Data Report Card · Oura
Oura Data Report Card
Oura Ring · health wearable
Data
Practices
Practices
2Access1Portability1Friction2Deletion2Sells2Trains AI
=
B
10/12
Agent
Readiness
Readiness
2Access
1Portability
2API access
=
B
5/6
Agent Readiness is a derived signal — a synthesis of two existing cells (Access, Portability) plus one sourced factor (API access), not an independently measured grade. API access scale: Best (2) consumer-grantable API · Moderate (1) partial / encumbered · Restrictive (0) manual export only. What is Agent Readiness?
Reviewed Jun 2026 · policies are checked weekly for changes · stated — every cell is read from Oura's published policy; none has been tested (run by us) yet.
2Accessstated
Self-serve: any user can log in to the Membership Hub and export their raw biometric history — even without an active subscription — at no fee.
Oura Member Care — Export & Share Your Oura Data · accessed Jun 2026 ↗1Portabilitystated
Export is a
Oura Member Care — Export & Share Your Oura Data · accessed Jun 2026 ↗.csv of raw biometric data that meets GDPR portability requirements — machine-readable, but a single flat format (a separate developer API also exists).1Frictionstated
Self-serve via the web Membership Hub, but asynchronous — you receive a reminder email to download the export from the Hub once it is ready.
Oura Member Care — Export & Share Your Oura Data · accessed Jun 2026 ↗2Deletionstated
Self-serve "Permanently delete your data" in the Membership Hub; the ring is factory-reset and you get email confirmation. Deletion is all-or-nothing — no way to delete specific records short of wiping the account.
Mozilla Foundation — Oura Ring privacy review · accessed Jun 2026 ↗2Sells / sharesstated
"Oura does not sell or rent personal information"; it shares data only with service providers, for user-directed sharing (doctor/coach), and as aggregated or de-identified data for research.
Oura Privacy Policy · accessed Jun 2026 ↗2Trains AIstated
Oura's AI runs on Oura-controlled infrastructure (and increasingly on-device); the company states conversations are never shared or sold and user data stays within its closed system.
Axios — Oura's AI plan keeps health data local · accessed Jun 2026 ↗2API access — feeds Agent Readiness, not the /12stated
Oura's API v2 lets you authorize an app via OAuth2 to read your own sleep, activity, readiness and personal data across eight scopes, returning a refresh token to renew access; personal access tokens were retired in December 2025 in favor of OAuth.
Oura — API v2 Authentication · accessed Jun 2026 ↗Source-verified Jun 2026 from Oura's own support and policy pages plus Mozilla's independent privacy review. All cells are "stated"; no cell has yet been "tested" via a live export or deletion.
How to request your data from Oura
- Go to https://cloud.ouraring.com/ — Oura's data-request entry point.
- Membership Hub → Export your data.
- Expected wait: emailed when the export is ready; download from the Membership Hub — Oura's stated turnaround (we haven't independently timed a request yet).
- No self-serve option, or want a formal request? Contact Oura — Privacy Team: mailto:privacy@ouraring.com.
These steps reflect Oura's documented process as of Jun 2026. The wait time is the company's stated figure, not yet independently measured by us.