California residents have specific rights under CCPA and CPRA to access, delete, correct, and opt out of certain uses of their personal information, including sensitive health and biometric data.
This analysis describes what Oura's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
California law provides stronger privacy protections than the baseline policy, including opt-in rights for sensitive personal information and the right to limit use of sensitive data, which are operationally important for California-based Oura users.
Interpretive note: The full text of Oura's California-specific rights disclosure was not fully visible in the provided document excerpt, so the completeness of Oura's CPRA rights operationalization cannot be fully assessed from the available text.
The updated policy explicitly discloses that Oura uses artificial intelligence and machine learning in the service, including an AI assistant called Oura Advisor that provides personalized wellness guidance based on information you submit or that Oura collects. The revised terms state that Oura may use AI and algorithmic analysis to suggest partner services and may use personal data to develop or refine AI-powered health features. The policy establishes that you retain choice about whether to engage with these AI features or share personal data with partner services when suggestions are offered.
View change record →This provision was replaced by a more generalized 'Advertising and Marketing Data Processing' provision that removes specific mention of California resident protections, reducing targeted privacy regulation compliance clarity.
View full change record →If you are a California resident, you have enforceable rights under CCPA and CPRA to access, delete, correct, and limit how Oura uses your sensitive personal information, including health and biometric data, and you can exercise these rights by contacting Oura.
How other platforms handle this
When you use them, we'll validate your request by verifying your identity (for example, by confirming that you're signed in to your Google Account).
Not be Discriminated Against by us for exercising your privacy rights.
You may contact our privacy team with any requests of disclosure, correction, or deletion of your personal information. You may also request suspension of use or suspension of sharing of your personal information with certain third parties.
"We process marketing-related personal data to provide online advertising and other marketing communications on behalf of Oura and our partners. For example, as explained more fully in our Cookie Policy, we use cookies and similar technologies on our website to create audiences for online advertisement. You can opt out of direct marketing communications from Oura.Excerpt from Oura's Privacy Policy
REGULATORY LANDSCAPE: CCPA as amended by CPRA grants California residents rights to know, delete, correct, opt out of sale or sharing, and limit use of sensitive personal information.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
California law provides stronger privacy protections than the baseline policy, including opt-in rights for sensitive personal information and the right to limit use of sensitive data, which are operationally important for California-based Oura users.
If you are a California resident, you have enforceable rights under CCPA and CPRA to access, delete, correct, and limit how Oura uses your sensitive personal information, including health and biometric data, and you can exercise these rights by contacting Oura.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Oura.