This service is used by a single person, who operates it for themselves.
With that person's consent it requests these Oura scopes: email, personal, daily, heartrate, workout, tag, session, spo2, ring_configuration, stress and heart_health.
Health data is requested from Oura for each question and passes through memory only. It is not written to a database, file or cache, and it is not logged. It is returned to the ChatGPT, Claude Code or Codex connections that person has authorized.
The only stored items are the encrypted Oura tokens and the encrypted state of the connector sign-in. Logs contain the tool name, status and duration.
Access can be revoked at any time in the Oura account.