Loomy Privacy Policy

Last updated: 12 May 2026

1. Data Collection

Loomy retrieves Readiness scores and Sleep scores directly from the Oura Business API on behalf of employees who have voluntarily linked their Oura Ring via OAuth2. We do not collect raw heart rate data, HRV traces, sleep stage breakdowns, location data, or any other sensor output.

2. Purpose

Readiness and Sleep scores are processed solely for the purpose of identifying burnout risk and optimising shift safety. Data is never sold, shared with advertisers, or used for any purpose unrelated to workplace fatigue management.

3. Anonymisation

Managers and shift planners only ever see aggregated Readiness Levels presented as a simple Green / Amber / Red indicator. Raw heart rate, sleep stages, individual nightly scores, or any underlying biometric figures are never exposed to employers, supervisors, or any third party.

4. UK GDPR & Voluntary Participation

Loomy is built to UK GDPR standards. Participation is strictly voluntary: employees may decline to link a wearable, may revoke consent at any time from the Integrations page, and may request access, rectification, or erasure of their data by emailing privacy@loomy.live. Revocation immediately stops new data ingestion and triggers deletion of historical scores within 30 days. You may also lodge a complaint with the UK Information Commissioner's Office (ICO).