oura delete your Consumer Health Data, subject to certain exceptions
You have the right to withdraw your consent for the collection and sharing of your Consumer Health Data
Account & Service Control · User right or choice
If Oura denies a Washington consumer's request to exercise their rights, they may appeal. If the appeal is unsuccessful they may raise a concern or file a complaint with the Washington State Attorney General.
If Oura denies your request to exercise any of these rights, you may appeal that decision
you may raise a concern or lodge a complaint with the Washington State Attorney General
Account & Service Control · Procedure
Washington consumers exercise these rights by emailing dataprotection@ouraring.com, with enough information for Oura to verify their identity and specifying the right they wish to exercise. Oura may request more information, such as to confirm identity for security purposes.
You may exercise any of the rights described above by submitting a request to us by emailing dataprotection@ouraring.com
Your request should include sufficient information for us to verify your identity and should specify the right you wish to exercise
Sharing & Disclosure · Company commitment
Oura says it does not sell or rent your personal information and only shares your personal data with certain trusted service providers and partners so it can provide and improve its services, provide partner services and other offerings, and operate its business. When it shares data with third-party service providers it requires them to use the information only for purposes it has authorized and the limited reasons in the Policy, and to protect it to at least the same standards that Oura does.
Personal data sharing
Oura does not sell or rent your personal information, and only shares your personal data with certain trusted service providers and partners so that we can provide and improve our services, to provide partner services and other offerings, and to operate our business
we require that they use your information only for the purposes we
We also require these service providers to protect your personal information to at least the same standards that we do
Sharing & Disclosure · Company practice
Oura says that, like most companies, it uses service providers for providing and improving its online service platform, storing users' data, providing customer services, managing and organizing its marketing activities, and analyzing information about use of its Sites and Services to improve service quality.
Like most companies, Oura uses service providers for purposes such as
Providing and improving our online service platform
Storing our users
Providing customer services
Analyzing information regarding the use of our Sites and Services to improve our service quality
Sharing & Disclosure · Company commitment
Among the service provider purposes, Oura lists managing and organizing its marketing activities and says it does not share Service data with third-party advertisers.
Managing and organizing our marketing activities. Oura does not share Service data with third-party advertisers
Security & Safeguards · Company commitment
Oura says it uses industry standard data protection measures to safeguard all international transfers of personal data through data protection agreements with its service providers.
We use industry standard data protection measures to safeguard all international transfers of personal data through data protection agreements with our service providers
Sharing & Disclosure · User right or choice
In certain limited cases you may be asked for consent to share your Oura user personal data with a third-party partner of your choice, such as a medical provider or health care insurer you select. If you do, Oura says you should review the third party's consent language and privacy notices, which control the use of your data.
In certain limited cases, you may be asked for consent to share your Oura user personal data with a third-party partner of your choice, such as a medical provider or health care insurer that you select
you should carefully review the third-party consent language and privacy notices that are available to you from the third-party, which will control the use of your personal data
Sharing & Disclosure · Company commitment
Oura says it is a global company with servers around the world, so your personal data may be processed on servers outside the country where you live. It says that regardless of where data is processed it applies the protections described in the Policy, and that it complies with certain legal frameworks for transfers of personal data.
LEGAL FRAMEWORKS FOR INTERNATIONAL TRANSFERS
your personal data may at times be processed on servers located outside of the country where you live
regardless of where your personal data is processed, we apply the same protections described in this Policy
We also comply with certain legal frameworks relating to the transfer of personal data
Legal Rights & Agreement Rules · Company commitment
Oura says it participates in the EU-US Data Privacy Framework, the UK Extension to it and the Swiss-US Data Privacy Framework (together the Data Privacy Frameworks) set by the US Department of Commerce, for personal data from the European Economic Area, the United Kingdom and Gibraltar, and Switzerland. It says it has certified that it adheres to the principles of the Data Privacy Frameworks.
Oura participates in the EU-US Data Privacy Framework, the UK Extension to the EU-US Data Privacy Framework, and the Swiss-US Data Privacy Framework
regarding the processing of personal data from the European Economic Area, the United Kingdom and Gibraltar, and Switzerland
Oura has further certified that we adhere to the principles of the Data Privacy Frameworks
Legal Rights & Agreement Rules · Restriction or exception
The Policy links to the Data Privacy Frameworks website and says that if there is any conflict between its terms and the Data Privacy Frameworks principles, the principles govern.
If there is any conflict between the terms in this Policy and the Data Privacy Frameworks principles, the principles shall govern
Legal Rights & Agreement Rules · Company commitment
If Oura transfers personal information received under the Data Privacy Frameworks to a third party, the third party's processing must also comply with Oura's Data Privacy Frameworks obligations. Oura says it remains liable under the Data Privacy Frameworks for the third party's failure to do so, unless it proves it is not responsible for the event giving rise to the damage.
If Oura transfers personal information received under the Data Privacy Frameworks to a third-party
we will remain liable under the Data Privacy Frameworks for any failure to do so by the third-party, unless we prove we are not responsible for the event giving rise to the damage
Legal Rights & Agreement Rules · Company practice
Oura says it is subject to the investigatory and enforcement powers of the US Federal Trade Commission. It says that in certain situations it may be required to disclose personal information it processes under the Data Privacy Frameworks in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
Oura is subject to the investigatory and enforcement powers of the US Federal Trade Commission
Oura may be required to disclose the personal information we process under the Data Privacy Frameworks in response to lawful requests by public authorities, including to meet national security or law enforcement requirements
Sharing & Disclosure · Permission or license
Oura says it reserves the right to disclose personal data under certain specific circumstances, including when it has your express consent, to protect Oura's legal rights and property, and when it believes in good faith that disclosure is necessary or appropriate to comply with valid legal requirements.
Personal data disclosures
We also reserve the right to disclose personal data under certain specific circumstances, including
When we have your express consent to do so
To protect Oura
When we believe in good faith such disclosure is necessary or appropriate to comply with valid legal requirements
Sharing & Disclosure · Permission or license
Oura reserves the right to disclose personal data when it is reasonably necessary for its legitimate interests in conducting its business, such as in the event of a merger, acquisition or sale.
When it is reasonably necessary for our legitimate interests in conducting our business, such as in the event a merger, acquisition, or sale
Legal Rights & Agreement Rules · Company commitment
Oura says it reviews each law-enforcement and government request for personal data case by case and handles them in line with applicable law. It says it will oppose, seek to narrow or reject requests it considers overly broad, insufficiently supported or legally deficient, particularly where the data is sensitive. It will notify affected members where legally permissible. It says it is evaluating ways to give more visibility into these requests, such as a transparency report.
We review each law-enforcement and government request for personal data on a case-by-case basis
We will oppose, seek to narrow, or reject requests that we deem overly broad, insufficiently supported, or otherwise legally deficient, particularly where the requested data is sensitive
We will notify affected members of requests for their data where legally permissible
We are actively evaluating ways to provide greater visibility into how we handle these requests, like through a transparency report
Account & Service Control · Procedure
Oura says it aims to protect members' personal data even when it receives posthumous access requests. An heir or legal representative of a deceased member can contact dataprotection@ouraring.com to submit a request about the member's data. Oura says it will verify the requester's identity, relationship to the deceased and legal authority first, and will honor all applicable rights granted by the law of the jurisdiction where the member lived.
we aim to protect our members
if you are an heir or legal representative of a loved one who used our Services, we are here to help
We will verify your identity, relationship to the deceased, and legal authority before processing your request
We will honor all applicable rights granted to you by the laws of the jurisdiction where the deceased member resided
Security & Safeguards · Company commitment
Oura says it uses technical and organizational safeguards to keep your data safe and secure. When appropriate, these include anonymization or pseudonymization of personal data, strict access control and encryption of the data it processes.
Safeguarding your data
Oura uses technical and organizational safeguards to keep your data safe and secure
When appropriate, these safeguards include measures such as anonymization or pseudonymization of personal data, strict access control, and the use of encryption to protect the data we process
Security & Safeguards · Company commitment
Oura says its personnel receive training so that personal data is processed only under its internal policies and applicable law, and that it limits access to your sensitive personal data to personnel who have specifically been granted access.
Our personnel receive adequate training to ensure personal data is processed only in accordance with our internal policies
We also limit access to your sensitive personal data to personnel that have specifically been granted such access
Security & Safeguards · Company commitment
Oura says online services it provides through its Site protect your personal data in transit with encryption and other security measures, and that it regularly tests its service, systems and other assets for possible security vulnerabilities.
Online services that we provide via our Site protect your personal data in-transit using encryption and other security measures
We also regularly test our service, systems, and other assets for possible security vulnerabilities
Security & Safeguards · Procedure
Oura says it updates its Services regularly to protect your personal data and recommends that you always have the latest app and firmware versions installed to maximize protection.
We update our Services regularly to protect your personal data
We recommend that you make sure that you always have the latest app and firmware versions installed in order to maximize protection of your data
Retention & Deletion · Company practice
Oura says the retention period for your personal data generally depends on how long your Oura account lasts. It says data will be deleted when no longer needed for the purpose it was collected, unless a legal obligation requires longer retention. For example, your sleep, readiness and activity measurement data is stored only while your account is active.
Data Retention
The retention period for your personal data generally depends on the duration of your Oura account lifecycle
Your personal data will be deleted when it is no longer needed for the purpose for which it was originally collected, unless we have a legal obligation to retain data for a longer period of time
your measurement data regarding your sleep, readiness, and activity is stored only so long as your Oura account is active
Retention & Deletion · Restriction or exception
Oura says it also has legal obligations to keep certain personal data for specific periods, such as for tax purposes, and that these may include accounting and tax requirements, legal claims or other legal purposes. It notes that mandatory retention periods vary by the relevant law.
Oura also has legal obligations to retain certain personal data for a specific period of time, such as for tax purposes
obligatory retention periods for personal data vary based on the relevant law
Account & Service Control · User right or choice
If you wish, you may ask Oura to delete your Oura account by contacting dataprotection@ouraring.com, or you can remove your account data from the Services within the Oura App or Membership Hub by following instructions on the Oura Help Center.
you may request deletion of your Oura account by contacting dataprotection@ouraring.com
you can remove your account data from the Services within the Oura App or Membership Hub by following the instructions available on the
Data Access & Collection · Company practice
Oura says it uses cookies and other technologies to collect and store analytics and other information when customers use its Site, and for personalization and advertising purposes. The cookies include both first-party and third-party cookies.
Use of cookies
We use cookies and various other technologies to collect and store analytics and other information when customers use our Site, as well as for personalization and advertising purposes
The cookies we use include both first-party and third-party cookies
Data Access & Collection · Company practice
Oura describes cookies as small text files saved on your device that let it identify visitors to its Site, ease use of the Site and create aggregate information about visitors. It says it uses cookies and similar technologies to tailor the Site and the information it provides to customers' individual interests, and to integrate its social media accounts on the Site.
Cookies are small text files sent and saved on your device that allows us to identify visitors of our Site, facilitate the use of our Site, and to create aggregate information of our visitors
We use cookies and similar technologies to tailor our Site and the information we provide in accordance with the individual interests of our customers
We also use cookies and similar technologies for integrating our social media accounts on our Site
Data Access & Collection · Procedure
Oura refers you to its Cookie Policy for more information about its use of cookies and how to set cookie preferences.
Please see our
Account & Service Control · User right or choice
Oura says that whenever it processes your personal data you have certain rights that let you control how it is processed, and that this section describes them. To exercise your rights as a data subject, contact dataprotection@ouraring.com.
Your rights as a data subject
Whenever Oura processes your personal data, you have certain rights that enable you to control how your personal data is being processed
If you wish to exercise your rights as a data subject, please contact dataprotection@ouraring.com
Account & Service Control · User right or choice
You have the right to know what personal data is processed about you. You may ask Oura for access to the personal data it has collected, and it will confirm whether it is processing your data and give you information about the data collected and processed. Using the Oura App you can easily access the sleep, readiness and activity data Oura processes about you, and you can access your data through Membership Hub.
Right to access data
You have the right to know what personal data is processed about you
we will confirm whether we are processing your data, and provide you with information about the personal data we have collected and processed
by using the Oura App, you can easily access the sleep, readiness, and activity data that we process about you
You can also access your data via Membership Hub
Retention & Deletion · User right or choice
You have the right to ask Oura to delete your personal data in certain circumstances. Oura says it will comply unless it has a valid legal basis not to or a legal obligation to preserve the data.
Right to erasure
You have the right to request the deletion of your personal data in certain circumstances
We will comply with such requests unless we have a valid legal basis not to do so, or a legal obligation to preserve the data
Account & Service Control · User right or choice
You have the right to ask Oura to correct incorrect or incomplete personal data it stores about you. You can correct and update some of your basic information directly within the Services.
Right to rectification (of inaccurate data)
You have the right to request correction of any incorrect or incomplete personal data we have stored about you
you can correct and update some of your basic information directly within our Services
Account & Service Control · User right or choice
You have the right to ask to receive the personal data you provided to Oura in a structured, commonly used format. The right applies only when Oura processes your data for certain reasons, such as by contract or with your consent. Oura says Membership Hub lets you export your own data.
Right to data portability
You have the right to request receipt of the personal data you have provided to us in a structured and commonly used format
The right to data portability only applies when we process your personal data for certain reasons, such as by contract or by your consent
Membership Hub provides you with the ability to export your own data
Use & Processing · User right or choice
You have the right to object to or opt out of processing of your personal data under certain circumstances. If Oura has no legitimate grounds to continue, it will stop processing after receiving and verifying your objection. As examples, under some regulations you may have the right to object to the sale of your data, profiling or targeted advertising as defined by law. Oura says it does not sell your data, profile or engage in targeted advertising based on your personal data, and that you can always opt out of direct marketing at any time.
Right to object to processing
You have the right to object to or opt out of the processing of your personal data under certain circumstances
In the event that we do not have legitimate grounds to continue processing such personal data, we will no longer process your personal data after we have received and verified your objection
Oura does not sell your data, profile, or engage in targeted advertising based on your personal data, and you always have the right to opt out of direct marketing at any time
Use & Processing · User right or choice
You have the right to ask Oura to restrict processing of some types of personal data in certain circumstances. For example, if you contest the accuracy of your data you can ask Oura not to process it until Oura has verified the accuracy.
Right to restrict processing
You have the right to request that we restrict processing some types of personal data under certain circumstances
if you contest the accuracy of your data, you can make a restriction request that we do not process your data until Oura has verified the accuracy of your data
Account & Service Control · User right or choice
If Oura asked for your consent to process your personal data, you have the right to withdraw it at any time where local law provides that right. Withdrawing consent may cause problems or restrictions in fully using the Oura Services. You can always unsubscribe from the newsletter and marketing emails using the Unsubscribe link.
Right to withdraw consent
you have the right to withdraw your consent for such processing at any time where this right is provided by local law
withdrawing your consent may lead to issues or restrictions on your ability to fully utilize Oura Services
you can always unsubscribe from receiving our newsletter and other marketing emails
Legal Rights & Agreement Rules · User right or choice
Oura says it strives to address privacy concerns. If you contacted Oura and are still unhappy with its response, subject to applicable law you may contact your local supervisory authority, although Oura urges you to contact dataprotection@ouraring.com first so it can resolve the issue sooner.
If you have contacted Oura about your issue and are still unhappy with our response, subject to applicable law, you may contact your local supervisory authority regarding your issue
we urge you to first contact us at dataprotection@ouraring.com so that we can more quickly resolve your issue before escalating the issue
Legal Rights & Agreement Rules · User right or choice
For questions or complaints about its handling of personal information under the Data Privacy Frameworks, contact dataprotection@ouraring.com. For complaints it cannot resolve directly, Oura says it has chosen to cooperate with the relevant EU Data Protection Authority or panel (for EU individuals), the UK Information Commissioner (for UK individuals) and the Swiss Federal Data Protection and Information Commissioner (for Swiss individuals). It says that, as explained in the principles, binding arbitration is available for complaints not resolved by other means.
If you have a question or complaint about our handling of your personal information under the Data Privacy Frameworks, please contact us at dataprotection@ouraring.com
we have chosen to cooperate with the relevant EU Data Protection Authority, or a panel established by the European data protection authorities (for EU individuals), the UK Information Commissioner (for UK individuals), and the Swiss Federal Data Protection and Information Commissioner (for Swiss individuals)
binding arbitration is available to address complaints not resolved by other means
Legal Rights & Agreement Rules · Procedure
If you live in a U.S. state with enhanced privacy requirements and want to know more about your rights under those laws, the Policy tells you to read the section titled U.S. States With Enhanced Privacy Requirements.
Please read the section in this Policy titled
if you are a resident of a U.S. state that provides enhanced privacy requirements and you would like to know more about your rights under those laws
Legal Rights & Agreement Rules · Context
Oura says Ouraring Inc. is the data controller of user personal data processed for marketing purposes, and Oura Health Oy is the controller for all other processing purposes. It gives contact details for Oura Health Oy in Oulu, Finland and Ouraring Inc. in San Francisco, California, with the Data Protection Officer contact dataprotection@ouraring.com for each.
Controller contact information
Ouraring Inc. is the data controller of user personal data processed for marketing purposes. The controller of personal data processed for all other processing purposes is Oura Health Oy
Oura Health Oy Address: Elektroniikkatie 10, 90590 Oulu Finland
Ouraring Inc. Address: 415 Kearny Street, San Francisco, CA 94108, United States
Legal Rights & Agreement Rules · Restriction or exception
Oura reserves the right to update the Policy from time to time at its sole discretion. It says it strives to tell you about material changes by notifying you on its Site or by email or push notification. If you keep using Oura Sites or Services after a change, Oura says your continued use means you accept the change.
Changes to this privacy notice
We reserve the right to update this Policy from time to time at our sole discretion
We strive to let you know about any material changes by notifying you on our Site or by sending you an email or push notification
If you keep using Oura Sites or Services after a change to this Policy, your continued use means that you accept any such changes