Terms Unconditional

Fertility, Genetic & Wearables · Wearable (smart ring) - sleep, heart, cycle data · Structural / no discrete incident

Oura (Oura Health Oy / Ouraring Inc.)

Headline

Oura's biggest privacy moment was a customer backlash, not a breach.

Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.

Oura's biggest privacy moment was a customer backlash, not a breach. In August 2025 it announced a Texas factory for Defense Department business and, deep in the release, a tie-up with Palantir's FedStart platform for 'population-level analysis of risk and readiness.' Users read that as Oura handing data to the government; the CEO called the claims 'totally overblown' and said 'We will never sell your data to anyone, ever,' adding (as reported) that the DoD and Palantir have no access to consumer data. The ring also requires a $5.99/month membership to unlock parts of your own data, and U.S. buyers are bound to individual AAA arbitration with no opt-out found.

  • SeveritySeverity 2 of 5, not independently verified. Oura's biggest privacy moment was a customer backlash, not a breach.
  • Evidence tierUnassigned
  • Claims confirmedNo sourced claims yet
  • Last verified2026-10-16

Primary source. fortune.com/2025/09/09/oura-ceo-tom-hale-data-privacy-oura-ring-defense-department-palantir — Unverified - heuristic first draft.

Last verified 23 days agoverified 23 days ago0180 days
Freshness. Last verified 23 days ago (2026-10-16); stale after 180 days.

Terms

Arbitration

Yes - binding individual AAA Consumer arbitration under the FAA (Sec. XVI); class/representative proceedings barred; 30-day pre-dispute notice; mass-arbitration rules at 25+ similar demands; carve-outs for IP, small claims, emergency injunctions, California public injunctive relief. California law for U.S. users; Finnish law for non-U.S.

Data sharing

Policy: has not sold personal information in prior 12 months; does not sell/share for cross-context behavioral advertising; does not share Service data with third-party advertisers - but uses cookies to build ad audiences. Enterprise customers (e.g., DoD) and research sponsors become controllers of data they receive. Government requests handled case-by-case; DPF disclosures for national security possible. DoD contract (Oct. 2024, $96M per Wikipedia) and Palantir FedStart tie-up (Aug. 2025) - company says consumer data is not shared.

Who holds your data. Data chain: Oura (Oura Health Oy / Ouraring Inc.), then Oura Health Oy (private; investors include Fidelity, Dexcom, Temasek per Wikipedia) (parent).

Fees and billing

Membership ($5.99/month at launch per Wikipedia) puts some data features behind a paywall on top of the ring purchase. Auto-renews until cancelled; must cancel at least one day before renewal; no refund for the current term; free trials convert to paid (Terms Sec. V). 14-day cooling-off only for non-U.S. residents.

Contacts

Privacy contact. dataprotection@ouraring.com (DPO)

Legal notice. Ouraring Inc., 415 Kearny Street, San Francisco, CA 94108 (Terms Sec. XII)

Mailing address. Not recorded.

Written channel present
Paper trail: written. Written channel present.

Evidence

No claims have been itemized for this row yet.

Sources

SourceClaimTierStatusQuote
News report · 2025-09-09
fortune.com/2025/09/09/oura-ceo-tom-hale-data-privacy-oura-ring-defense-department-palantir
whole rowUnassignedconfirmed“We will never sell your data to anyone, ever”
Quote basis: not recorded.
Company terms · 2026-10-02
ouraring.com/terms-and-conditions
whole rowUnassignedconfirmed“Your Subscription will automatically renew for additional Subscription Terms until your Subscription is cancelled by you”
Quote basis: not recorded.
Company privacy policy · 2026-06-15
ouraring.com/privacy-policy
whole rowUnassignedconfirmed“We do not sell or share your personal data for cross-context behavioral advertising”
Quote basis: not recorded.
Wikipedia · 2026-10-16
en.wikipedia.org/wiki/Oura_Health
whole rowUnassignedconfirmed“In October 2024, Oura signed a deal worth US$96 million to supply smart rings to U.S. military personnel.”
Quote basis: not recorded.

Source vault

Link status: Candidate - not yet fetched

DocumentLast fetchPDF
Privacy policy
https://ouraring.com/privacy-policy
Not fetched yetNOT CONFIRMED
Terms of service
https://ouraring.com/terms-and-conditions
Not fetched yetNOT CONFIRMED
Website
https://ouraring.com
Not fetched yet—
Primary source
https://fortune.com/2025/09/09/oura-ceo-tom-hale-data-privacy-oura-ring-defense-department-palantir
Verification: Unverified - heuristic first draft
Not fetched yet—

Enforcement

No enforcement actions are linked to this row.

State statute

Headquarters on file: CA. Provisions of CCPA/CPRA on file:

ProvisionTypeSource
Right to Deletion
Cal. Civ. Code § 1798.105
hardsource
Right to Correction
Cal. Civ. Code § 1798.106
hardsource
Right to Know / Access
Cal. Civ. Code § 1798.110
hardsource
Right to Limit Use of Sensitive Personal Information
Cal. Civ. Code § 1798.121; Cal. Code Regs. tit. 11, § 7027
hardsource
Right to Data Portability
Cal. Civ. Code § 1798.130(a)(3)(B)(iii)
hardsource
Privacy Policy / Privacy Notice Requirements
Cal. Civ. Code § 1798.130(a)(5); Cal. Code Regs. tit. 11, § 7011
hardsource
Sensitive Personal Information — Categories
Cal. Civ. Code § 1798.140(ae)
hardsource
Service Provider and Contractor Contract Requirements
Cal. Civ. Code § 1798.140(ag); Cal. Code Regs. tit. 11, § 7051
hardsource
Applicability Threshold (2025 CPI-Adjusted)
Cal. Civ. Code § 1798.140(d)
thresholdsource
Privacy Risk Assessment — Mandatory for High-Risk Processing (Eff. Jan. 1, 2026)
Cal. Civ. Code § 1798.185(a)(15); Cal. Code Regs. tit. 11, §§ 7150-7157
hardsource
Right to Opt Out of Sale or Sharing
Cal. Civ. Code §§ 1798.120, 1798.135
hardsource
Sale vs. Sharing Distinction
Cal. Civ. Code §§ 1798.140(ad), 1798.140(ah)
hardsource
Enforcement — CPPA and AG; Civil Penalties (2025 CPI-Adjusted)
Cal. Civ. Code §§ 1798.155, 1798.199.90; Cal. Bus. & Prof. Code § 17206
hardsource
Notice at Collection
Cal. Code Regs. tit. 11, § 7012
hardsource
Cybersecurity Audit — Annual Independent Audit Requirement (Eff. Jan. 1, 2026)
Cal. Code Regs. tit. 11, §§ 7120-7124
hardsource
Automated Decision-Making Technology (ADMT) — Notice, Opt-Out, and Access Rights
Cal. Code Regs. tit. 11, §§ 7200-7222; Cal. Civ. Code § 1798.185(a)(16)
hardsource