Privacy Policy

Vitra is a desktop application that reads your Oura Ring data and analyses it locally on your computer. This policy explains what data Vitra touches, where it lives, and what we — the makers of Vitra — can and cannot see.

The short version

• Your health data never leaves your machine.
• We do not run servers that store your readings, your insights, or your account.
• The only network calls Vitra makes are to Oura's API (to fetch your own data) and to a local AI model on your computer.
• We do not use analytics, telemetry, advertising IDs, or third-party trackers.

1. Who we are

Vitra is built and maintained by an independent developer. Contact: pt@amplifiedcreations.com.

Vitra is not affiliated with, endorsed by, or sponsored by Ōura Health Oy. "Oura" and the Oura Ring are trademarks of their respective owners.

2. What data Vitra processes

When you connect your Oura account, Vitra reads the following from the official Oura API, on your behalf:

• Daily readiness, sleep, and activity scores.
• Heart-rate and HRV time series.
• Sleep stages and timing.
• Body temperature deviations.
• Profile metadata (name, email, age, height, weight) — only as exposed by Oura's /v2/usercollection/personal_info endpoint.

In addition, Vitra stores any tags or journal notes you create inside the app (e.g. "alcohol", "hard workout", "poor sleep"). These are typed by you, locally, and stay on your device.

3. Where the data is stored

All Oura data and all derived insights are stored in a local database file on your computer (under the operating system's standard application-data directory). Nothing is uploaded to a Vitra-controlled server because there is no Vitra-controlled server for user data.

The on-device AI model that produces personalised insights also runs entirely on your machine. Its weights ship with the app; your readings are not used to train any shared model.

4. Network connections Vitra makes

• Oura API (api.ouraring.com) — to authenticate via OAuth and to fetch your own ring data. Governed by Oura's privacy policy.
• App update check — Vitra periodically checks for new versions. The request includes the current version string and your operating system; it does not include personal data.
• Crash reports — if the app crashes, Vitra may show a dialog offering to send the stack trace to us. Sending is opt-in. No health data is included.

That is the complete list. Vitra does not contact any other server.

5. What we (the developer) can see

Nothing about your health. Specifically, we do not have access to:

• Your Oura readings.
• Your insights, tags, journal entries, or correlations.
• Your name, email, or Oura profile.
• Usage analytics — when you open the app, which screens you visit, how long you stay.

If you email us, we obviously see that email and its contents. We reply, then delete it when no longer needed.

6. Authentication tokens

When you sign in with Oura, the OAuth access token and refresh token are stored in your operating system's secure credential store (macOS Keychain / Windows Credential Manager). They never leave your device. You can revoke them at any time from Oura's connected-applications page.

7. Your rights

Because we do not hold your data, most data-subject rights (access, deletion, portability) are exercised directly on your machine:

• Access / portability: the app can export your full local database as JSON.
• Deletion: uninstalling Vitra removes the app; deleting the local database directory removes all stored readings.
• Revoke Oura access: via Oura's connected-applications page, linked above.

If you have requests we can actually fulfil — questions about this policy, copies of any email correspondence we hold — write to pt@amplifiedcreations.com.

8. Children

Vitra is not intended for use by anyone under the age of 16.

9. Changes to this policy

If we change this policy materially, the new version will be published at this URL with an updated date at the top. The app will surface a notice on next launch when meaningful changes happen.

10. Governing law

This policy is governed by the laws of Portugal. Disputes that cannot be resolved by email will be heard in the courts of Lisbon.

— The Vitra team