This analysis describes what Oura's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
User consent is established as the trigger that makes synced personal data accessible to the Data Recipient, meaning participation and consent are both required before any data transfer occurs.
Interpretive note: The clause name references an invitation requirement, but the excerpt itself does not explicitly state that an invitation is required. The canonical claim is based solely on the verbatim excerpt language.
The updated policy discloses that Oura Advisor, an AI assistant, processes text and information you submit to provide personalized wellness guidance. The policy now explicitly states that third-party integrations may include LLM providers, meaning your health data could be shared with language model services. The policy removed prior language stating Oura would notify users if it received government requests for data access, which may reduce transparency about law enforcement inquiries. You can disconnect third-party integrations at any time, but you should review each third party's privacy policy before authorizing a connection and exercise deletion rights directly with third parties if needed.
View change record →Your synced data is shared with the Data Recipient on the Oura Enterprise Platform only if you choose to participate and give your consent.
How other platforms handle this
We may share your personal data with a third party for purposes other than processing on our behalf. We will obtain your consent to such disclosure as required by applicable laws.
Google Cloud Platform ... Finland Japan Netherlands Norway United Kingdom United States Cloud infrastructure
If you are in Costa Rica, the following applies to you: you give your express consent for all processing and transfers of information about you that ActiveCampaign may require (within and outside of Costa Rica, and with third parties...) for the proper fulfillment of ActiveCampaign's legitimate purp...
"If you choose to participate in Oura Enterprise Platform, once you consent to sharing your personal data with the Data Recipient the relevant requested data that you sync to the Services will become available to your Data Recipient...Excerpt from Oura's Privacy Policy
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
User consent is established as the trigger that makes synced personal data accessible to the Data Recipient, meaning participation and consent are both required before any data transfer occurs.
Your synced data is shared with the Data Recipient on the Oura Enterprise Platform only if you choose to participate and give your consent.
ConductAtlas has identified this type of provision across 281 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Oura.