Last modified: April 8, 2026
This California Privacy Notice (“Notice”) is for California residents and supplements Tuya Privacy Policy. This Notice explains how we have collected, used, sold and shared your Personal Information in the past twelve (12) months and how to exercise your rights under the California Consumer Privacy Act (“CCPA”) and the California Privacy Rights Act (“CPRA”). Right to Know
Under CCPA, you have the right to request that we disclose to you the Personal Information we collect, use, sell or disclose, and information about our data practices.
Business and Commercial Purpose of Personal Information Collection:
We collect your Personal Information in order to:
(1) provide you with our Services;
(2) operate and improve our Services;
(3) manage accounts;
(4) handle contact and support requests;
(5) process non-marketing communications;
(6) conduct research for internal business purposes;
(7) fulfill legal compliance obligations;
(8) understand how you find us, and
(9) deliver personalized ads.
Source and Categories of Personal Information:
For the source of Personal Information please see Tuya’s Privacy Policy. The categories of Personal Information that we have collected and shared with third parties for business purposes in the preceding 12 months are outlined below: 1. Identifiers:
• Account data, including phone number or email address used for registration;
• Online identifier;
• IP address.
2. Internet or other electronic network activity information:
• Device information;
• Network information;
• Usage data, including user interactions with specific in-app functions;
• Server log files;
• Smart Device Data.
3. Commercial information:
• Transactional and purchase/payment details (based on the service you require)
4. Location Information, such as latitude and longitude data, will only be used for business functions, such as allowing users to set their home location, check the weather, automatically control smart devices based on their proximity to home, and shipping address.
5. Audio, visual, and similar information:
• Text, audio messages, and images sent by users when using specific AI functions.
Through our interactions with you and in order to provide you with our smart devices and services or fulfill your requests, we may collect certain information, such as account data and precise Location Information (like latitude and longitude), as described above. Under applicable privacy laws, this may be considered “sensitive personal information.” Recipients of this data include our service providers. For categories of sensitive personal information that we collect, we will use or disclose it either with your specific consent when required, or as otherwise permitted by law, including the CCPA. Please note that we do not use or disclose sensitive personal information for purposes other than those specified under the CCPA Regulations in §7027(m).
Recipients of Personal Information:
We disclose above listed categories of Personal Information to:
• Our third-party service providers who perform certain business related functions for us;
• Our customers and other business partners who provide you access to and use of our Sites, Services, and smart devices;
• Third-party advertising service providers to deliver personalized advertising;
• Data analytics providers to perform attribution and app usage analysis;
• Our affiliate or other third-party in event of any reorganization;
• Subsidiaries or affiliates within the corporate family;
• Other parties when it is necessary and appropriate for legal compliance purposes;
• Other parties with prior notice and your informed consent.
To learn more details about the categories of Personal Information we collect, the categories of sources from which the Personal Information is collected and the categories of third parties with whom we may share Personal Information, please refer to our Privacy Policy.
Data Retention Period
Sale or Sharing of Personal Information
We may share your personal information by allowing certain third parties (such as third-party advertising service providers and data analytics providers) to collect your personal information via automated technologies and server-to-server connections on the App for app attribution and cross-context behavioral advertising. This kind of sharing may be considered a “sale” or "sharing" under the CCPA/CPRA.
In the preceding twelve (12) months, we may have sold or shared the following categories of personal information about you to or with these third parties:
Identifiers (such as IP addresses, device and account identifiers)
Internet or other electronic network activity information (such as user interactions with the product, diagnostic Information (if applicable))
You have the right to opt out of these types of disclosures of your information, as detailed in the "Right to Opt-out" section below. Tuya does not knowingly sell or share (for attribution and personalized advertising) the personal information of consumers under 16 years of age.
Your CCPA Privacy Rights (Access, Deletion, Correction, and Profiling)
Under the CCPA, you have the right to request access to, correction of, or deletion of the Personal Information we collect and maintain about you. You also have the right to opt out of certain profiling activities that produce legal or similarly significant effects.
For detailed information on the scope of these rights and step-by-step instructions on how to exercise them, please refer to the [Data Subject Rights] section of our Privacy Policy.
Right to Opt-out of the Sale or Sharing of Your Personal Information
You have the right to opt-out of the sale of your personal information or sharing of your personal information by clicking [Me-Setting-Privacy Setting-Ad Preferences & Permissions - Third-Party Ad Management（Do not sell or share my personal information）]
Right to Non-Discrimination
We will NOT discriminate against you for exercising any of these rights.
In your request, please make clear what Personal Information you would like to have changed, whether you would like to have your Personal Information deleted from our database or otherwise let us know what limitations you would like to put on our use of your Personal Information. Please also note that to protect your data and the integrity of our services and products, we may need to verify your identity before processing your request, so that we may precisely locate your Personal Information.
You do not have to pay a fee for executing your personal rights. According to California Consumer Privacy Act, we will complete your privacy request within 45 calendar days. If we need an extension for up to an additional 45 days in order to process your request, we will provide you with an explanation for the delay.
Guidance for Authorized Agents
The CCPA and the CPRA recognizes a variety of privacy rights for Californian consumers. According to the CCPA, we as a business is required to provide channels for the consumers to exercise their rights, including the rights, via a verifiable request, to
(i) know and access the Personal Information that we collect, use, disclose; and
(ii) delete the consumer’s Personal Information.
Per the CCPA, consumers may exercise their rights through an authorized agent. Therefore, we provide this guidance for authorized agents acting on behalf of consumers regarding exercise of the above rights under the CCPA.
If the consumer has a Tuya account
Authorized agents acting on behalf of consumers with a Tuya account can exercise their rights through Tuya account. Please kindly note the following rights will be handled respectively:
- Right to know: You can check the categories of personal information being collected, processed, or used are outlined in this Notice.
2. Right to access and delete: Authorized agents acting on behalf of a consumer with a Tuya account can exercise these rights through the consumer's account.
It is important to note that a valid login is required to access or delete personal information associated with a Tuya account. This safeguard is in place to protect the security of consumer data. Once the request is submitted by the authorized agent, the request will be handled automatically.
If the consumer does not have a Tuya account
If the consumer does not have a Tuya account, Tuya only collects online identifiers (such as IP address), device information (such as operating system type and device model), network configuration details, and location information (only if you have granted explicit authorization). Such consumers may exercise their data subject rights as below:
Right to know: You can check the categories of personal information being collected, processed, shared or used are outlined in our Privacy Policy.
Right to access and delete: If the consumer uses the App in "Try as Guest" mode, the temporary operational data collected (such as IP addresses and device information) is not linked to any verifiable identity (such as a registered email or phone number). Because we cannot legally or reasonably verify the identity of the underlying consumer in this anonymous state, we are unable to process access or deletion requests submitted by authorized agents on behalf of non-registered guest users. Consumers using the App in guest mode can independently exercise their right to delete by simply exiting the "Try as Guest" mode, deleting data under "Me - Family Management", or deleting device information under "Home - Devices".
Contact for more information
If you would like to submit a complaint about our use of your Personal Information or our response or handling of your requests regarding your Personal Information, you may contact us as described below:
Toll-free phone number: 1-844-672-5646
You can also submit a complaint to the California Office of the Attorney General in the following contact information:
California Department of Justice
Attn: Public Inquiry Unit
P.O. Box 944255
Sacramento, CA 94244-2550
Voice: (916) 210-6276
Toll-free in CA: (800) 952-5225.
If you wish to request access to the data we hold about you or exercise other rights we will ask you to provide information needed to verify your identity and your right to make that request. You can make a verifiable request via privacy@tuya.com the mail or our website twice in any 12-month period.