Readiness privacy policy
Readiness, for Even Realities G2. Last updated 14 September 2026.
Readiness is a small project published by oddrefresh, not a company. This policy describes what the software actually does with your data. It is written to be checked against the code rather than to be comprehensive.
What is accessed
With your explicit consent through Oura's own authorisation screen, Readiness requests exactly one permission from the Oura API, daily:
- Daily summaries. Your sleep, readiness and activity scores, steps, and from the night's sleep record its total, deep and REM durations, efficiency, lowest heart rate, and average heart rate variability.
That is the whole grant. Readiness does not request the personal, email or heartrate permissions, so it cannot read your name, email, age, height, weight, or heart rate time series. An app that asks for data it never puts on screen is asking you to consent to nothing, so it does not ask. You can see and change what you have granted in your Oura account at any time.
The server also asks Oura for your ring's latest battery level. The daily permission does not cover that, so Oura refuses it and nothing is returned. Readiness does not ask for wider permission to get it.
What leaves your phone
The app talks to one place: a small server run by oddrefresh, at a Cloudflare Workers address. It never talks to Oura directly. Oura's API refuses requests from apps like this one, and the Oura application secret can only live safely on a server.
Each request carries:
- A session id. A long random string the server issued when you connected. It means nothing anywhere else and is not an Oura token.
- Your local calendar date, so the seven day window ends on your today rather than the server's.
In demo mode the app sends no session id. The server fetches Oura's public sample data instead, and every screen says so.
The app checks for new numbers when it opens, when you tap, and every ten minutes while it is running.
What the server holds
- Your Oura access and refresh tokens, in Cloudflare's key value storage, keyed to your session id. They are never sent to the app on your phone or glasses. They are kept for up to 400 days from the last time they were renewed. If Oura refuses to renew them, the server deletes them.
- A cache of your most recent daily summaries, about ten minutes, so a refresh does not reach Oura every time. It covers the last seven days and is overwritten. Its key is a hash of your session id, not the id itself.
- Short lived connection codes. The eight character pairing code you type into the app is single use and expires after fifteen minutes. The value that ties Oura's sign in page to your request expires after ten.
What your phone holds
Inside the Even Realities app's storage for Readiness: your session id, whether demo mode is on, and a copy of the most recent summary, so the glasses show numbers instead of a spinner when the app opens.
Logs
Cloudflare operates the server and, like any web host, records request logs such as timestamps and IP addresses. Logging is turned on for this server, and a request's address includes the session id, so the session id can appear in those logs. A session id is enough to read that account's daily summaries through the server, so it is treated as a credential and should not be shared. Cloudflare's handling of logs is governed by Cloudflare's own privacy policy.
What is not done
- Your data is never sold, rented, or shared with anyone.
- There is no advertising, no advertising identifier, and no third party analytics or tracking of any kind.
- No long term history of your health data is kept.
- Your data is not used to train anything.
- Readiness does not interpret your numbers or send them anywhere to be interpreted.
Stopping and deleting
You can disconnect Readiness from your Oura account at any time in your Oura account settings. That stops all further access to your data. To have the stored tokens deleted from the server sooner than that, use the Contact me button on this page and it will be done. Removing Readiness from the Even Realities app removes the copy held on your phone.
Children
Readiness is not intended for anyone under 16.
Changes
If what the software does changes, this page changes with it, and the date at the top moves.
Contact
Questions go to the Contact me button on this page.