Tuya Mobile Privacy Notice

Effective Date: 2018-12-14

Updated: 2018-11-14

Tuya Global Inc., its affiliates and subsidiaries (“we”, “us”, “our”, “Tuya”) are committed to protecting your privacy. This Privacy Statement (“Statement”) describes our practices in connection with information privacy on personal data we process through your individual use of the following services, products, and related mobile applications (collectively, the “Products”)

In this Privacy Notice, “Personal Data” means information that can be used to identify an individual, either from that information alone, or from that information and other information we have access to about that individual. “Smart Devices” refers to those nonstandard computing devices produced or manufactured by hardware manufacturers, with human-machine interface and the ability to transmit data that connect wirelessly to a network, including: smart home appliances, smart wearable devices, smart air cleaning devices, etc. “Apps” refers to those mobile applications developed by Tuya that provide end users remote control to Smart Devices and with the ability to connect to Tuya IoT Platform.

For other branded mobile applications powered by Tuya, our Clients control all the Personal Data collected through our Products. We collect the information under the direction of our Clients and the processing of such information shall be limited to the purpose of providing the service for which our Clients has engaged us. If you are a customer of one of our Clients and would no longer like to be contacted by one of our Clients that use our service, please contact the Client that you interact with directly.

What Personal Data do we collect

In order to provide our services to you, we will ask you to provide necessary personal data that is required to provide those services. If you do not provide your personal data, we may not be able to provide you with our products or services.

Purposes and legal basis for processing Personal Data

The purpose for which we may process information about you are as follows:

Who do we share your informationPersonal Data with?

At Tuya, we only share personal data in ways that we tell you about.

If Tuya shares your personal data with a third party under the circumstance described in this section, Tuya will ensure that the third party is subject to practices and obligations to comply with the relevant data protection and privacy laws of your country. Tuya will contractually ensure compliance by any foreign Third Party Service Providers with the privacy standards that apply in your home jurisdiction.

We may share your Personal Data with the following recipients:

Except for the third parties described above, to third parties only with your consent.

Your Rights Relating to Your Personal Data

We respect your rights and control over your personal data. You may exercise any of the following rights:

You do not have to pay a fee and we will aim to respond you within 30 days. If you decide to email us, in your request, please make clear what information you would like to have changed, whether you would like to have your personal information deleted from our database or otherwise let us know what limitations you would like to put on our use of your personal information. Please note that we may ask you to verify your identity before taking further action on your request, for security purposes.

You may:

Information Security Safeguards

We use commercially reasonable physical, administrative, and technical safeguards to preserve the integrity and security of your personal information. Tuya provides various security strategies to effectively ensure data security of user and device. As for device access, Tuya proprietary algorithms are employed to ensure data isolation, access authentication, applying for authorization. As for data communication, communication using security algorithms, and transmission encryption protocols and commercial level information encryption transmission based on dynamic keys are supported. As for data processing, strict data filtering and validation and complete data audit are applied. As for data storage, all confidential information of users will be safely encrypted for storage. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you might have with us has been compromised), you must immediately notify us of the problem by privacy@tuya.com.

Information Retention Period

We process your personal data for the minimum period necessary for the purposes set out in this Privacy Notice, unless there is a specific legal requirement for us to keep the data for a longer retention period. We determine the appropriate retention period based on the amount, nature, and sensitivity of your personal data, and after the retention period ends, we will destruct your personal data. When we are unable to do so for technical reasons, we will ensure that appropriate measures are put in place to prevent any further such use of your personal data.

Changes to this Policy Notice

We may update this Privacy Notice to reflect changes to our information practices. If we make any material changes, we will notify you by email (send to the e-mail address specified in your account) or by means of a notice in the mobile applications prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices.

Legal application and jurisdiction

This policy is formulated in accordance with the laws of the People's Republic of China and shall be governed by the laws of the People's Republic of China.

If you have any questions about our practices or this Privacy Notice, please contact us as follows:

Company Name: Tuya Global Inc.

Postal Mailing Address: 75 E Santa Clara St, 6th Floor, San Jose, CA 95113 177 E Colorado Blvd, 2nd Floor, Pasadena, CA 91105.

Email: Privacy@tuya.com.