Privacy Policy

Last updated 2026-11-11

Oura MCP is a small, personal, non-commercial service run by the owner of woodu.io for themselves and invited family members. It lets an AI assistant you choose (such as Claude) read your Oura Ring data on your request.

What data is accessed

Only after you sign in with Oura and approve access, the service can read the data covered by the scopes you grant: email, personal info (age, sex, height, weight), daily sleep/readiness/activity summaries, heart rate, workouts, sessions, tags, SpO2, stress, heart health and ring configuration. Access is read-only.

How it is used

• Your email is checked against an allowlist to decide whether you may use the service.
• Health data is fetched from the Oura API only when your AI assistant calls a tool, and is passed straight back to that assistant.
• Data is not sold, shared with third parties, used for advertising, or used to train models by this service.

What is stored

• Stored: your Oura OAuth tokens, Oura user ID and email, encrypted at rest in Cloudflare Workers KV, so the service can call Oura on your behalf.
• Not stored: your health data. It is never written to disk or a database by this service.
• Cloudflare may keep short-lived request logs (URLs, timestamps, status codes) for operations and abuse prevention.

Third parties

The service runs on Cloudflare. Data returned to your AI assistant is then governed by that assistant provider's privacy policy (e.g. Anthropic). Your data in Oura remains governed by Oura's privacy policy.

Your choices

You can stop access at any time by removing the connector from your assistant and revoking the application in your Oura account. Revoking makes the stored tokens useless. Ask the operator to delete them immediately if you want.

Contact

Questions or deletion requests: contact the operator of woodu.io.