• Unified API
  • Mobile SDK
  • Connection Widget
  • Streaming
  • Lab Reports API
  • Graph API
  • Health Scores
  • Health Rewards
  • Planned Workouts
  • Lab Testing
  • AI Interface
  • Enterprise
  • Insurance
  • Integrations
  • Research
  • Podcast
  • Blog
  • Reports
  • Events
  • Documentation
  • Community
  • Example apps
  • Wearable Data
  • About
  • Customers
  • Partners
  • Careers
  • Support
  • Pricing
Terra
Pricing
Become an integrationGet started
next ventures
pioneer fund
samsung next
y combinator
general catalyst

The world's best health apps run on Terra data

Get started
ProductsIntegrationsAI InterfaceAuthenticationMobile DevelopmentDocumentationGraphAPI
DocumentationAPISDKQuickstart
CommunityBlogResearchCommunityPodcastAuthorsGithub
CompanyAboutCareersCustomersBecome an IntegrationCookies PolicyGDPRPrivacy PolicyTerms of Purchase
© Terra API. 2026 — All rights reserved.

Cookie Preferences

Essential CookiesAlways On
Advertisement Cookies
Analytics Cookies

Crunch Time: Embrace the Cookie Monster Within!

We use cookies to enhance your browsing experience and analyse our traffic. By clicking “Accept All”, you consent to our use of cookies according to our Cookie Policy. You can change your mind any time by visiting out cookie policy.

Cookies Policy
All articles

Blog

Oura API for AI Apps: Access, Permissions, and Commercial Restrictions

Understand Oura API access for AI apps, including model permissions, commercial restrictions, user consent, and connecting Oura data through Terra.


Terra API
Terra API

4 September 2026

Oura API for AI Apps: Access, Permissions, and Commercial Restrictions

Oura’s API provides access to sleep, readiness, activity and other wearable data. For teams building AI health applications, that creates an immediate product question: which parts of the application can use those records?

Oura’s agreement, effective June 8, 2026, explicitly restricts AI processing, downstream access and monetization. A working API connection does not establish permission to feed the resulting data into a model. Oura’s current agreement

The provisions most relevant to AI applications are:

Intended useWhat Oura’s public terms say
Sending API data into an AI assistantSection 4(d) prohibits using API data to prompt, evaluate or otherwise supply AI models or platforms.
Training models or creating embeddingsSection 4(a) lists training, fine-tuning, evaluation datasets and embeddings among uses requiring prior written consent.
Charging users for connected functionalitySection 4(a)(xiii) requires prior written consent for charging users for functionality related to the API or Oura platform.
Receiving data through an aggregatorSection 3(e) requires prior approval and separate API registrations or credentials for each end customer.
Forwarding aggregated data to AI systemsSection 2(c) prohibits aggregators from supplying Oura data, including derived data, to AI systems.

User consent does not override prohibited uses. Separate written agreements can establish additional aggregator permissions. Oura agreement, sections 2–4

These distinctions matter when describing a product. “Personalized coaching” could mean displaying recorded measurements, producing a model-generated explanation, or training a prediction model across users. A useful integration brief should describe the actual processing: the inputs, where they go, what gets retained and how the feature is sold.

For example, a proposed sleep assistant could specify that it sends seven nights of sleep measurements to a hosted model, generates a morning explanation and includes that feature in a monthly subscription. That description gives everyone evaluating the integration something concrete to assess.

The technical access process starts with OAuth2. Oura API V2 supports categories including sleep, readiness, activity, heart rate and workouts, with users authorizing access to specific data types. Applications are limited to ten users before requiring Oura approval. Personal access tokens were deprecated in December 2025 and are no longer available for use. Oura API documentation

Oura now directs new applications to its developer portal, while its previous portal remains available for editing existing applications. Gen3 and newer users need an active Oura Membership for API access, including access through partner integrations. Oura’s access requirements

Oura’s technical documentation describes API access as free for personal and commercial applications. That pricing statement should be read alongside the commercial-use restrictions above. The agreement also reserves the possibility of future API fees with notice. API documentation, agreement, section 3(h)

Terra provides the infrastructure for connecting Oura accounts, handling authentication and delivering standardized data to your application. Its Oura integration uses the backend Health & Fitness API and is listed as event-driven. Terra’s supported integrations, integration overview

Once the permissions for your project are established, the connection process is straightforward:

  1. Enable Oura in Terra. Open Connections → Add New, select Oura and activate it. Configure the destination where your application will receive data. Source setup
  2. Create an authentication session. From your backend, call POST https://api.tryterra.co/v2/auth/generateWidgetSession with your Terra credentials. Set providers to "OURA" and use reference_id for your application’s internal user identifier. Endpoint reference
  3. Let the user connect their account. Open the returned widget URL. The user signs in to Oura and completes authorization. Your API credentials remain on your backend. Widget implementation
  4. Receive and inspect the data. Terra manages token refreshes and sends available updates to your configured destination. Historical requests can populate earlier records where available. Inspect delivered events in Terra Dashboard → Payload History. Receiving data updates

Data freshness also deserves attention in an AI product. Oura’s sleep and readiness data depend on the user opening the app and syncing their ring. An assistant answering a morning question should check the measurement dates and handle missing records explicitly. Oura’s synchronization guidance

Start with one connected account and one clearly defined feature. Verify the connection, inspect the available fields and timestamps, and test how the application behaves when a night’s data is missing. That gives the product team a concrete integration to evaluate before expanding its scope.

Get the latest Terra Research reports and insights every week as soon as they're published.

By continuing, I agree to the Privacy Policy and Terms of Service.

Previous
Next

Continue reading

  • Health Data Residency: EU by Default, Optional US Cluster

    Here's our guide to which region your users' health data is processed and stored in, why we default to the EU, and when it makes sense to add a US cluster.

    21 September 2026

  • Fitbit API migration: reconnect the person, keep the history

    The September 2026 Fitbit API migration asks users to connect again. Make that effort count with correct account matching, recoverable history and working updates.

    19 September 2026

  • Oura, Counsel and CMS ACCESS: what health apps need to know

    What Oura and Counsel’s planned CMS ACCESS service means for health apps, from missing nights of data to consent and the clinical handoff.

    18 September 2026