What information is collected and how do we use it?
Types of Personal Data Collected
- In order to provide our services to you, we will ask you to provide necessary personal data that is required to provide those services. If you do not provide your personal data, we may not be able to provide you with our products or services.
- Set up and log in of Tuya Account.Personal data that are collected for creating a Tuya Account may include your email address or mobile phone number, device related information (e.g. IMEI number) and various location related information (e.g. location area code, mobile network and country codes).
- Purchasing your Tuya products.When you make purchases through the Tuya e-commerce website, we may collect your Tuya Account ID (or mobile phone number or email addressed used to create your Tuya Account), name, phone number, delivery address and order details, etc. Tuya provides logistics services to deliver the products purchased on the e-commerce website. Tuya has an after sales system to handle after sales related matters as well as an after sales centre for walk-in support services for users. When you use these services, we may also collect the order number, invoice date, list of purchased items and your contact details in order to process the services.
- Activating TuyaSmart device.When you activate the TuyaSmart device, we may collect your age, height, weight and gender. We may also collect other details you provide as part of your profile such as your birthday, picture and signature.
- Sync TuyaSmart device data.When you synchronise the TuyaSmart device data, e.g. to TuyaSmart device Cloud Service, we may collect data relating to your activities and functionalities of TuyaSmart device, such as those obtained from our sensors and features on TuyaSmart device, your sleeping patterns, movement data and smart alarm related information.
- Sharing your content.When you share content or send information to family and friends, we may collect personal information of those people, such as their names, email addresses, telephone numbers, and mailing addresses (if we need to send a product to them). You hereby represent and warrant that you have obtained necessary consent for use of third parties’ personal data if you choose to provide them to us. When you share content or invite users to use TuyaSmart device, please note that other users may see personal data you share.
- Processing the services.In providing the above services, we may also collect data in relation to your device, including your TuyaSmart device ID, firmware version, device OS version, model and system, and visiting IP and time.
How the Personal Data is used
- To provide you with our products and services, processing your orders, performing contractual obligations between you and us, to ensure the functions and safety of our products, to verify your identity, to prevent and trace fraudulent or inappropriate usage
- To develop our products and services, together with general and statistical information
- To communicate with you, including providing you with notifications on products and services that are updated or launched
- To provide marketing and promotional materials to you on our products and services (please note that you may unsubscribe anytime)
- To personalise product design and to provide you with services tailored for you, for example, recommending and displaying information and advertisements regarding products suited to you, and to invite you to participate in surveys relating to your use of TuyaSmart device
- To conduct investigations regarding our products and services
- If you participate in our lottery, contest or other promotions, we may use your personal data to manage such activities
- To provide maintenance services, monitor software licenses, to improve our products or analyse the efficiency of our operations
We use statistical data that does not specifically identify you (non-personal data) to help in our operations and improve our products and services and provide a better user experience for you. Here are some of the non-personal data we may collect and how we use them:
- When you create a Tuya Account, download our software, register in our e-commerce website, participate in online surveys or interact with us in other ways, we may collect your language preferences, postal code, area code number and time zone in which you use our products and services, and your profession.
- When you opt-in to participate in our User Experience Improvement Program, we may gather statistics relating to your use of our products functions, on an anonymous basis. This may include information relating to your use of our official website, products and services. If there is an abnormal shutdown or breakdown, we may collect information relating to your mobile device to diagnose the problem.
- When you use our services or functions that are based on location information, e.g. carry out a location search, take advantage of advertising, use weather functions, access information based on maps, etc., we may collect your geographical information.
- When you use the Internet browser in using our products and services, we may collect log information, e.g. IP address, browser type, language, reference source, operating system, date and time marking and click rate data.
- When you first use and activate your TuyaSmart device, the device’s unique identification code and approximate geographical information may be collected.
You have control over your information!
We recognise that privacy concerns differ from person to person. Therefore, we provide examples of ways we make available for you to choose to restrict the collection, use, disclosure or processing of your personal data and control your privacy settings, such as controlling the settings under the User Experience Improvement Program, Location Access functions, and your Tuya Account.
Access, Updating or Correcting Your Personal Data
- You have the right to request access and/or correction or any other personal data that we hold about you. When you update your personal data, you will be asked to verify your identity before we proceed with your request. Once we obtain sufficient information to accommodate your request for access or correction of your personal data, we shall process in accordance with the laws of your country. While we try our utmost in acceding to your requests, unreasonably repetitive or unrealistic requests or those that put others’ privacy at risk may be declined.
- We normally provide such services for free but reserve the right to charge a reasonable fee.
- If you believe any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible at the email address below. Email: firstname.lastname@example.org.
- For details relating to the personal data in your Tuya Account, you may also access and change them at Email: email@example.com.
Withdrawal of Consent
- You may withdraw your consent for the collection, use and/or disclosure of your personal data in our possession or control by submitting a request. This may be done by accessing your Tuya Account management center at Email: firstname.lastname@example.org . We will process your request within a reasonable time from when the request was made, and thereafter not collect, use and/or disclose your personal data as per your request.
- Please recognise that your withdrawal of consent could result in certain legal consequences. Depending on the extent of your withdrawal of consent for us to process your personal data, it may mean that you will not be able to enjoy Tuya’s products and services.
Who do we share your information with?
Disclosure may include the scenarios listed in this section below. In each case described in this section, you can be assured that Tuya will only share your personal data in accordance with your consent. You should know that when Tuya shares your personal data with a third party under any circumstance described in this section, Tuya will ensure that the third party is subject to practices and obligations to comply with the relevant data protection and privacy laws of your country. Tuya will contractually ensure compliance by any foreign Third Party Service Providers with the privacy standards that apply in your home jurisdiction.
Disclosure to Tuya group companies and Third Party Service Providers
- In order to conduct business operations smoothly, the Tuya entity which collects your personal data may disclose your personal data from time to time to other Tuya group companies (in communications, social media, technology or cloud business), or our third party service providers which are our mailing houses, delivery service providers, telecommunications companies, data centres, data storage facilities, and customer service providers, agents, related corporations, and/or other third parties (together “Third Party Service Providers”). Such Third Party Service Providers would be processing your personal data on Tuya’s behalf or for one or more of the purposes listed above.
- Personal data will only be shared by Tuya to provide or improve our products or services and will not be shared for use for marketing purposes.
Disclosure to Others
Tuya may disclose your personal data without further consent if required or permitted by law in the following cases:
- cases in which the disclosure is required or authorized based on the applicable laws and/or regulations;
- cases in which the disclosure is necessary to respond to an emergency that threatens the life, health or safety of the individual or another individual;
- cases in which the disclosure is necessary for the prevention of crime or legal proceedings;
- cases in which the purpose of such disclosure is clearly in the individual’s interests, and if consent cannot be obtained in a timely way;
- cases in which the disclosure is necessary for any investigation or proceedings;
- cases in which the disclosure is to any officer of a prescribed law enforcement agency upon production of written authorisation signed by the head or director of that law enforcement agency, or a person of a similar rank, certifying that the personal data is necessary for the purposes of the functions or duties of the officer; and/or
- cases in which the disclosure is to a public agency and such disclosure is necessary in the public interest.
Information Not Requiring Consent
- We may share anonymised information and statistics in aggregate form with third parties for business purposes, for example with advertisers on our website, or we may tell our business partners the number of customers in certain demographic groups who purchased certain products or who carried out certain transactions.
- For the avoidance of doubt, in the event that we are permitted by law to collect, use or disclose your personal data without your consent, such permission granted by the law shall continue to apply.
Information Safety Safeguards
We are committed to ensuring that your personal data is secure. In order to prevent unauthorised access, disclosure or other similar risks, we have put in place reasonable physical, electronic and managerial procedures to safeguard and secure the information we collect. We have put in place the following security procedures and technical and organisational measures to safeguard your personal data:
- Your personal data is stored on secure servers that are protected in controlled facilities.
- All data saved in the back-end is classified into different levels based on the importance and sensitivity of the data, e.g. whether the data contains personal data.
- In the data centers, clusters that contain sensitive data are grouped together in the network topology, and will be placed in rooms with additional physical security protection.
- Data exchanged between Tuya devices and servers are encrypted using Secure Sockets Layer (“SSL”).
- There is an optional two-step verification process when users access their Tuya Account.
- There is regular review of information collection, storage and processing practices, including physical security measures, to guard against unauthorized access to systems.
- Access is restricted to Tuya employees and Third Party Service Providers who need to know that the information in order to process it, and who are subject to strict contractual confidentiality obligations and may be disciplined or terminated if they fail to meet such obligations.
- There are also access controls for all server clusters used for cloud-based data storage and process.
- Most data used for Tuya’s products and/or services is stored in a storage system. By using column family based access control mechanism, Tuya employees are only allowed access to the data column families they are granted access to.
Information safety is very important to us. We will take all practicable steps to safeguard your personal data. Through our protective measures above, especially encrypted storage and transmission, your data is as secure as it can be. Certain details of encrypted data cannot be accessed by anyone except by you.
We consider it the responsibility of parents to monitor their children’s use of our products and services. Nevertheless, it is our policy not to require personal data from minors or offer to send any promotional materials to persons in that category. Tuya does not seek or intend to seek to receive any personal data from minors. Should a parent or guardian have reasons to believe that a minor has provided Tuya with personal data without their prior consent, please contact us to ensure that the personal data is removed and unsubscribe them from any of the applicable Tuya services.