This project exists because one patient decided to exercise existing legal rights to access, understand, and use their own health data. Those same rights apply to you.
GDPR: Data Protection
Under the General Data Protection Regulation, you have the right to access your personal data (Article 15), correct inaccurate data (Article 16), and receive your data in a portable format (Article 20). These are not requests — they are legal rights.
CRPD: Disability Rights
The Convention on the Rights of Persons with Disabilities establishes that access to information, including health data, is a matter of equality (Article 9, Article 21). When a patient with a disability cannot access their own records, that is a barrier the system must remove.
How this project handles data
- All processing runs locally on your own machine. No data is sent to external servers.
- The Oura API connection uses OAuth2 with tokens stored only in your local
.env file. - Generated reports stay in your local
reports/ directory unless you choose to publish them. - The included demo dataset contains real data published with the patient's explicit consent.
- You control what data enters the pipeline, what analysis runs, and where results go.