Last updated: 2025.6.3
Hangzhou Tuya Information Technology Co.,Ltd and its Affiliates (as hereinafter defined) (“we”, “us”, “our”, or “Tuya”) are committed to protecting your privacy. 【Tuya Spatial】Privacy Policy (this “Policy”) describes our practices in connection with information privacy on Personal Data (as hereinafter defined) we process through your use of our services, products, and the 【Tuya Spatial】 Mobile Application (the “App”) and related mobile applications (collectively, the “Services”).
Before you use the Services, please carefully read this Policy and understand our purposes and practices of collection, processing of your Personal Data, including how we use, store, share and transfer Personal Data. In this Policy you will also find ways to execute your rights of access, update, delete or protect your Personal Data.
When you accept this Policy when you register with your Personal Data, or if you start to use the Services and do not expressly object to the contents of this Policy, we will consider that you fully understand and agree with this Policy. If you have any questions regarding this Policy, please do not hesitate to contact us via:
Definitions
In this Policy,
Affiliate means any company, firm or legal entity that: (1) is directly or indirectly controlled by Tuya; or (2) directly or indirectly controls Tuya; or (3) jointly with Tuya, controls the same company; or (4) is, directly or indirectly, under common control of the same company with Tuya. Affiliates shall include, without limitation, Tuya’s parent companies, subsidiaries, or such subsidiaries under common control of the same parent company as Tuya.
Personal Data means information generated, collected, recorded and/or stored, electronically or otherwise, that can be used to identify an individual or reflect the activity of an individual, either from that information alone, or from that information and other information we have access to about that individual.
Personal Sensitive Data includes personal biometric information, communication records and contents, health information, transaction information, and precise location information. When we collect Personal Sensitive Data from you, we will generate an explicit notification for your consent before we collection personal sensitive data about you.
Smart Devices refers to those computing devices produced or manufactured by hardware manufacturers, with human-machine interface and the ability to transmit data that connect wirelessly to a network, including: smart home appliances, smart wearable devices, smart air cleaning devices, etc.
What Personal Data do We Collect
In order to provide the Services to you, we will ask you to provide necessary Personal Data that is required to provide those Services. If you do not provide your Personal Data, we may not be able to provide you with the Services.
If you do not want to provide your account data when you start to use any of the Services, you may use the App without login or creating an account, and you may still use certain Tuya services, such as searching and browsing any features on the Services. At this moment, we will not collect Personal Data about account or profile, and the collected data will be limited to those you have authorized to be collected for purpose of using the additional functions of the App and/or the Smart Devices, as well as corresponding usage information. However, if the Services you request or purchase are based on your account, please go to the registration/login page for guidance.
1.Information You Voluntarily Provide Us.
Account Data: When you register an account with us, we may collect your account name and contact details, such as your email address, phone number, user name, and log-in credentials. During your interaction with our Products, we may further collect your nickname, profile picture, country code, language preference or time zone information into your account.If you authorize login to the Products with a third party account, we will obtain from such third party your account information (such as portrait, nickname, region, gender, etc.) which may bebound with your Tuya account for quick login. We will ensure compliance withapplicabledata protection laws and regulations, as well as agreements, policies or documentations agreed with such third party regarding sharing personal information,in processing your Personal Data.
- Information based on additional functions:
In order to provide you with more convenient and better quality products and/or services, and to improve your experience when using our Products, we may collect and use your personal information if you consent to use the following additional services provided to you. If you do not provide this information, it will NOT affect your use of the basic services of 【Tuya Spatial】 and connected devices, but you may not experience these features. These additional services include:
1)Additional services based on location information:
When you enable the location-basedfunctions through permission settings on your mobile device, we will collect and process your location information enable certain functions, such aspairing with your Smart Devices. Also, we may collect information about your real-time precise or non-precise geo-location when you use our specific Products or Services, such as robot cleaner and weather service.
Based on your consent, when you enable the geo-fence feature on the Products, your location information will be generated and shared with Google Map services. Please note that Google has corresponding data protection measures, which you may refer to Google Data Protection Terms for more details: https://privacy.google.com/businesses/gdprservices/. You may reject such use of your location information by managing the permission settings in the Products, upon which we will cease to collect and use your location information. 2)Additional services based on camera:
You may use the camera scan the code by turning on the camera permission to add the equipment you purchased, take video, etc.. Please be aware that even if you have agreed to enable the camera permission, we will only obtain information when you actively use the camera for scanning codes, shooting, etc.
3)Additional services for accessing and uploading pictures/videos based on photo albums (picture library/video library):
You can use this function to upload your photos/pictures/videos after turning on the photos permission, so as to realize functions such as changing the avatar, reporting device usage problems by providing photo proofs, etc.. When you use the photos and other functions, we will not recognize this information; but when you report a device usage problem, we may use the photos/pictures you upload to locate your problem.
4)Additional services related to microphone-based service:
You can use the microphone to send voice information after turning on the microphone permission, such as shooting videos, waking up the voice assistant, etc. For these functions, we will collect your voice information to recognize your command. Please be aware that even if you have agreed to enable the microphone permission, we will only obtain voice information through the microphone when you actively activate the microphone in the App.
5)Additional services based on storage permissions:
The purpose is to ensure the stable operation of the App by utilizing the storage permission. After you consent to use the permission to read/write your device storage, we will access pictures, files, crash log information and other necessary information from your device storage to provide you with functions, such as information publications, or record the crash log information locally.
You understand and agree that the above additional services may require yourconsent to enable your permission of location services, camera, photo album, microphone and/or phone in your device settings to perform features and functions involved in the App. You can check the status of the above permissions item by item in your device settings, and you can decide to turn on or off these permissions at any time.
Please note that if you turn on any permission, you authorize us to collect and use relevant personal information to provide you with corresponding Products. Once you turn off any permission, we will take it as canceling the authorization, and we will no longer continue to collect personal information based on the corresponding permissions, further the related functions may not be able to deliver. However, your decision to turn off the permission will not affect the previous collection and use of information based on your authorization.
2.Information We Collect Automatically
- Mobile Device Information: When you interact with our Services, in order to provide and maintain the common operation of our services, improve and optimize our service, and protect your account security as well, we automatically collect device information, such as mobile device model number, IP address, wireless connection information, operating system type and version, mobile hardware serial number (a unique mobile identifier, which is a string representing the device manufacturer coded in the mobile device), roid ID, application version number, push notification identifier, log files, mobile network and running process information.
- Usage Data: During your interaction with our Sites and Services, we automatically collect usage data relating to visits, clicks, downloads, messages sent/received, and other usage of our Sites and Services.
- Log Information: When you use the App, the system and exception log may be uploaded.
Please note that one cannot identify a specific individual by using device information or log information alone. However, if these types of non-personal information, combined with other information, may be used to identify a specific individual, such non-personal information will be treated as Personal Data. Unless we have obtained your consent or unless otherwise provided by data protection laws and regulations, we will anonymize and desensitize such non-personal information.
3.Smart Devices Related Information
- Basic Information of Smart Devices: When you connect your Smart Devices with our Products or Services, we may collect basic information about your Smart Devices such as device name, device ID, online status, activation time, firmware version, and upgrade information.
- Smart Device setting information: when you purchase a video doorbell and set the name or description, for example, a video doorbell, you name it "Welcome doorbell"), as well as information about changing the location where the doorbell is pairing, and any adjustments to this setting.
- Information Reported by Smart Devices: Depending on the different Smart Devices you elect to connect with our Products or Services, we may collect different information reported by your Smart Devices. For example, smart weights or fitness trackers may report your height, weight, body fat mass (BFM), BMI and skeletal muscle mass (SMM); Particularly, when you proactively consent to the Services connecting with third party Health platform to enable the fundamental feature for you (such as Apple Health, Google Fit, Fitbit, etc), we will share your health data (exclusively to your BMI, height, weight and body fat%) with them for the sole purpose of measuring and analyzing heath related indicators about you. We will not disclose such health data to any other third party. You may disconnect the Services with third party Health platform at any time by managing your health settings on your mobile device.
Purposes and Legal Basis for Processing Personal Data
The purposes for which we may process your personal data about you are as follows:
- Provide You Services: We process your account and profile data(including information about the community services), device information, usage data, location information, and Smart Device related information to provide you with our Products and Services that you have requested or purchased. The legal basis for this processing is to perform our contract with you according to our Terms of Use.;
- Improve Our Services: We process your device information, usage data, location information and Smart Device related information to ensure the functions and safety of our Products, to develop and improve our Products and Services, to analyze the efficiency of our operations, and to prevent and trace fraudulent or inappropriate usage. The legal basis for this processing is to perform our contract with you according to our Terms of Use;
- Non-marketing Communication: We process your Personal Data to send you important information regarding the Services, changes to our terms, conditions, and policies and/or other administrative information. At the same time, we will also send you notifications related to the services you have purchased, such as alert services. You can check the “App Notification” in the App (“Me > Settings on the upper right corner > App Notification > Notification Setting”) to manage these communications. When you decide not to enable the Notifications function, we will no longer process your information for such purpose. The legal basis for this processing is to perform our contract with you according to our User Agreement.
- Legal Compliance: We may process your Personal Data as we believe to be necessary or appropriate: (a) to comply with applicable laws and regulations; (b) to comply with legal process; (c) to respond to requests from public and government authorities (d) to enforce our terms and conditions; (e) to protect our operations, business and systems; (f) to protect our rights, privacy, safety or property, and/or that of other users, including you; and (g) to allow us to pursue available remedies or limit the damages that we may sustain.
If there is any change in the purposes for processing your personal data, we will inform such changes to you via email (specified in your account)and/or a prominent notice on our website of such changes of purposes, and choices you may have regarding your Personal Data.
Share, Transfer, Disclose Personal Data
Data Sharing
At Tuya, we only share Personal Data in ways that we tell you about. We may share your Personal Data under the following circumstances:
- Obtain your explicit consent or authorization in the first place, or provide information to support for your dispute resolution with other users in accordance with your formal request;
- In accordance with relevant agreements we contracted with you (including electronic agreements and corresponding Term of Use) or other legal documents provided;
- In accordance with applicable laws and regulations, judicial procedures, and other mandatory administrative or judicial requests;
- In order to comply with the law, execution orders, or adhere to our Term of Use and other agreements, to the extent permitted by laws and regulations, only by sharing Personal Data can protect the rights, privacy, property or security from damage for Tuya, our affiliates, partners, you or other Tuya users;
- To protect our facilities, operations and systems and to seek remedies available for this purpose or to limit the damages we may need to provide;
- Data sharing for the academic research;
- Share Personal Data for the public interest in compliance with laws and regulations.
- To subsidiaries or affiliates within our corporate family, to carry out regular business activities.We will only share necessary Personal Data for said purpose, and our affiliates will also be bound by the this Privacy Policy. When they change the purposes of processing Personal Data, we will obtain your explicit consent once again so that we can further process your Personal Data.
- To our third-party service providers who perform certain business-related functions for us, such as website hosting, data analysis, payment and credit card processing, infrastructure provision, IT services, customer support service, e-mail delivery services, and other similar services to enable them to provide services to us.In this respect, we share your Personal Data in a legitimate, necessary, specific and with defined purposes, meanwhile, we only share your Personal Data which are required to share. In the same time, the third-party service providers will not access to exact Personal Data about you and have no right to use Personal Data for other processing purposes which contracted with us.
- To our customers and other business partners who provide you, directly or indirectly, with your Smart Devices, and/or networks and systems through which you access and use our Sites and Services.
Except for the third parties described above, when we decide to share your Personal Data, only your consent can authorize us to proceed.The third parties we share Personal Data with, are required to be bound with the Non-Disclosure-Agreement, as well as this Privacy Policy to process Personal Data according to the defined instruction, security measures and confidentiality.
Data Transfer
At Tuya, we only transfer Personal Data in ways that we tell you about. We may transfer your Personal Data with the following reasons:
- Obtain your explicit consent or authorization in the first place;
- In accordance with applicable laws and regulations, judicial procedures, and other mandatory administrative or judicial requests;
- In accordance with relevant agreements we contracted with you (including electronic agreements and corresponding Term of Use) or other legal documents provided;
- In the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including without limitation in connection with any bankruptcy or similar proceedings). In such an event, you will be notified via email and/or a prominent notice on our website of any change in ownership, incompatible new uses of your Personal Data, and choices you may have regarding your Personal Data. Under such circumstances, we will require the third parties who have been transferred Personal Data comply with this Privacy Policy, otherwise require them to obtain your consent and authorization to process Personal Data.
Data Disclosure
We only disclose your Personal Data under the following conditions and adopt industry-standard security measures:
- Upon your request and through the way you consent, we will disclose your Personal Data;
- Where it is necessary to provide Personal Data in accordance with laws and regulations, mandatory administrative enforcement or judicial requirements, we may disclose Personal Data accordingly with the defined types of data and way of disclosure. Under the premise of complying with laws and regulations, when we receive the above request for disclosure of Personal Data, we will require the corresponding valid legal documents, subpoenas or investigation letters. To the extent permitted by laws and regulations, the files we disclose are protected by encryption keys.
Security Measures
We use commercially reasonable physical, administrative, and technical safeguards to preserve the integrity and security of your Personal Data, including but not limited to the following security measures: establishing strict internal data management systems and processes, encryption of Personal Data (including transmission, storage and processing), desensitization of the data, segregation of employees roles and duties, conducting security and privacy awareness training for our internal employees, access control and monitoring, etc., to prevent leakage, illegal usage, unauthorized access or infringement of Personal Data.
If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you might have with us has been compromised), you could immediately notify us of the problem by emailingprivacy@tuya.com. If a security incident affects the security of your account or Personal Data, we will promptly notify you through the email address, phone number, or Notification Center, etc., that you provided to us, and keep you informed of any suggestions to reduce or prevent related risks. When necessary, we will immediately take appropriate remedial measures in accordance with internal security response plan and report to the relevant authorities accordingly.
Individual Privacy Rights
We respect your rights and control over your Personal Data. You may exercise any of the following rights:
- By emailing us at privacy@tuya.com.
You do not have to pay a fee for executing your personal rights. According to different data protection laws, your request of personal rights will be handled within 15 business days, or within 30 calendar days due to different response requirement.
If you decide to email us, please make clear what information you would like to have changed in your request, whether you would like to have your Personal Data deleted from our database or otherwise let us know what limitations you would like to put on our use of your Personal Data. Please note that we may ask you to verify your identity before taking further action on your request, for security purposes.
You may:
- Request access to the Personal Data that we process about you;
- Request that we correct inaccurate or incomplete Personal Data about you;
- Request deletion of Personal Data about you;
- Request restrictions, temporarily or permanently, on our processing of some or all Personal Data about you;
- Request transfer of Personal Data to you or a third party where we process the data based on your consent or a contract with you, and where our processing is automated;
- Opt-out or object to our use of Personal Data about you where our use is based on your consent or our legitimate interests.
Withdrawal of consent: We will exercise your privacy right to withdraw consent through the following approaches:
- For privacy permissions acquired through device system settings, your consent can be withdrawn by changing device permissions, including location, camera, photo album (picture library/video library), microphone, Bluetooth settings, notifications and other related functions;
- You may opt-out the non-marketing communication through “Me &rt; Settings at the upper right corner &rt; Notification Settings” to manage your selection;
- You may opt-out the data analysis features through “Me &rt; Settings at the upper right corner &rt; Privacy Settings”;
- You may opt-out the Personalization feature through “Me &rt; Settings at the upper right corner &rt; Privacy Settings &rt; Personalization”;
- Unbind the Smart Device through the app, and the information related to the Smart Device will not be collected;
- By using product with the visitor mode, we will not collect any personal data about you;
When you withdraw your consent or authorization, we may not be able to continue to provide you with the products or services correspondingly. However, your withdrawal of your consent or authorization will not affect the processing of personal information based on your consent before the withdrawal.
About Delete of the Account: You can find the Delete function through “Tuya IoT Platform &rt; Cloud tab &rt; Users &rt; Delete “.
International Transfer of Information Collected
Primarily, Tuya adheres to Data Localization Requirement and Minimum Data shall involve International Transfer, while in order to facilitate our operation, we may transfer, store and process your Personal Data in jurisdictions other than where you live. Laws in these countries may differ from the laws applicable to your country of residence. When we do so, we will ensure that an adequate level of protection is provided for the information by using the following approach:
If you would like further detail on the safeguards we have in place, you can contact us directly as described in this Privacy Policy.
Data Retention
We process your Personal Data for the minimum period necessary for the purposes set out in this Privacy Policy, unless there is a specific legal requirement for us to keep the data for a longer retention period.
We determine the appropriate retention period based on the amount, nature, and sensitivity of your Personal Data, and after the retention period ends, we will destruct your Personal Data. When we are unable to do so for technical reasons, we will ensure that appropriate measures are put in place to prevent any further such use of your Personal Data.
Privacy of Young Children
Protecting the privacy of young children is especially important to us. According to the different data protection and privacy regulations, the Services are not directed to individuals under the age of eighteen (18), and we request that these individuals do not provide any Personal Data to us. We do not knowingly collect Personal Data from anyone under the age of eighteen (18) unless we first obtain permission from that child’s parent or legal guardian. If we become aware that we have collected Personal Data from anyone under the age of eighteen (18) without permission from that child’s parent or legal guardian, we will take steps to remove that information.
Changes to the Privacy Policy
We may update this Privacy Policy to reflect changes to our information practices, but at least on an annual basis. Without your explicit consent, we will not undermine your privacy rights under this Privacy Policy. For any regular updates, we will provide such information in the Policy page, or Notification Center in the Application, or other appropriate channels. We encourage you to periodically review this page for the latest information on our privacy practices.
If we make any material changes we will notify you by channels that you can easily access to, for instance, email or SMS (send to the email address specified in your account) or by means of a notice on this website prior to the change becoming effective.
Contact Us
If you have any questions about our practices or this Privacy Policy, please contact us as follows:
Hangzhou Tuya Information Technology Co.,Ltd
Postal Mailing Address: Postal Mailing Address: 3979 Freedom Circle, Suite 340, Santa Clara, CA 95054, USA.
Email: privacy@tuya.com.
Name: Rickert Rechtsanwaltsgesellschaft mbH
Emailing Address: Colmantstraße 15, 53225 Bonn, Germany