Privacy Policy
Scope
Mao Health is private software operated by and solely for its owner. It is not offered as a multi-user or commercial service. This policy describes how the application handles data that the owner explicitly authorizes it to receive.
Data collected
When the owner connects an Oura account, Mao Health may collect the authorized health and wellness categories needed for the dashboard, including daily sleep, activity, readiness, resilience and stress summaries; heart-rate observations; workouts; sessions and tags; blood-oxygen summaries; and heart-health observations.
Mao Health reads the Oura account identifier only to derive a one-way local account reference. It does not request or store the Oura account email address, and it does not retain the personal-information response.
The application also keeps minimal technical records required for reliable synchronization, provenance, integrity checks, and error handling.
How data is used
Authorized records are used only to maintain the owner’s private longitudinal health timeline, display source-attributed observations, and produce deterministic local summaries requested by the owner.
Oura API data is not sold, shared for advertising, disclosed to data brokers, or used as input to train, fine-tune, evaluate, prompt, or otherwise operate an AI or machine-learning model or platform.
Storage and security
Health records are stored locally on the owner’s Mac. Application credentials are stored in the macOS Keychain. Local health files and databases use owner-only access controls. The public pages you are reading contain no health data, analytics, cookies, tracking scripts, or account credentials.
Retention and deletion
Records are retained only for as long as necessary to provide the owner-requested longitudinal tracking function. The owner can revoke Oura access and delete the local Mao Health data store at any time. When the owner requests deletion or ends the integration, applicable Oura-derived user data will be deleted within 72 hours.
Disclosure and third parties
Mao Health does not disclose Oura-derived user data to another person or service. Oura processes authorization and API requests under Oura’s own terms and privacy policy. No other third-party processor receives Oura API health data from Mao Health.
Your choices
The owner controls which Oura scopes are authorized and may modify or revoke that authorization through Oura. Revocation stops future collection. Local deletion is handled separately because revoking authorization does not itself erase records already stored on the owner’s Mac.