Last updated:January 18, 2026
Effective date:January 18, 2026
Hangzhou Tuya Information Technology Co., Ltd. and its Affiliates (collectively, “we”, “us”, or “Tuya”) are committed to protecting your privacy.
ThisTuya.AI Privacy Policy(this “Policy”) applies to all services provided through the Tuya.AI website. When you use our services, we collect and process information relating to you. Please read this Policy carefully to understand our rules for collecting and processing your personal information (including how we collect, use, store, and share such information), and the ways we provide for you to access, update, delete, and protect that information.
When you agree to this Privacy Policy, or when you start or continue using our products or services in an appropriate manner without contacting us in an appropriate manner to express a contrary view, we will consider that you fully understand and agree to this Policy. If you have any questions, comments, suggestions, or complaints while reading this Policy—especially if you believe our personal information processing has harmed your lawful rights and interests—you may file a complaint or suggestion through appropriate regulatory channels, or contact us using the details below:
If you are a minor under the age of 18, you must obtain the consent of your parent or legal guardian before using our products or services, as required by applicable laws and regulations. If you are a child under the age of 14, please be sure to read Tuya’s Children’s Privacy Protection Statement and ensure that you and your guardian or parent clearly understand the relevant children’s privacy protection information.
This Policy mainly explains:
- What personal information we collect
- The purposes and legal bases for processing personal information
- With whom we share your personal information
- Transfers of collected information
- Rights relating to personal information
- Information security safeguards
- Information retention periods
- Protection of children’s personal information
- Statement on changes to this Policy
- Contact us
Definitions
In this Policy:
Affiliatemeans any company that is directly or indirectly controlled by Tuya; or that directly or indirectly controls Tuya; or that jointly with Tuya controls the same company; or that is directly or indirectly under common control with Tuya, including without limitation parent companies, subsidiaries, and subsidiaries under common control of the same parent company as Tuya.
Personal Informationmeans information recorded electronically or otherwise that can identify an individual on its own or when combined with other information, or that reflects the activities of a specific individual.
Personal Sensitive Informationincludes personal biometric information, communication records and contents, health information, transaction information, precise location information, and the like. When we provide specific products or services to you that involve the collection of personal sensitive information, we will obtain your consent through prominent and explicit notice before collecting such personal sensitive information about you.
Applicationmeans mobile applications developed by Tuya (including mobile clients, Tuya mini programs, and Tuya WeChat mini programs) that help end users log in to the Tuya.AI platform.
De-identificationmeans the process of processing personal information so that it cannot identify a specific natural person without the aid of additional information.
1. What Personal Information We Collect
We collect information that you actively provide when using the services, as well as information generated through automated means when you use features or receive services, in the following ways:
1.1 Information You Voluntarily Provide to Us
Login Information:When you log in, we collect your nickname, user account, home name, language preferences, and time zone information.
Smart Conversation:We provide conversational and interactive services based on generative artificial intelligence model technology. You may send us text and other content through the dialogue box, and we will automatically receive such information to provide you with conversational services. When you use the search service, we will automatically receive the information you actively enter and automatically provide you with real-time search results. Some search results may be related to your location (such as weather inquiries). To display such search results, we will collect your geographic location information (i.e., the home location information you set in the App).
If you wish to opt out of this information collection, you may contact us as described in Section 10 of this Policy. You may view and learn more about the basic principles, purposes, and main operating mechanisms of the model technology used by “Hey Tuya” through the algorithm and model filing disclosure.
We promise that the content you enter will not be used for model training.
You may also provide feedback on the content we output, such as liking, disliking, or copying. We will continuously improve our service quality based on your feedback on the product.
If the chat information or other content you enter contains the personal information of others, please ensure that you obtain their legal authorization before providing such information to avoid improper disclosure of their information.
1.2 Information We Collect Automatically
Service Log Information:When you use the services provided by Tuya.AI, in order to provide you with a better user experience and improve and optimize our services, system and error logs will be uploaded for analysis. This includes your IP address, preferred language, operating system version, access date or time, and usage information, so that we can accurately identify problems and help you resolve issues during your use of the service.
Please note that service log information alone cannot identify a specific individual. If we combine such non-personal information with other information to identify a specific individual, or combine it with personal information, then during the period of combined use, such non-personal information will be treated as personal information. Unless we obtain your authorization or otherwise required by laws and regulations, we will anonymize and de-identify such information.
2. Purposes and Legal Bases for Processing Personal Information
We process your information for the following purposes:
To provide you with services:We process your account information, usage information, and location information to provide the services you request. The legal basis for this processing is the performance of our contract with you under our Tuya.AI Service Agreement.
To improve our services:We process your usage information to ensure the functionality and security of our services, develop and improve our products and services, analyze our operational efficiency, and prevent and track fraudulent or improper use. The legal basis for this processing is the performance of our contract with you under our Tuya.AI Service Agreement.
Non-marketing communications:We process your personal information to send you important information related to services, changes to terms/conditions and policies, and/or other administrative information. We will also send you notifications for alert services. You can manage whether you wish to receive such communications by checking the [Message Push] settings in the Tuya/SmartLife App ([Me] > [Message Center] > [Settings] > [Device Alerts]). When you choose to turn off push notifications, we will no longer send you such information. The legal basis for this processing is the performance of our contract with you under our Tuya.AI Service Agreement.
Compliance:We process your personal information only when required by law to disclose information, or when we believe it is necessary or appropriate to:
(a) comply with applicable laws and regulations, legal processes, or requests from public and governmental authorities;(b) enforce our terms of use and other agreements, policies, or standards, including investigating any potential violations;(c) protect the rights, privacy, safety, or property of ourselves and/or other users, including you;(d) seek available remedies, prevent, mitigate, or limit damages we may need to provide, or resolve security, fraud, or technical issues.
We also use your personal information in other ways, for which we will provide specific notice at the time of collection and obtain your consent as required by applicable law. If there are any changes to the purposes for processing your personal information, we will notify you of such changes via email and/or a prominent notice on our website and inform you of your choices regarding your personal information.
3. With Whom Do We Share Your Personal Information?
Tuya only shares your personal information in ways that you are aware of. We share your personal information with the following parties:
- Third-party service providerswho perform certain business-related services for us, such as website hosting, data analysis, infrastructure provision, IT services, customer support services, email delivery services, and other similar services, so that they can provide services to us.
- Affiliates or other third partiesin the event of any reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including without limitation in connection with any bankruptcy or similar proceedings). In such an event, you will be notified via email and/or a prominent notice on our website of any change in ownership, any incompatible new use of personal information, and choices you may have regarding your personal information.
- Where necessary or appropriate, we will share your personal information in a reasonable and lawful manner to:(a) comply with applicable laws and regulations, legal processes, policies and/or standards, or requests from public and governmental authorities;(b) enforce our terms of use and other agreements, policies, and standards, including investigating any potential violations;(c) protect our operations, business, and systems;(d) protect the rights, privacy, safety, or property of ourselves and/or other users, including you;(e) perform risk management, detection, and identification of unlawful, fraudulent, deceptive, or malicious activities; and(f) disclose your personal information to subsidiaries or affiliates within our corporate family for regular business activities.
Except for the third parties described above, we do not rent, sell, or provide personal data to third parties, and we disclose your personal information to other third parties only with your consent.
Please note that we will not collect your personal information through third parties under any circumstances.
When you use services provided by third parties, we will share the corresponding information only after ensuring that the third party has obtained your authorization and consent, and in other circumstances that comply with laws and regulations. You can learn about what personal information third parties collect from you and how they process such information through the relevant information listed below:
Tencent Cloud Services
- Third party: Shenzhen Tencent Computer Systems Co., Ltd.
- Purpose of use: To provide Tuya with basic infrastructure, including network, server, and virtualization services
- Scenarios of use: Website hosting, data analysis, infrastructure provision, IT services, and other similar services
- Information collected: All information will be stored on Tencent Cloud
- Data processing and security agreement: Data Processing and Security Agreement
- Privacy policy: Privacy Policy
Tongyi Qianwen
- Third party: Shanghai Zhixin Puhui Technology Co., Ltd.
- Purpose of use: To provide AI services
- Scenarios of use: When using the “Hey Tuya” intelligent dialogue feature
- Information collected: Text content actively sent by users
- Privacy policy: Qwen Product Privacy Policy
Volcano Engine SDK
- Third party: Beijing Volcano Engine Technology Co., Ltd.
- Purpose of use: To provide AI services
- Scenarios of use: When using the “Hey Tuya” intelligent dialogue feature
- Information collected: Text content actively sent by users
- Privacy policy: Volcano Engine Privacy Policy
WeChat Login SDK
Cookies and Similar Tracking Technologies
When you visit our websites and services, we and our service providers acting on our behalf may send one or more small data files, called “cookies,” to your device to uniquely identify your browser and help us speed up your login and facilitate website navigation. Cookies help us measure data such as the total number of visitors to the website, the number of visitors to each webpage, how our users use and interact with the services, and the domain name of the visitor’s internet service provider. You can reset your web browser to refuse all cookies or to indicate when a cookie is being sent. If you do not want cookies installed on your device, most browsers allow you to refuse cookies through simple settings. Please note that if cookies are disabled on your device, some features of the website and services may not function properly.
We may also use web beacons to track service users’ usage patterns. Additionally, we may use HTML-formatted emails sent to users to track which emails recipients have opened. This information is used to ensure more accurate reporting and to provide you with better service.
We respect “Do Not Track” signals or similar technologies detected and recognized by our systems. When such “Do Not Track (DNT)” browser mechanisms are in place on your device, we will not track information, place cookies, or use advertising.
4. Transfers of Collected Information
Personal information collected and generated during the operation of this service within mainland China is stored and processed in data centers located within mainland China.
5. Rights Relating to Personal Information
We respect your rights and will also maintain control over your personal information.
You do not have to pay any fee to exercise your personal rights. In accordance with applicable local information protection laws, if your account service is in mainland China, we will complete verification and processing of your request within 15 business days.
If you decide to email us, please specify what information you would like to have changed, whether you would like to have your personal information deleted from our database, or what limitations you would like to put on our use of your personal information. Please note that we may ask you to verify your identity before taking further action on your request, for security purposes.
To safeguard your rights to access, copy, correct, and delete personal information, withdraw consent to personal information processing, and cancel your account, the Tuya/SmartLife App provides corresponding operation paths. You may follow the instructions below:
Access personal information.In the Tuya/SmartLife App, you may access your personal information through the following paths:
- Go to “Me > Settings > Profile” to view your basic personal information;
- Go to “Me > Settings > Account and Security” to view your account-related information;
- Go to “Me > Home Management” to view your home settings;
- Go to “Home > Device Management” to view your device information.
Obtain a copy of personal information.You may obtain a copy of your personal information through “Me > Settings > Privacy Policy Management > Personal Information Export” in the Tuya/SmartLife App.
Correct personal information.In the Tuya/SmartLife App, you may correct your personal information through the following paths:
- Go to “Me > Settings > Profile” to correct your avatar, nickname, and time zone;
- Go to “Me > Settings > Account and Security” to correct your account-related information;
- Go to “Me > Home Management” to correct your home settings;
- Go to “Home > Device Management” to correct your device information.
Delete personal information.In the Tuya/SmartLife App, you may delete your personal information through the following paths:
- Go to “Me > Home Management” to delete your home settings;
- Go to “Home > Device Management” to delete your device information;
- Go to “Me > Settings > Clear Cache” to clear cached information on your device;
- Go to “Me > Settings > Account and Security > Delete Account” to delete all of your information.
Withdraw authorization.In the Tuya/SmartLife App, you may withdraw authorization through the following paths:
- Go to “Me > Settings > Privacy Settings” to withdraw system permissions;
- Go to “Me > Message Center > Settings > Device Alerts” to turn off non-marketing communications;
- Go to “Me > Settings > Privacy Settings > Feature Experience Upgrade Program” to turn off the feature experience upgrade program.
After you withdraw the above authorizations, the App will block the collection and use of personal information for those functions. Your withdrawal will not affect personal information processing carried out before the withdrawal based on your prior consent.
Cancel account.You may cancel your App account through “Me > Settings > Account and Security > Delete Account” in the Tuya/SmartLife App. Please understand that account cancellation is irreversible. Seven (7) days after you apply to cancel your account, we will stop providing services to you and delete personal information associated with your account, except where laws and regulations require a longer retention period.
Right to object to automated decision-making.In the business functions of the Tuya/SmartLife App, decisions may be made through non-manual automated decision-making mechanisms, including information systems and algorithms. If such decisions significantly affect your lawful rights and interests, you may contact us using the contact details set out in Section 10 of this Policy.
Right to restrict processing.You may restrict or refuse the processing of your information through “Me > Settings > Account and Security > Delete Account” in the Tuya/SmartLife App, or contact us using the contact details set out in Section 10 of this Policy to exercise your rights.
If you have further questions, please contact customer service through [Me] > [Help Center] in the Tuya/SmartLife App, or send an email toprivacy@tuya.com. 6. Information Security Safeguards
We use commercially reasonable physical, administrative, and technical safeguards to preserve the integrity and security of your personal information. Tuya provides various security strategies to effectively ensure the information security of users and devices.
- Device access:We employ Tuya proprietary algorithms to ensure data isolation, access authentication, and authorization requests.
- Data communication:Communication using security algorithms and transmission encryption protocols and commercial-level information encryption transmission based on dynamic keys is supported.
- Data processing:Strict data filtering and validation and complete data audit processes are applied.
- Data storage:All confidential information of users will be securely encrypted for storage.
In addition to the above technical security safeguards, Tuya has also formulated a series of institutional and management-level security safeguards, including assigning positions and responsibilities, holding security and privacy protection training courses, strengthening employee data protection awareness, and controlling access rights, to prevent data loss, illegal use, unauthorized access or leakage, tampering, or damage.
If you believe for any reason that your interaction with us is no longer secure (for example, if you believe the security of your Tuya account has been compromised), please inform us immediately by sending an email toprivacy@tuya.com. If a security incident occurs that affects the security of your personal information, we will notify you as soon as possible through your reserved email address, phone number, message center push, and other means, and inform you of suggestions and other information to reduce or prevent related risks. When necessary, we will take corresponding remedial measures in a timely manner in accordance with our internal security incident emergency plan, and report to the relevant competent authorities in accordance with regulations.
We have obtained Enterprise Privacy Certification (EPC). For more information about EPC, please visit Tuya Inc’s policies for online privacy and online safety certified by TRUSTe.
7. Information Retention Periods
We will process your personal information for the minimum period necessary to achieve the purposes set out in this Policy or as required by laws and regulations, unless a specific legal requirement requires us to keep the data for a longer retention period. We determine the appropriate retention period based on the amount, nature, and sensitivity of your personal information. After the retention period ends, we will destroy your personal information.
- To fulfill the products and services you request under the Tuya.AI Service Agreement and this Policy;
- When you explicitly request deletion of your personal information, we will treat this as a task and will no longer retain your personal information.
When we confirm that personal information has fulfilled the purposes of collection and processing under (1), or when we confirm your deletion or account cancellation request under (2), or when we terminate operation of the relevant product or service, we will stop retaining your personal information and delete it. In general, once the prescribed retention period is reached, we will no longer retain your personal information. If we are unable to destroy information for technical reasons, resulting in retention beyond the storage period, we will take appropriate measures to prevent further use of your personal information, including de-identification.
8. Protection of Children’s Personal Information
Tuya attaches great importance to the protection of children’s personal information. If you are under the age of 14 (or the age specified in your country/region), you must carefully read Tuya’s Children’s Privacy Protection Statement and obtain the written consent of your parent or legal guardian before using our services. Tuya protects children’s personal information in accordance with applicable laws and regulations in relevant regions, countries, or areas. Please note that if we discover that we have collected a child’s personal information without verifiable prior consent from a parent or legal guardian, we will endeavor to delete the relevant personal information as soon as possible.
9. Statement on Changes to This Policy
We may update this Policy at least once a year to reflect changes in our information practices. If we make any material changes, we will notify you by email (sent to the email address specified in your account) or publish a notice before the changes take effect. We encourage you to review this Privacy Policy periodically for the latest information on our privacy practices.
10. Contact Us
If you have any comments or questions about this Privacy Policy, or any questions about our collection, use, or disclosure of your personal information, please contact us through [Me] > [Help Center] in the Tuya/SmartLife App, or using the contact details below, and indicate “Privacy Policy.” For requests and inquiries relating to your personal information rights, we have a professional privacy and security team to address your concerns. If your issue involves a significant matter, we may ask you to provide more information to confirm the nature and scope of the matter. If you are not satisfied with the response you receive, you may refer your complaint to the relevant regulatory authority. When you contact us, we will provide information on relevant complaint channels that may be available based on your circumstances, and will complete verification and processing of your request within 15 business days.
Contact details and address:
Hangzhou Tuya Information Technology Co., Ltd.
Mailing address: Floors 3 and 7–12, Building A, Huace Center, Wuchanggang Road, Xihu District, Hangzhou, Zhejiang Province, China