Old version
May 15, 2026 01:26 UTC
75548e6b6408c567cc69d71e4dfe9c2d4a336c2d52ad83559ca6575b8f41bfb1
CA-V-002660
New version
June 16, 2026 01:27 UTC
2b4d61bf3387865a69290822c9f40cf41d660d8dd9ebd711a39c3a0d4af8fd13
CA-V-003895
Share 𝕏 Share in Share
Change Summary
Oura's June 16, 2026 privacy policy update adds explicit disclosure of AI and machine learning features used in the service, including the Oura Advisor assistant and algorithmic suggestions. The updated policy now specifically describes how personal data is processed to develop and refine AI-powered features, whereas the previous version referenced only general improvement and insight generation. The policy clarifies that users can choose whether to engage with or share data with partner services when AI-driven suggestions are offered.
medium severity
84 Sentences added
12 Sentences removed
64 Sentences modified
232 Sentences before
304 Sentences after
Added
Removed
Modified
BeforeAfter
0ŌURA Health Privacy Policy April 20, 2026 Oura's commitment to privacy At ŌURA, protecting your personal data is a task we take seriously.0ŌURA Health Privacy Policy June 15, 2026 Oura's commitment to privacy At ŌURA, protecting your personal data is a task we take seriously.
5About this privacy policy This Policy applies to processing of personal data by Oura Health Oy and Ouraring Inc. and its subsidiaries(collectively, "Oura") when you visit our web properties (“Sites”); use the Oura Ring with the Oura App, Oura on the Web, or use other Oura services (“Services”).5About this privacy policy This Policy applies to processing of personal data by Oura Inc, Oura Health Oy, Ouraring Inc., and subsidiaries (collectively, "Oura") when you visit our web properties (“Sites”); use the Oura Ring with the Oura App, Membership Hub or use other Oura services (“Services”).
9Device & application users Processing Purposes When you use Oura Services, we collect and processes your personal data for the following purposes: To Provide Oura Services We process personal data when you use our Services, such as to provide you with personalized insights about your readiness, sleep, activity, and other inferences about your health status.9Device & application users Processing Purposes When you use Oura Services, we collect and process your personal data for the following purposes: To Provide Oura Services We process personal data when you use our Services, such as to provide you with personalized insights about your readiness, sleep, activity, and other inferences about your health status.
10Some features in our Services use artificial intelligence and machine learning (“AI”).
11For example, Oura Advisor is an AI assistant that, when you engage with the feature, provides personalized wellness guidance based on information you submit to Oura or direct our Services to collect.
12We also use AI and algorithmic analysis to provide you with suggestions to follow up with partner services.
13You get to decide whether you want to engage with or share any personal data with partner services when we do this.
11For example, if you contact our virtual assistant with questions regarding your account, we may use the provided information to answer your questions, and for solving any issues you may have.15For example, if you contact our AI assistant with questions regarding your account, we may use the provided information to answer your questions, and for solving any issues you may have.
16For example, we may process personal data to improve your user experience in the Oura App or to develop cutting-edge features to provide you with new insights about your health.20For example, we may process personal data to improve your user experience with our Services, including within the Oura App.
17When feasible, we do this using data that has been processed in a manner to protect your privacy, such as by pseudonymization.21We may also use personal data to develop or refine AI-powered features that provide you with new insights about your health.
22Where appropriate, we use privacy-protective measures, like pseudonymization, aggregation, or de-identification.
22To Market Services We process marketing-related personal data to provide online advertising and other marketing communications on behalf of Oura and our partners.27To Market Services We process personal data to provide marketing communications for Oura Services and partner opportunities.
24You can opt out of direct marketing communications from Oura.29We do not sell or share your personal data for cross-context behavioral advertising.
25To Enable Third-party Integrations and Services We process personal data you provide to Oura to enable third party integrations, services, features, and offerings.30You can opt out of direct marketing communications from Oura by unsubscribing within emails.
26For example, with your permission, our Services may integrate with third-party services like Google Health Connect and Apple HealthKit, or those of our partners.31You may see personalized opportunities surfaced within our Services to connect with partners who can support your health journey.
32To Enable Third-party Integrations and Third-party Services We process personal data you provide to Oura to enable third party integrations, services, features, and offerings.
33For example, with your permission, our Services may integrate with third parties, including Google Health Connect and Apple HealthKit, LLM providers, or other partner experiences.
36If you direct Oura to transfer your data to a third party, that third party’s own privacy practices and terms will govern what it does with your personal data.
37Please review the third party’s privacy policy before you authorize a connection.
38You can disconnect a third party integration at any time.
39Disconnecting prevents future access.
40Because we cannot recall data that a third party has already received, you should also exercise any deletion or withdrawal rights directly with the third party.
30Such statutory obligations are related, for example, to accounting and tax requirements, legal claims, or other legal purposes.42Such legal obligations are related, for example, to accounting and tax requirements, legal claims, or other legal purposes.
31Oura will oppose any request to provide legal authorities with access to user data for surveillance or prosecution purposes.43Legal basis for processing Data protection law in Europe requires a "lawful basis" for collecting and retaining personal information from residents of the European Economic Area and the U.K. Our lawful bases for processing your data depend on the particular processing purposes, including: Contract When processing personal data for the purpose of providing our Services, we process personal data on the basis of a user contract, which is formed when you create your account and accept this Policy and Terms of Use .
32We will notify users if we receive any such request whenever legally permissible.Removed
33Legal basis for processing Data protection law in Europe and the U.K. requires a "lawful basis" for collecting and retaining personal information from residents of the European Economic Area.Removed
34Our lawful bases for processing your data depend on the particular processing purposes, including: Contract When processing personal data for the purpose of providing our Services, we process personal data on the basis of a user contract, which is formed when you create your account and accept this Policy and Terms of Use .Removed
39Legal Obligation Oura must process certain information to comply with statutory obligations which may vary in each country.48Legal Obligation Oura must process certain information to comply with legal obligations which may vary in each country.
42We may also process personal data that is produced from the information you provide to us.51We may also process personal data that is produced from the information you provide to us, and we may receive personal data about you from third parties, such as partners.
44Oura processes the following personal data categories when you use our Services: Contact information such as email address or physical address.53Oura processes the following personal data categories when you use our Services: Contact information such as email address or physical address User information such as gender, height and weight, User ID, and other information you may provide to us about yourself or your account Device information such as IP address and location data User-provided information such as the activities, notes, photos, comments, user feedback, tags you provide within the app, text you submit to AI assistants, and uploaded Electronic Health Records or health panels Measured data such as heart rate, movement data, temperature data, and respiration data Calculated user, sleep, health, and activity data such as sleep phases (deep, light, REM, awake), activity levels throughout the day, readiness level, and body mass index (calculated based on height and weight) Payment information such as card number, merchant, and billing address Please note that some of the personal data we process, including any data concerning your health, is considered special or sensitive personal data.
45User information such as gender, height and weight, User ID, and other information you may provide to us about yourself or your account.Removed
46Device information such as IP address and location data.Removed
47User-provided activity and contextual information such as the activities, notes, comments, user feedback, and tags you provide within the app.Removed
48Measured data such as heart rate, movement data, temperature data, and respiration data.Removed
49Calculated user, sleep, health, and activity data such as sleep phases (deep, light, REM, awake), activity levels throughout the day, readiness level, and body mass index (calculated based on height and weight).Removed
50Please note that some of the personal data we process, including any data concerning your health, is considered special or sensitive personal data.Removed
57Please also note that if you give your opt-in consent through our Services, you may share limited personal information like your current and past sleep and readiness scores with other Oura users.60If you give your opt-in consent through our Services, you may share limited personal information like your current and past sleep and readiness scores with other Oura Members.
58The information you choose to share may be shared with other Oura users in the circle(s) you join, and with any additional Oura users who are added to those circles.61The information you choose to share may be shared with other members in the circle(s) you join, and with any additional members who are added to those circles.
59You can make changes to what data you share with other Oura users, including opting out of sharing any data.62You can make changes to what data you share with other members, including opting out of sharing any data.
60Depending on your use of our Services, you may also choose to communicate with and react to other users' information and scores.63Depending on your use of our Services, you may also choose to communicate with and react to other members’ information and scores.
61Please remember to always maintain a respectful and supportive environment when communicating with other users.64Please remember to always maintain a respectful and supportive environment when communicating with other members.
62Please see Oura's Terms of Use for more information. ŌURA PLATFORM Oura Platform is a service that allows you to share your Oura Ring data with your doctor, coach, trainer, employer, researchers, and/or any other person or entity (“Data Recipient(s)”) with whom you choose to share your data after receiving an invitation to do so.65Please see Oura’s Terms of Use for more information. ŌURA ENTERPRISE PLATFORM Oura Enterprise Platform is a service that allows you to share Services data with your doctor, coach, trainer, employer, researchers, and/or any other person or entity (“Data Recipient(s)”) with whom you choose to share your data after receiving an invitation to do so.
64If you choose to participate in Oura Platform, once you consent to sharing your personal data with the Data Recipient the relevant requested data that you sync to your Oura App will become available to your Data Recipient in Oura Platform.67If you choose to participate in Oura Enterprise Platform, once you consent to sharing your personal data with the Data Recipient the relevant requested data that you sync to the Services will become available to your Data Recipient in Oura Enterprise Platform.
65The Oura Platform provides Data Recipients with access to their team's statistics at a glance and allows them to get a detailed look into the data you have chosen to share, such as heart rate, heart rate variability, activity level, and other data that you sync to your Oura App that falls within the scope that was requested in the invitation you received.68The Oura Enterprise Platform provides Data Recipients with access to their team’s statistics at a glance and allows them to get a detailed look into the data you have chosen to share, such as heart rate, heart rate variability, activity level, and other data that you sync to the Services that fall within the scope that was requested in the invitation you received.
66Once your data is shared to the Oura Platform, the Data Recipient becomes the controller of your personal data.69Once your data is shared to Oura Enterprise Platform, the Data Recipient becomes the controller of your personal data.
68Your personal data may be used by the Data Recipient in accordance with its own privacy practices, so please review the Data Recipient's privacy policy carefully before accepting the invite and opting-in to Oura Platform.71Your personal data may be used by the Data Recipient in accordance with its own privacy practices, so please review the Data Recipient’s privacy policy before accepting the invite and opting in to Oura Enterprise Platform.
69Oura is not responsible for the Data Recipient’s processing of your data or the security of any personal data that the Data Recipient has extracted from the Oura Platform.72Oura is not responsible for the Data Recipient’s processing of your data or the security of any personal data that the Data Recipient has extracted from Oura Enterprise Platform.
70Once you give consent to share your Oura data with the Data Recipient, the Data Recipient may get access to the following personal data, such as: Account data as inserted by you: Name E-mail address Gender Birth date and year Height and weight Activities Notes and tags Automatically collected and generated data: Heart rate Movement data Temperature data Duration of sleep Sleep phases (deep, light, REM, awake) Activity data throughout the day Automatically generated tags Usage-related and technical data: User ID (randomly generated) IP address and high-level location Metadata regarding service use If you have questions or requests concerning your personal data after it has been transferred to Oura Platform, such as how the Data Recipient uses your data, where it is transferred to, who can access it, retention policies, or your rights in relation to that data, please contact the Data Recipient that invited you to participate in Oura Platform.73Once you give consent to share your Oura data with the Data Recipient, the Data Recipient may get access to the following personal data, such as: Account data as inserted by you: Name E-mail address Gender Birth date and year Height and weight Activities Notes and tags Automatically collected and generated data: Heart rate Movement data Temperature data Duration of sleep Sleep phases (deep, light, REM, awake) Activity data throughout the day Automatically generated tags Usage-related and technical data: User ID (randomly generated) IP address and high-level location Metadata regarding service use If you have questions or requests concerning your personal data after it has been transferred to Oura Enterprise Platform, such as how the Data Recipient uses your data, where it is transferred to, who can access it, retention policies, or your rights in relation to that data, please contact the Data Recipient that invited you to participate in Oura Enterprise Platform.
73You can withdraw your data sharing consent at any time via Oura on the Web ( https://cloud.ouraring.com/profile ) or from the settings menu on the Oura App.76You can withdraw your data sharing consent at any time via Membership Hub ( https://cloud.ouraring.com/profile ) or from the settings menu on the Services.
74You can stop the flow of data to the Data Recipient so that the Data Recipient cannot receive new data from you or through Oura Platform.77You can stop the flow of data to the Data Recipient so that the Data Recipient cannot receive new data from you or through Oura Enterprise Platform.
75You can also choose to delete your data on Oura Platform that was already shared with the Data Recipient.78You can also choose to delete your data on Oura Enterprise Platform that was already shared with the Data Recipient.
76However, please note that withdrawing your consent from the service or changing any other consent settings do not affect the processing of data that the Data Recipient already extracted from Oura Platform.79However, please note that withdrawing your consent from the service or changing any other consent settings do not affect the processing of data that the Data Recipient already extracted from Oura Enterprise Platform.
77Oura uses aggregated Oura Platform data for analytics, statistics, research and development purposes.80Oura uses aggregated Oura Enterprise Platform data for analytics, statistics, research and development purposes.
78Oura is the controller of such aggregated data, which may no longer qualify as personal data due to the aggregation.81Oura is the controller of such aggregated data, which may no longer qualify as personal data due to aggregation.
79For other data that Oura processes which are not at the direction of the Data Recipient, the rest of the terms in this Privacy Policy apply. ŌURA RESEARCH APP The Oura Research App is a separate application that enables individuals to participate in research studies conducted by or on behalf of Oura or an independent research sponsor (“Research Sponsor”).82For other data that Oura processes which are not at the direction of the Data Recipient, the rest of the terms in this Policy apply.
83HEALTH RECORDS YOU IMPORT Oura lets you bring your own health records into the Oura Services.
84When you choose to connect a healthcare provider, a health plan, or another source of your health information to Oura, you are directing that organization to share your electronic health records with Oura.
85You are in control of this connection: you choose which source of records to connect, what to import, and when to disconnect.
86Depending on the source you connect, records may include visit summaries, clinical notes, diagnoses, medications, allergies, immunizations, lab results, vital signs, and care plans.
87You can disconnect any source at any time from the settings menus available on our Services.
88Disconnecting stops new records from flowing to Oura.
89You can access, delete, or download your imported records as described in sections of this Policy covering data subject rights.
90Imported health records differ from data we collect from Oura Ring.
91Data collected by your Oura Ring is generated by sensors you wear.
92Imported health records instead come from a third party source that you direct to share records with us.
93Once those records reach Oura, we act as the controller of that data, and this Policy governs our processing.
94When you authorize or direct an entity regulated by the Health Insurance and Portability and Accountability Act (“HIPAA”) to disclose your health records to Oura, the disclosure is at your request, not the entity’s.
95Oura is not a Business Associate of that entity for purposes of this sharing. ŌURA RESEARCH APP The Oura Research App is a separate application that enables individuals to participate in research studies conducted by or on behalf of Oura or an independent research sponsor (“Research Sponsor”).
81Before enrolling in a study, you will be required to review and electronically sign an informed consent form (“ICF”) provided by the Research Sponsor.97Before enrolling in a study, you will be required to review and sign an informed consent form (“ICF”) provided by the Research Sponsor.
82The ICF describes the purpose of the study, the categories of data that will be collected (including sensor and derived data), how that data will be used and disclosed, the legal basis for processing (where applicable), the duration of the study, and your rights in relation to research data collected as part of the study.98The ICF describes the purpose of the study, the categories of data that will be collected (including sensor and derived data, where applicable), how that data will be used and disclosed, the legal basis for processing (where applicable), the duration of the study, and your rights in relation to research data collected as part of the study.
93For example, this may include processing your data to enable Site performance.109This may include processing your data to enable Site performance.
110Some features in our Services use AI.
111For example, you are interacting with an AI-powered customer support chatbot when you interact with our virtual support agent, Finn.
101For example, we may process personal data to analyze Site performance, improve user experience, and optimize the Site's content and layout.119For example, we may process personal data to analyze Site performance, improve user experience, and optimize the Site’s content and layout.
120We may also use personal data to improve AI-powered features on our Sites, including our virtual support agent.
103To Advertise and Market Services We process personal data to provide online advertising and marketing communications on behalf of Oura and our partners.122To Advertise and Market Services We process personal data to provide marketing communications about Oura Services and partner opportunities.
104As explained more fully in our Cookie Policy , we use cookies on our Site to create targeted audiences for online advertisement.123As explained more fully in our Cookie Policy , we use cookies on our Site to measure the effectiveness of our marketing, understand how visitors interact with our Sites, and provide contextual advertising.
124We do not sell or share your personal data for cross-context behavioral advertising.
106In the event you receive Oura-branded advertising sent to you by one of our third-party partners, please review the third-party's privacy policy for more information, and contact them with regard to any opt-out requests.126In the event you receive Oura-branded advertising sent to you by one of our third-party partners, please review the third-party’s privacy policy for more information, and contact them with regard to any opt-out requests.
108Such statutory obligations are related, for example, to accounting and tax requirements, legal claims, or other legal purposes.128Such legal obligations are related, for example, to accounting and tax requirements, legal claims, or other legal purposes.
109Legal basis for processing Data protection law in Europe requires a "lawful basis" for collecting and retaining personal information from residents of the European Economic Area.129Legal basis for processing Data protection law in Europe and the U.K. requires a "lawful basis" for collecting and retaining personal information from residents of the European Economic Area.
114Legal Obligation Oura must process certain information to comply with statutory obligations which may vary in each country.134Legal Obligation Oura must process certain information to comply with legal obligations which may vary in each country.
116Processed data and data source In most cases, Oura collects personal data directly from you if you choose to complete orders in our online store or contact us with a question or complaint.136Processed data and data source In most cases, Oura collects personal data directly from you, such as when you register for an account, tag your data in the Oura mobile or web app, or use your Oura Ring.
117When you visit our Sites, we collect analytical data about you via your device and browser using cookies and various other technologies for service development and advertising purposes.137We may also process personal data that is produced from the information you provide to us, and we may receive personal data about you from third parties, such as partners.
118Oura may also rely on trusted third-party processors to collect data on our behalf, such as our payment processor partners.138Oura may also rely on trusted third-party processors to process data on our behalf, such as our cloud service providers.
119We process the following personal data categories when you visit our Site: Contact information such as name, email address and address Delivery information such as your purchases and chosen payment method Device information such as IP address, time of visit, and location data User activity such as browsing patterns on the Site and any communications you have with us.139Oura processes the following personal data categories when you use our Services: Contact information such as name, email address and address Delivery information such as your purchases and chosen payment method Device information such as IP address, time of visit, and location data User activity such as browsing patterns on the Site and any communications you have with us.
125U.S. STATES WITH ENHANCED PRIVACY REQUIREMENTS NOTICE FOR ALL U.S. CONSUMERS This notice supplements the information contained in Oura's Privacy Policy and applies solely to all visitors, users, and others who reside in states within the U.S. with enhanced privacy notice requirements, such as California ("customers" or "you"), and who access Oura's Sites or Services.145PAYMENTS This section describes how we process payment information across Oura Sites and Services.
126Please be aware that in some instances where Oura is acting as a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA), the U.S. state privacy rights outlined in this section may not apply.146Payment information we process.
127In those instances and subject to our HIPAA policies, Oura may choose to offer self-serve tools that enable you to access and delete your personal data from the Oura App.147Depending on the transaction, Oura and our payment processors may process your payment card number, expiration date, and security code; billing name and address; transaction amount, date, and merchant.
128Collection, use, and sharing of information When a customer interacts with Oura's Sites or Services, Oura collects information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, device, or household ("personal information" or “personal data”).148Payment processors and financial partners.
129Information about the categories of personal information we collect, the purposes for which your personal information is processed, and any sharing of your personal information can be found from relevant sections of this Policy: Device and Application User: categories of collected personal information and processing purposes Online Store and Website Visitor: categories of collected personal information and processing purposes Sharing of personal data In the preceding twelve (12) months, Oura has not sold personal information to third parties, including data aggregators, as it is against our policies.149Oura uses PCI-DSS-compliant payment processors, card networks, and for contactless payments, issuing banks and token service providers, to process transactions.
150These partners receive the minimum information needed to facilitate your transaction, and they are bound by their own privacy and security obligations.
151PCI DSS.
152Oura maintains a payment environment designed to align with the Payment Card Industry Data Security Standard (PCI DSS).
153Our payment processors are PCI DSS-validated service providers.
154COUNTRY-SPECIFIC ADDENDA This Policy is a unified, global privacy policy that applies to those who use Oura Services and Sites worldwide.
155In some jurisdictions, local laws impose additional obligations or grant additional rights that go beyond what this Policy describes.
156For those jurisdictions, we publish a country-specific addendum that supplements this Policy.
157If you reside in a jurisdiction listed below, please read both this Policy and the applicable addendum.
158Where a specific addendum addresses a topic differently than this Policy, the addendum controls for members and users in that jurisdiction.
159In all other respects, this Policy continues to apply.
160Republic of Korea (South Korea) If you reside in a U.S. state with enhanced privacy requirements, please read the section titled “U.S. States With Enhanced Privacy Requirements.” U.S. STATES WITH ENHANCED PRIVACY REQUIREMENTS NOTICE FOR ALL U.S. CONSUMERS This notice supplements the information contained in Oura's Privacy Policy and applies solely to all visitors, users, and others who reside in states within the U.S. with enhanced privacy notice requirements, such as California ("customers" or "you"), and who access Oura's Sites or Services.
161Oura is generally not a Covered Entity under HIPAA for our direct-to-consumer Services.
162Please be aware that in some instances where Oura is acting as a Business Associate under HIPAA, the U.S. state privacy rights outlined in this section may not apply.
163In those instances, subject to our HIPAA policies, the Covered Entity’s privacy practices, and our Business Associate obligations, Oura may choose to offer self-serve tools that enable you to access and delete your personal data from our Services.
164When you direct a HIPAA Covered Entity or Business Associate to share your health records with Oura through a patient-directed disclosure or HIPAA Authorization, the records we receive no longer fall under HIPAA while they are in Oura’s possession, and the rights described in this section apply.
165Collection, use, and sharing of information When a customer interacts with Oura’s Sites or Services, Oura collects information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, device, or household (“personal information” or “personal data”, and where applicable, “consumer health data”).
166Information about the categories of personal information we collect, the purposes for which your personal information is processed, and any sharing of your personal information can be found from relevant sections of this Policy: Device and Application User: categories of collected personal information and processing purposes Online Store and Website Visitor: categories of collected personal information and processing purposes Sharing of personal data Sensitive personal information and consumer health data.
167Some of the personal information we process is classified as “sensitive personal information,” “sensitive data,” or “consumer health data” under applicable U.S. state law.
168This includes data about your health and measurements collected by Oura Services, health records you import to our Services, reproductive and sexual health information, diagnoses, or other legally or socially sensitive data.
169We process this information for the purposes described in this Policy, and not to infer characteristics about you outside those purposes.
170We do not use sensitive personal information for targeted advertising and we do not sell or share personal information for cross-context behavioral advertising.
171No sale or targeted advertising.
172In the preceding twelve (12) months, Oura has not sold personal information to third parties, including data aggregators, as it is against our policies.
174Large Language Model Training.
175We may collect and use personal data to develop, test, improve, and support Oura’s own AI, machine learning, and large language model-powered features.
176We do not sell personal data for the purpose of training third party Large Language Models (“LLMs”).
177Automated decision-making and profiling.
178Some features of our Services rely on AI-based analysis of your data.
179Our features are designed to provide general wellness information and not to make legal or similarly significant decisions about you.
135Please note that you can correct and update some of your basic information via the Oura App and via Oura on the Web.184Please note that you can correct and update some of your basic information via the Oura App and via Membership Hub.
138How to make disclosure, access, correction, or deletion requests If you reside in a state that provides for enhanced privacy rights, you can request disclosure, access to, correction, and/or deletion of your personal data as described above by submitting a verifiable consumer request to us by: Sending an e-mail to dataprotection@ouraring.com or creating a ticket via the Oura Help page on the Oura App, including the following information along with your request: your full name, company name (if applicable), address, e-mail address, and a phone number.187How to make disclosure, access, correction, or deletion requests If you reside in a state that provides for enhanced privacy rights, you can request disclosure, access to, correction, and/or deletion of your personal data as described above by submitting a verifiable consumer request to us by: Sending an e-mail to dataprotection@ouraring.com including the following information along with your request: your full name, company name (if applicable), address, e-mail address, and a phone number.
141Only you, or a person registered with the appropriate mechanism associated with your state of residency that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information.190Only you, or your designated authorized agent as applicable, may make a verifiable consumer request related to your personal information.
200RESIDENTS OF WASHINGTON STATE – CONSUMER HEALTH DATA PRIVACY NOTICE This notice supplements the information contained in this Policy and applies solely to visitors, users, and others who reside in the state of Washington, with respect to your Consumer Health Data as defined under the Washington My Health My Data Act (“MHMD”).
201Oura collects, uses, processes, and shares Consumer Health Data as described above in this Policy.
202If you are a Washington consumer, you have certain rights with respect to your Consumer Health Data.
203These rights include: Right to Access.
204You have the right to confirm whether Oura is collecting, sharing, or selling your Consumer Health Data, and to access such data, including a list of all third parties and affiliates with whom Oura has shared or sold your Consumer Health Data and an active email address or other online mechanism for contacting those third parties.
205Right to Deletion.
206You have the right to request that Oura delete your Consumer Health Data, subject to certain exceptions.
207Right to Withdraw Consent.
208You have the right to withdraw your consent for the collection and sharing of your Consumer Health Data.
209Right to Appeal.
210If Oura denies your request to exercise any of these rights, you may appeal that decision.
211If your appeal is unsuccessful, you may raise a concern or lodge a complaint with the Washington State Attorney General at www.atg.wa.gov/file-complaint .
212You may exercise any of the rights described above by submitting a request to us by emailing dataprotection@ouraring.com .
213Your request should include sufficient information for us to verify your identity and should specify the right you wish to exercise.
214We may request additional information if necessary, such as to confirm your identity as required for security purposes.
155Oura only shares website usage data with our advertising network partners for the purposes of analyzing and optimizing our marketing.Removed
170Personal data disclosures We also reserve the right to disclose personal data under certain specific circumstances, including: When we have your express consent to do so; When it is reasonably necessary for our legitimate interests in conducting our business, such as in the event a merger, acquisition, or sale; To protect Oura's legal rights and property; and To comply with valid legal requirements.233Personal data disclosures We also reserve the right to disclose personal data under certain specific circumstances, including: When we have your express consent to do so; When it is reasonably necessary for our legitimate interests in conducting our business, such as in the event a merger, acquisition, or sale; To protect Oura's legal rights and property; and When we believe in good faith such disclosure is necessary or appropriate to comply with valid legal requirements.
171Oura will oppose any request to provide legal authorities with access to user data for surveillance or prosecution purposes; we will notify users if we receive any such request, whenever legally permissible.234We stand guard over your data, no matter who’s asking.
172Otherwise, your personal data is never shared with any individual or other organization.235We review each law-enforcement and government request for personal data on a case-by-case basis.
236We handle those requests in line with applicable law and our commitment to protecting our members’ privacy.
237We will oppose, seek to narrow, or reject requests that we deem overly broad, insufficiently supported, or otherwise legally deficient, particularly where the requested data is sensitive.
238We will notify affected members of requests for their data where legally permissible.
239We believe we must continually earn your trust through transparency and accountability.
240We are actively evaluating ways to provide greater visibility into how we handle these requests, like through a transparency report.
241We believe our members’ right to privacy endures beyond their lifetime.
242Because we cannot know their wishes, we aim to protect our members’ personal data even when we receive posthumous access requests.
243However, if you are an heir or legal representative of a loved one who used our Services, we are here to help.
244You may contact us at dataprotection@ouraring.com to submit a request regarding their data.
245We will verify your identity, relationship to the deceased, and legal authority before processing your request.
246We will honor all applicable rights granted to you by the laws of the jurisdiction where the deceased member resided.
187If you wish, you may request deletion of your Oura account by contacting dataprotection@ouraring.com or you can remove your account data from the Services within the Oura App or Oura On the Web by following the instructions available on the Oura Member Care Center .261If you wish, you may request deletion of your Oura account by contacting dataprotection@ouraring.com or you can remove your account data from the Services within the Oura App or Membership Hub by following the instructions available on the Oura Help Center .
193Cookies are also used for tracking your browsing habits and for targeting and optimizing advertising, both on our Site as well as on other sites you may visit.Removed
198If you wish to exercise your rights as a data subject, please contact dataprotection@ouraring.com or create a ticket via the Oura Help page on the Oura App with your request to do so.271If you wish to exercise your rights as a data subject, please contact dataprotection@ouraring.com .
202You can also access your data via Oura on the Web at https://cloud.ouraring.com .275You can also access your data via Membership Hub at https://cloud.ouraring.com .
209Please note that Oura on the Web provides you with the ability to export your own data.282Please note that Membership Hub provides you with the ability to export your own data.
227The controller of personal data processed for all other processing purposes is Oura Health Oy. Please find our contact details below: Ouraring Inc.300The controller of personal data processed for all other processing purposes is Oura Health Oy. Please find our contact details below: Oura Health Oy Address: Elektroniikkatie 10, 90590 Oulu Finland Data Protection Officer: dataprotection@ouraring.com Ouraring Inc.
228Address: Elektroniikkatie 10, 90590 Oulu Finland Data Protection Officer: dataprotection@ouraring.com Ouraring Inc.Removed
Stay ahead of the changes

Watch this before it changes again

Follow unlimited companies, monitor the clauses that matter across every platform, and get the full institutional analysis on what each change obligates you to do.