Legal
Privacy policy
Effective November 1, 2026 · Last updated November 1, 2026
The short version
- Qora is software that runs on your own computer. We have no server.
- We do not collect, receive, store, sell or share your health data or any other personal information.
- When you connect Oura, your data goes directly from Oura to your computer. It never passes through us.
- You can delete everything by deleting your Qora data folder, and you can revoke Oura access at any time.
1. Who we are
"Qora", "we" and "us" mean M Consultancy, LLC, doing business as The Collaborative, the maker of the Qora software. You can reach us at privacy@thecollab.co.
2. How Qora works
Qora is a set of tools and a viewer that you run on your own computer. You choose a folder (your data home) where your records are kept. Qora reads, checks and organises what you put there, shows it in a viewer that is served only to your own computer (address 127.0.0.1), and can print a summary to a PDF on your disk.
There is no Qora cloud service, no Qora account and no Qora database. Because nothing is sent to us, we cannot see, access, recover or delete your data. It is entirely in your control.
3. Information we collect
Through the Qora software: none. Qora has no analytics, telemetry, crash reporting, advertising or tracking, and it does not contact any Qora server, because none exists.
Through this website: none by us. This website has no cookies, no analytics, no forms and no third-party scripts or fonts. The company that hosts this website, Cloudflare, may keep standard request logs (such as IP address, time and page requested) to operate and secure the service. We do not use those logs to identify or profile anyone.
If you email us, we receive your email address and whatever you choose to write, and use them only to reply. Please don't send us health information.
4. Oura and other connected services
You can choose to connect an Oura account so that Qora can back up your Oura data to your data home. This is how it works:
- Qora opens Oura's own consent page in your browser. You sign in to Oura there. Qora never sees your Oura password.
- Oura shows the data types Qora is asking for, and you can untick any of them. Depending on what you allow, this can include your Oura personal information (such as age, height, weight and email), daily activity, sleep, readiness, heart rate, workouts, sessions, tags, blood-oxygen readings and other data Oura offers through its API.
- Oura sends the approval back to an address on your own computer (127.0.0.1). The resulting access and refresh tokens are saved in a file in your data home that only your user account can read, and that the folder's version control is set to ignore.
- Qora then requests your data from Oura's API and saves it, unchanged, in your data home. You can run this once, or schedule a daily update on your computer.
| Question | Answer |
|---|---|
| Where is my Oura data stored? | Only on your computer, in your data home. |
| What is it used for? | Only to build and show your own health record, and the summaries you choose to print. |
| Is it sent to Qora or anyone else? | No. Qora does not transmit it anywhere. |
| Is it sold, shared or used for advertising? | Never. |
| Is it used to train AI models? | No. |
| How do I stop it? | Revoke Qora's access in your Oura account settings, and delete the token file or your whole data home. |
Your use of Oura remains subject to Oura's own privacy policy and terms.
5. AI assistants you use
Some Qora steps, such as reading a document or running an intake interview, are done with an AI assistant that you run on your own computer under your own account (today, Claude Code). When you use one, the material it reads is processed by that assistant's provider under your agreement with them, not by Qora. We have no access to it. Whether to use an AI assistant with any of your data, including data from connected services whose terms may restrict this, is your choice.
6. Security
Your data is as secure as the computer it lives on. We recommend full-disk encryption, a strong login password and keeping your data home out of any shared or synced folder you don't trust. Qora keeps a local history of changes in your data home and is designed never to push it to a remote service.
7. Your rights and choices
Because we hold no personal information about you, there is nothing for us to give you access to, correct or delete. You can see, change, export or delete all of your data yourself at any time, since it is stored only on your computer. If you have questions about your rights under the laws where you live (such as the GDPR, the UK GDPR, the CCPA/CPRA, Washington's My Health My Data Act or Japan's APPI), contact us at the address above.
8. Children
Qora is not directed to children under 13 (or the minimum age in your country). A parent or guardian may keep records for a child in their own data home, on their own computer.
9. Changes to this policy
If we change this policy, we will update the date above and post the new version on this page. If Qora ever starts to handle any data on a server, we will say so clearly here before that happens.
10. Contact
M Consultancy, LLC, doing business as The Collaborative · privacy@thecollab.co