Oura is a smart-ring maker and companion subscription app run by Oura Health Oy, a private Finnish limited company (also operating as Oura Inc. and Ouraring Inc. in the US) that sells its ring hardware plus a required Oura Membership for full app features. Its own Privacy Policy states it does not sell or rent personal information and does not sell or share data for cross-context behavioral advertising, while still collecting a broad set of biometric signals (heart rate, temperature, sleep phases, activity) core to the product plus location, contact, and analytics data disclosed on its Apple App Store privacy label. Oura's Security Center cites an annual SOC 2 Type II audit and a third-party HIPAA compliance audit, but names no audit firm and discloses no incident history. In 2025, public backlash arose over an Oura-Palantir-Department of Defense relationship; Oura's own enterprise defense page confirms it uses Palantir FedStart as an accreditation vendor for a separate, opt-in DoD enterprise deployment (IL5), distinct from the consumer Oura Ring/App product.
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
9 ON FILE
COLLECTION
Oura's Apple App Store privacy label lists data 'Linked to You' beyond core ring sensor function: Analytics, Diagnostics, Crash Data, and App Functionality purposes tied to Health & Fitness, Precise Location, Contact Info (Email Address), and Identifiers (User ID).
Oura's Privacy Policy states it processes personal data to provide personalized insights about readiness, sleep, activity, and other health-status inferences, and separately describes Oura Advisor, an AI assistant that provides personalized wellness guidance based on information users submit or that the Services are directed to collect.
Finland's official PRH business register (Patentti- ja rekisterihallitus open-data API) confirms Oura Health Oy as business ID 2542776-4, a registered Limited company originally incorporated in 2013 as JouZen Oy and renamed Oura Health Oy on 2017-03-27 -- independent registry confirmation of the entity Oura names as its operating company.
Oura's Privacy Policy states the policy applies to processing of personal data by 'Oura Inc, Oura Health Oy, Ouraring Inc., and subsidiaries,' naming the operating corporate group behind the product, consistent with 'Oura Health Oy' as the seller listed on Oura's Apple App Store page.
Oura's own Department of Defense enterprise page states its Oura Enterprise Platform for DoD 'harnesses robust NIST 800-171 frameworks for data protection and enables IL5 deployments via accreditation from Palantir FedStart' -- Oura's own confirmation of the Palantir relationship at the center of 2025 public backlash, describing it as an accreditation/security vendor for a separate, opt-in enterprise defense product rather than consumer-app data sharing.
Oura's Privacy Policy states Oura does not sell or rent personal information and only shares personal data with trusted service providers and partners to provide and improve services, and separately states Oura does not sell data, build behavioral-advertising profiles, or engage in targeted advertising based on personal data.
Oura's Security Center states Oura undergoes an annual SOC 2 Type II independent audit of security controls and a third-party HIPAA compliance audit, alongside penetration testing and vulnerability scanning, but names no audit firm and publishes no incident or breach history on this page.
Oura's Apple App Store privacy label discloses only 'Data Linked to You' (Health & Fitness, Location, Contact Info, Identifiers, Diagnostics) and 'Data Not Linked to You' (Usage Data) categories; it does not include a category for data used to track users across other companies' apps or websites, unlike labels that disclose cross-app tracking.
Oura's Privacy Policy states its website uses cookies and similar technologies 'to create audiences for online advertisement,' i.e. third-party ad-tech infrastructure operates on Oura's marketing site, while the policy also states Oura does not sell or share personal data for cross-context behavioral advertising.