This private connector accesses Oura data only after its owner authorizes it and only on the owner's request. OAuth credentials remain in the owner's self-hosted environment. Oura data is not sold or shared, and health payloads are not written to application logs. The owner may revoke access through Oura and delete stored credentials at any time.