Tuya Privacy Policy
Last updated: August 28, 2025
Effective date: August 28, 2025
Hangzhou Tuya Information Technology Co., Ltd. and its affiliates (collectively, “We," "us," or "Tuya") are committed to protecting your personal privacy.
This Tuya Privacy Policy ("this Policy") applies to all products and/or services provided on the Tuya platform, including the Tuya app (mobile client) and the Tuya WeChat mini-program (collectively, the "Services"). When you use our Services, we collect and process your personal information. Therefore, please read this Policy carefully and ensure you understand our collection and processing of your personal information (including how such information is collected, used, stored, and shared), as well as how we provide you with access, update, deletion, and protection.
By agreeing to this Privacy Policy, or properly starting or continuing to use our products or services, and not contacting us to express a contrary opinion, we will deem you to have fully understood and agreed to this Policy. If you have any questions, comments, suggestions, or complaints while reading this, especially if you believe our handling of personal information has infringed upon your legal rights, you may file a complaint/suggestion regarding our services through appropriate regulatory channels or contact us through the following contact information:
Customer Service: 400-881-8611 or service@tuya.com
Privacy Policy: privacy@tuya.com.
If you are under the age of 18, in accordance with relevant laws and regulations, please obtain the prior consent of your parent or legal guardian before using our products or services. Furthermore, if you are under the age of 14, please be sure to read the Tuya Children's Privacy Protection Statement and ensure that you and your guardian or parent clearly understand relevant information regarding children's privacy protection.
This Policy primarily explains:
  1. What Personal Information We Collect
  2. Purposes and Legal Basis for Processing Personal Information
  3. With Whom We Share Your Personal Information
  4. Transfer of Collected Information
  5. Rights Related to Personal Information
  6. Information Security Measures
  7. Information Retention Period
  8. Protection of Children's Personal Information
  9. Notice Regarding Policy Changes
  10. Contact Us

Definitions

For the purposes of this Policy,
Affiliate: a company directly or indirectly controlled by Tuya; or directly or indirectly controls Tuya; or is under common control with Tuya; or is directly or indirectly controlled by the same company as Tuya, including but not limited to parent companies, subsidiaries, and subsidiaries controlled by the same parent company as Tuya.
Personal Information: Any information recorded electronically or otherwise that can be used alone or in combination with other information to identify an individual or reflect the activities of a specific individual.
Sensitive Personal Information: includes personal biometric information, communication records and content, health information, transaction information, and precise location information. When we provide you with specific products or services that involve the collection of sensitive personal information, we will obtain your consent through prominent and clear notices before collecting your sensitive personal information.
Smart devices: Refers to non-standard computing devices manufactured or produced by hardware manufacturers that have a human-computer interface and can transmit information via wireless networks. These include smart home appliances, smart wearable devices, smart air purifiers, etc.
Applications: Refers to mobile applications developed by Tuya (including mobile clients, Tuya mini-programs, and Tuya WeChat mini-programs) that enable end users to remotely control smart devices and connect to the Tuya Internet of Things (IoT) platform.
De-identification: Refers to the process of processing personal information so that it cannot be used to identify a specific individual without the aid of additional information.

I. What Personal Information Do We Collect

Browsing (Guest) Mode (Android and iOS only):
Please note that we do not collect any personal information in this mode. You can use this mode to learn more about our services and features.
Try as Guest Mode (Android and iOS only):
When you use the "Try as Guest" mode (no account registration or login required) to experience our services, we will collect basic device-related operating information to ensure proper functionality. This information includes:
  • Device IP address, operating system type, device model, and network information related to smart device network configuration;
  • If your smart device requires location services, we will obtain location information with your authorization;
  • This information is used to identify the device's connection status with the service to complete device network configuration, control, and display;
  • Upon exiting the "Try as Guest" mode, we will immediately delete all temporary data and will not retain copies or backups.

1. Information You Voluntarily Provide to Us

Login Mode:
  • Account Registration Information: When you register an account with us, we will collect your account name and contact information, including your email address, phone number, username, and login password. During your interaction with our products, we may further collect your account nickname, country code, language preference, or time zone information. - User Feedback: When you use our services and submit service-related feedback and suggestions, we will collect your email address, mobile phone number, and feedback content (including any attached images or videos). This information will be used to promptly address your app issues and smart device-related malfunctions.
When you choose to authorize third-party account login, we will obtain your shared account information (default system avatar, nickname, and region information) from the third party and bind it to your Tuya account for quick login. We will use your personal information in accordance with the agreement with the third party, the terms of the third party's published privacy policy regarding sharing personal information, and in compliance with relevant laws and regulations.

Information Collected for Additional Features

To provide you with more convenient and high-quality products and/or services and to enhance your experience, we collect and use your personal information in the following additional services. Failure to provide this information will not affect your basic Tuya app services, but you will not be able to enjoy the user experience these additional services provide. These additional services include:
  • Additional Services Based on Location Information:
    • When you enable the positioning function of your mobile device through system authorization and use location-based services, we will collect and use your location information (coarse location information, latitude and longitude) to facilitate network pairing between the Tuya app and your smart device. Furthermore, when you use certain of our products or services (weather services/home management), with your consent, we will collect real-time precise or non-precise geolocation information about you. When you use the geofencing feature and create scenes that change location, we will request background location permission to locate the user's location and perform automated user pre-screening. You can disable the collection of your location information by disabling the positioning service in your mobile device's system. Adding a device requires location permission (Android only). To add a device, searching for nearby devices requires Bluetooth scanning, which requires Bluetooth positioning, otherwise it will affect the user's device addition. - Go to [Me] - [Settings] - [Privacy Settings] and turn off/on the [Location] permission.
  • Additional Services Based on the Camera:
    • After enabling Camera Permission, you can use this feature to scan a QR code to add your purchased device. Please note that even if you have agreed to enable camera permissions, we will only obtain information when you actively scan a QR code or take a photo with the camera. The QR code scanning feature collects light sensor information, which determines whether to use the flash function.
    • Go to [Me] - [Settings] - [Privacy Settings] and turn off/on the [Camera] permission.
  • Additional Services Based on Photo/Video Access and Upload:
    • After enabling Camera Permission, you can use this feature to upload your photos/videos to provide proof of device usage issues and to upload photos/videos to certain device panels. When you report a device issue, we will use the uploaded photos/videos to identify the issue. - Go to [Me] - [Settings] - [Privacy Settings] and turn off/on the [Picture] permission.
  • Additional Services Related to Microphone-Based Voice Technology:
    • After enabling the Microphone Permission, you can use the microphone for voice functions, including recording videos, waking up voice/AI assistants, and certain special panels (such as video doorbell calls). For these functions, we will collect your Voice Information to identify your commands or provide you with corresponding services. Please note that even if you have agreed to enable the Microphone Permission, we will only collect Voice Information through the microphone when you actively click the microphone icon in the app or record a video.
    • Go to [Me] - [Settings] - [Privacy Settings] and turn off/on the [Microphone] permission.
  • Additional Services Based on the Storage Permission (Android):
    • We request this permission to ensure stable client operation. After you enable permission to read/write your device storage, we will read or write necessary information, such as images, files, and videos, from your device's storage to provide you with information publishing and local crash log recording.
    • Go to [Me] - [Settings] - [Privacy Settings] and turn off/on the [Access storage permissions].
  • Additional features based on the Message Notification permission:
    • We request this permission to push notifications about our products or services, especially alerts for purchased services so you can get real-time updates.
    • Go to [Me] - [Message Center] - [Settings] in the upper right corner and turn off/on the [Device Alert] permission.
  • Additional features based on the "Floating Window" (Android):
    • We request this permission to display the camera's live feed in a floating window when you've linked your camera to the app.
    • Turn off/on the [Floating Window] permission through your phone's system's permission settings.
  • Additional services based on Bluetooth technology:
    • After enabling Bluetooth permission, you can use Bluetooth features, including device control, device status acquisition, device discovery, and device network pairing. During these features, we communicate with the device via Bluetooth. Please note that even if you have agreed to enable Bluetooth permissions, we will only use Bluetooth for communication in the following scenarios: displaying device status on the home page and device panel; controlling devices on the home page and device panel; and discovering and pairing devices on the home page and add device page.
    • Go to [Me] - [Settings] - [Privacy Settings] and turn off/on [Bluetooth(iOS) / Access to nearby devices permissions (Android)] permissions.
  • Additional Services Based on HomeKit Technology (iOS only):
    • After enabling HomeKit permissions, you can enable related features, including device discovery, pairing, control, and status. For these features, we exchange data with the iOS Home app through HomeKit. Please note that even if you have agreed to enable HomeKit permissions, we will only use them in the following scenarios: on the homepage and on the Add Device page for discovering HomeKit devices and pairing them with the network; and in [Me] - [HomeKit Information] for discovering HomeKit devices and pairing them with the network.
    • To manage [HomeKit] permissions, go to the iPhone system [Settings] - [Privacy & Security] - [Home Accessories], then select the current app to toggle permissions on or off.
  • Additional Services Based on HealthKit Technology (iOS only):
    • After enabling HealthKit permissions, you can use related features, including weight and height data, and running and swimming data. For these features, we use HealthKit to exchange data with the iOS Health app. Please note that even if you have agreed to enable HealthKit permissions, we will only use them in the following scenarios: writing data to HealthKit from scales, wristbands, and watches; and reading data from HealthKit in the Health Center.
    • To manage [HealthKit] permissions, go to the iPhone system [Settings] - [Privacy & Security] - [Health], then select the current app to toggle permissions on or off.
  • Additional Services Based on Face ID Technology (iOS only):
    • After enabling Face ID, you can use related features to securely and conveniently log in to your account without a password using iOS facial recognition, eliminating the need to repeatedly enter your account and password. iOS does not provide Face ID data to us, and we do not and cannot collect or store your Face ID data. You can also enable/disable this feature at any time. - Go to [Me] - [Settings] - [Account and Security] - Turn off/on [Face ID]
  • Additional features based on Fingerprint permissions (Android only):
    • We request this permission so you can log in to the app without a password using Fingerprint ID. We will not store or upload your fingerprint information.
    • Go to [Me] - [Settings] - [Account and Security] - Turn off/on [Fingerprint ID]
You understand and agree that these additional services require you to enable access to your location information (geolocation), camera, photo album, microphone (voice), internal and external storage, "Floating window", Bluetooth, HomeKit, HealthKit, Face ID, listener service, and Fingerprint on your device in order to collect and use the information required by these permissions. You can view the status of each of these permissions in your device settings and decide whether to enable or disable them.
Please note that by enabling any permission, you authorize us to collect and use your personal information to provide you with the corresponding service. By disabling any permission, you revoke your authorization, and we will no longer collect and use your personal information based on the corresponding permission, nor will we be able to provide you with the corresponding service. However, disabling a permission will not affect the collection and use of information previously authorized by you.

2. Information We Collect Automatically

  • Mobile Device Information: When you interact with our products, we automatically collect mobile device information, including mobile device model, login IP address, wireless connection information, operating system type and version, application version number, push notification identifier, log files, and mobile network information, to ensure your normal use of our services, maintain the normal operation of our services, improve and optimize our service experience, and protect your account security. To accurately locate service failures, we collect your ID information (including account ID, device/Virtual ID, order ID, Home ID, and Scene ID). We also collect your software version number. To ensure the security of the operating environment or to provide services, we collect information about the mobile applications and other software you use, as well as a list of installed applications (for application performance monitoring). - Service Log Information: When you use our applications, system and exception logs will be uploaded for analysis to provide you with a better user experience and improve our services. These logs include your IP address, preferred language, operating system version, access date and time, and usage information, so we can accurately identify issues and help you resolve them.
Please note that mobile device information and service log information alone cannot identify a specific individual. If we combine this non-personal information with other information to identify a specific individual, or use it with personal information, such non-personal information will be treated as personal information during the combined use period. We will de-identify this information unless we have your authorization or otherwise require it under applicable laws and regulations.

3. Smart Device Information

When you use a smart device, we collect information inherent to the device itself and information generated during your use.
  • Basic Smart Device Information: When you use a smart device connected to our products or services, we collect basic information about the smart device, including its name, device ID, online status, activation time, firmware version, and upgrade information.
  • Information collected when connecting to smart devices: When using the Tuya app and services, we will receive and record information about your device based on your specific actions and the type of smart device you wish to connect to, to facilitate device identification, activation, and control, collect data statistics and analysis, and ensure the security and quality of network access and service operations. We will collect the following information when you access the Add Device homepage to perform self-discovery and search for devices to be paired, as well as when you actively pair devices:
Wi-Fi information (SSID, BSSID, Wi-Fi MAC address, Wi-Fi password), device MAC address, device ID, device IP address, and device Bluetooth MAC address.
  • Information reported by smart devices: We will collect information reported by your smart devices based on the different smart devices you choose to connect to our products or services. To help you better understand how to use our services, we'll use the following smart devices as examples. The information they report only applies when you use that type of service:
For example: When you voluntarily use a smart camera (IPC service) and connect it to the Tuya platform: You connect a doorbell, door lock, or smart surveillance camera with a camera through the Tuya service to monitor your home security or view surveillance content. After you add the device and use the smart camera, if the device detects movement, it will capture the surveillance footage (in image format) for you to view. This information will be automatically uploaded to the cloud for storage, but we will not use the images for any other purposes and will automatically delete this information after the retention period. If you proactively choose and successfully purchase the cloud storage value-added service, the smart camera will upload the videos you capture to the cloud for storage so you can playback them on the app. We will retain your video information based on the cloud storage service you purchased and will not use it for any other purpose. If you choose to delete an image in advance within the Tuya app, you can do so in the Message Center. If you need to delete a video and execute this command within the app, the cloud will respond to the deletion command and immediately delete the video you selected. Please note that when you choose to turn off the motion detection function, the smart camera will not actively record the captured images, which will affect your original intention of using the smart camera.
For example: When you voluntarily use a health-related smart device and connect it to the Tuya platform: If you select one or more smart devices, the corresponding information will be recorded:
  1. Smart body fat scales or fitness trackers: Height, weight, body fat mass (BFM), body mass index (BMI), skeletal muscle mass (SMM), body fat percentage, muscle mass, body fat index, obesity level, ideal weight, weight control, visceral fat index, lean body weight, body water content, bone mass, protein content, BMR, metabolic age, body score, body shape, subcutaneous fat percentage, subcutaneous fat mass, heart rate;
  2. Wristbands and similar smart devices: Heart rate, steps, calories, mileage, heart rate, sleep history, training history, body temperature, blood oxygen level, systolic blood pressure, diastolic blood pressure, and stress;
  3. Smart fitness devices such as smart skipping ropes: Start time, skipping mode, number of skips, workout duration, calories burned, maximum number of sustained jumps, number of skips, average speed, maximum speed, and heart rate during exercise
In particular, when you actively consent and enable sharing features with third-party health platforms, such as Apple Health, Google Fit, and Fitbit, we will share your health information with third parties solely for the purpose of measuring and analyzing your health. The following list describes the information that is transmitted when you use a smart device and decide to share your information with a third party.
BraceletBody Fat ScaleJump Rope
Apple HealthSteps, Calories, Mileage, Heart Rate, Sleep HistoryHeight, Weight, Body Fat Percentage, BMI, WeightCalories
Fitbit/Weight, Body Fat PercentageCalories
The purpose of sharing information is to measure and analyze your health indicators. We will not disclose such health information to any other third party, nor will we use health-related information for any other purpose not defined in this policy. You can disconnect the Tuya app from third-party health platforms at any time by managing your health settings in the health management center on your mobile device. If we add new third-party sharing channels and you do not use them, we will not share your information.

4. Auto-start Scenario Description (Android Only)

We use widget components to implement the following functional scenarios. No service functions will be executed when logged out. When logged in, the corresponding service functions will only be executed when the user manually triggers the relevant operation. Using the widget will trigger the app process to auto-start at a certain frequency through system broadcasts. This is necessary for functional and business implementation.
  • When you create a smart scene and the execution conditions in the smart scene are triggered;
  • When you control a smart device through the app;
  • When you use voice control through a voice assistant.

II. Purposes and Legal Basis for Processing Personal Information

We process your information for the following purposes:
  • Providing you with services: We process your account information, mobile device information, usage information, location information, and smart device-related information to provide the products and services you requested. The legal basis for this processing is the performance of our contract with you under our User Agreement.
  • Improving our services: We process your mobile device information, usage information, location information, and smart device-related information to ensure the functionality and security of our products, develop and improve our products and services, analyze our operational efficiency, and prevent and track fraudulent or inappropriate use. The legal basis for this processing is the performance of our contract with you under our User Agreement.
  • Non-marketing communications: We process your personal information to send you important information about our services, changes to our terms/conditions and policies, and/or other administrative information. We may also send you notifications related to your purchased services, including alerts. You can manage whether you wish to receive these communications by checking the "Device Alert" section in the Tuya app ([Me] - [Message Center] - [Settings] - [Device Alert]). If you choose to turn off push notifications, we will no longer send you these communications. The legal basis for this processing is the performance of our contract with you under our User Agreement.
  • Feature Experience Upgrade Program (Android and iOS only): To enable you to better enjoy the convenience of smart devices, we will analyze your usage of Tuya services or smart devices, as well as products or usage scenarios relevant to you, to help you better enjoy the convenience of our products. We will use your linked smart device information to recommend other smart devices that can be intelligently linked to your linked devices (smart device recommendation service). If you do not consent to our data analysis, you can go to the Tuya app's privacy settings ("Me" - "Settings" - "Privacy Settings" - "Service Maintenance & Improvement Activity" to disable your consent. The legal basis for this processing is your consent.
  • Personalized Recommendation Service (Android and iOS only): We process your account information, usage information, and mobile device information to provide you with tailored services based on your device type (including recommending and displaying product information and advertisements tailored to you), and invite you to participate in user surveys for the products you use. This information is necessary for personalized recommendations. If you refuse to provide it, we will be unable to recommend personalized information or services, display recommended purchase services, or send targeted push messages. Currently, Tuya does not make automated decisions regarding the processing of your personal information and only provides scene-based recommendations based on your smart device type. If you do not consent to Tuya processing your personal information for personalized services, you can disable this option when accessing the Tuya app or in the app's privacy settings ([Me] - [Settings] - [Privacy Settings] - [Personalized Recommendations]). The legal basis for this processing is your consent. Please note that the basic scene recommendation feature only provides available scene services (including device automation and convenient execution) based on your network-connected devices and is not a personalized recommendation service.
  • Compliance: We process your personal information only when we are required to disclose it by law or when we believe it is necessary or appropriate to:
  • (a) comply with applicable laws and regulations, legal process, or requests from public and governmental authorities;
  • (b) enforce our Terms of Use and other agreements, policies, or standards, including investigating any potential violations;
  • (c) protect the rights, privacy, safety, or property of us and/or other users, including you;
  • (d) pursue available measures to detect, prevent, remedy, or limit damages we may be required to provide or address security, fraud, or technical issues.
We may also use your personal information in other ways for which we provide specific notice at the time of collection and obtain your consent as required by applicable law. If the purposes for which we process your personal information change, we will notify you of such changes via email and/or a prominent notice on our website, and inform you of your choices regarding your personal information.

III. With whom do we share your personal information?

Tuya only shares your personal information with you. We share your personal information with the following parties:
  • With third-party service providers who provide us with certain business-related services, including website hosting, data analysis, payment and credit card processing, infrastructure provision, IT services, customer support services, email delivery services, and other similar services to enable them to provide our services.
  • With customers and other business partners who directly or indirectly provide you with smart devices and/or the networks and systems you use to access and use our websites and services.
  • With affiliates or other third parties in the event of a reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or a portion of our business, assets, or stock (including, without limitation, in connection with any bankruptcy or similar proceedings). In such an event, you will be clearly notified via email and/or our website of any change in ownership, any incompatible new uses of your personal information, and choices you may have regarding your personal information. We may share your personal information as reasonably necessary or appropriate to:
(a) comply with applicable laws, regulations, legal processes, policies, and/or standards, or requests from public and governmental authorities;
(b) enforce our Terms of Use and other agreements, policies, and standards, including investigating any potential violations;
(c) protect our operations, business, and systems;
(d) protect the rights, privacy, safety, or property of us and/or other users, including you; and
(e) conduct risk management, detection, and identification of illegal, fraudulent, deceptive, or malicious activity.
(f) disclose your personal information to our subsidiaries or affiliates for the purpose of conducting our regular business operations.
Except for the third parties mentioned above, we do not rent, sell, or provide personal data to third parties, and we will only disclose your personal information to other third parties with your consent.
Please note that we do not collect your personal information through third parties under any circumstances.
When you use services provided by third parties, we will share the relevant information after ensuring that the third party has your authorization and consent, and in other circumstances consistent with laws and regulations. This list provides information about what personal information third parties collect and how they process it. We will also strictly restrict third-party access to personal information to protect your personal information security. Please click "Third-Party Information Sharing and SDK Service List" for details on third-party information sharing.
In addition, to ensure the stable operation of Tuya apps or to implement related independent features, we embed third-party SDKs into our apps. Please note that the personal information processing methods of third-party SDKs may change due to version upgrades, policy adjustments, and other reasons. Please refer to their official disclosures. Please click "Third-Party Information Sharing and SDK Service List" for details on third-party SDKs.

IV. Transfer of Collected Information

Personal information collected and generated by this application during its operation within mainland China is stored and processed in domestic data centers.

V. Rights Related to Personal Information

We respect your rights and will keep your personal information confidential.
You can exercise your rights without paying any fees. In accordance with local data protection laws, if your account service is in mainland China, we will review and process your request within 15 business days; if your account service is outside mainland China, we will respond to your request within 30 days.
If you decide to send us a request via email, please specify which information you would like to change, whether you would like your personal information to be deleted from our database, or what restrictions you would like us to place on our use of your personal information. Please note that for security reasons, we will require you to verify your identity before further processing your request.
To protect your rights to access, copy, correct, and delete your personal information, as well as to withdraw your consent for the processing of your personal information and cancel your account, this application provides you with the corresponding operation paths. Please refer to the following instructions.
  1. Accessing Personal Information You can access your personal information in this app through the following paths:
Go to "Me - Settings - Personal Information" to view your basic personal information;
Go to "Me - Settings - Account and Security" to view your account-related information;
Go to "Me - Home Management" to view your home settings information;
Go to "Home - Device Management" to view your device information.
  1. Obtaining a copy of your personal information. You can obtain a copy of your personal information through "Me - Settings - Privacy Policy Management - Export Personal Information" within the app.
  2. Correcting your personal information. You can correct your personal information in the app through the following paths:
Go to "Me - Settings - Personal Information" to correct your profile picture, nickname, and time zone information;
Go to "Me - Settings - Account and Security" to correct your account-related information;
Go to "Me - Home Management" to correct your home settings information;
Go to "Home - Device Management" to correct your device information.
  1. Deleting personal information. You can delete your personal information in the app through the following paths:
Go to "Me - Home Management" to delete your home settings information;
Go to "Home - Device Management" to delete your device information;
Go to "Me - Settings - Clear Cache" to clear cached information on your device;
Go to "Me - Settings - Account and Security - Delete Account" to delete all your information.
  1. Withdrawing Authorization. You can withdraw your authorization in the app through the following paths:
Go to "Me - Settings - Privacy Policy Management" to revoke system permissions.
Go to "Me - Message Center - Settings" to disable non-marketing communications.
Go to "Me - Settings - Privacy Setting - Service Maintenance & Improvement Activities" to disable the Service Maintenance & Improvement Activities.
Go to "Me - Settings - Privacy Setting - Personalized Recommendations" to disable personalized recommendations.
Unbind your smart device through "Home - Device Management - Manage - Remove Device."
Delete all information in the Try as Guest mode by exiting "Try as Guest" Mode.
Disconnect your smart device from the third-party platform (if any).
After you withdraw the above authorization, the App will block the collection, use, and other operations of your personal information by these features. This will not affect the withdrawal of any previous processing of your personal information based on your consent.
  1. Delete Account. You can deregister your App account through "Me - Settings - Account and Security - Delete Account." Please understand that account deregistration is irreversible. Seven days after you request account deregistration, we will cease providing services to you and delete the personal information associated with your account, unless otherwise required by law or regulation.
  2. Restricting Automated Decisions by Information Systems. The App's business functions may make decisions based on non-human automated decision-making mechanisms, including information systems and algorithms. If such decisions significantly impact your legal rights and interests, please contact us using the contact information set forth in Section 10 of this Policy.
  3. Right to Restrict Processing. You can restrict or refuse the processing of your information through "Me - Settings - Account and Security -Delete Account." You may also exercise your rights by contacting us using the contact information set forth in Section 10 of this Policy.
If you still have more questions, please go to [Me] - [Help Center] in our app, or send an email to privacy@tuya.com

VI. Information Security Measures

We implement commercially reasonable physical, administrative, and technical safeguards to maintain the integrity and security of your personal information. Tuya provides a variety of security strategies to effectively ensure the information security of users and devices.
  • For device access, we use Tuya's proprietary algorithms to ensure data isolation, access authentication, and authorization.
  • For data communication, we support the use of secure algorithms and transmission encryption protocols, as well as commercial-grade information encryption transmission based on dynamic keys.
  • For data processing, we implement strict data filtering and verification, as well as a comprehensive data review process.
  • For data storage, all confidential user information will be securely encrypted for storage.
In addition to the above technical security measures, Tuya has also established a series of security measures at the institutional and management levels, including designated positions and responsibilities, security and privacy protection training courses, enhanced employee data protection awareness, and access control measures to prevent data loss, illegal use, unauthorized access or leakage, tampering, or damage.
If for any reason you believe your interaction with us is no longer secure (for example, if you believe the security of your Tuya account has been compromised), please notify us immediately by emailing privacy@tuya.com as described below.
If a security incident occurs that affects the security of your personal information, we will promptly notify you via the email address, phone number, or message center push notifications you provide, along with recommendations for mitigating or preventing related risks. If necessary, we will promptly implement remedial measures in accordance with our internal security incident response plan and report any incidents to the relevant authorities as required.
We have obtained Enterprise Privacy Certification (EPC). For more information about EPC, please click here.

VII. Information Retention Period

We will process your personal information for the minimum period necessary to fulfill the purposes outlined in this Policy or as required by laws and regulations, unless a longer retention period is required by specific legal requirements. We will determine an appropriate retention period based on the amount, nature, and sensitivity of your personal information. We will destroy your personal information after the expiration of the retention period.
  1. To fulfill your requested products and services in accordance with the User Agreementand this Policy;
  2. When you explicitly request deletion of your personal information, we will consider this a requirement and will no longer retain your personal information.
Once we confirm that the purposes for which your personal information has been collected and processed have been fulfilled in accordance with 1), or after we confirm your deletion or cancellation request in accordance with 2), or after we terminate the operation of the corresponding products or services, we will cease retention and delete your personal information. Generally, we will no longer retain your personal information once the specified retention period has expired. If, for technical reasons, we are unable to destroy the information and the retention period for your personal information exceeds, we will take appropriate measures to prevent further use of your personal information, including de-identification.

VIII. Protection of Children's Personal Information

Tuya takes the protection of children's personal information very seriously. If you are under the age of 14 (or the applicable age in your country/region), please carefully read the Tuya Children's Privacy Protection Statement and obtain the prior written consent of your parent or legal guardian before using our services. Tuya protects children's personal information in accordance with relevant laws and regulations in various regions, countries, or areas. Please note that if we discover that we have collected a child's personal information without the prior, verifiable consent of their parent or legal guardian, we will endeavor to delete the relevant personal information as soon as possible.

IX. Notice Regarding Policy Changes

We will update this Policy at least annually to reflect changes in our information practices. If we make any significant changes, we will notify you by email (sent to the email address specified in your account) or by posting a notice within this app before the change takes effect. We encourage you to review this app regularly for the latest information on our privacy practices.

X. Contact Us

If you have any comments or questions about this Privacy Policy, or any concerns about our collection, use, or disclosure of your personal information, please contact us through [Me] - [Help Center] in the Tuya app or through the methods provided below, specifying "Privacy Policy." Our dedicated privacy and security team will address any requests or inquiries regarding your rights related to your personal information. If your inquiry involves a significant matter, we may request additional information to confirm the nature and impact of the matter. If you are dissatisfied with the response you receive, you may refer your complaint to the relevant regulatory authority. When you contact us, we will provide information on possible complaint channels based on your specific circumstances and will verify and address your request within 15 business days.
Contact Information and Address:
Hangzhou Tuya Information Technology Co., Ltd.
Address: 7-12th Floor, Building A, Huace Center, Wuchanggang Road, Xihu District, Hangzhou, Zhejiang Province
Email: Privacy Office [privacy@tuya.com] ; Customer Service Team [service@tuya.com]
Tel: 400-881-8611