Tuya- Smart Life, Smart Living

"We will automatically collect mobile device information, including mobile device model, login IP address, wireless connection information, operating system type and version, application version number, push notification identifier, log files and mobile network information. We collect information about the mobile applications and other software you use, as well as the application's application installation list (for the purpose of application performance monitoring)."

Tuya collects installed app lists, wireless connection info, and extensive device metadata beyond what's needed for smart home functionality. App installation lists are particularly invasive for a smart home app.

"We may collect information about your: a) real-time and precise location, for instance when you choose to use the automation scenarios for controlling your Smart Devices, or b) non-precise geo-location when you use certain Smart Devices or the Services. When you enable the geo-fence feature, your location information will be generated and shared with Google Maps services. This geolocation may include: rough geolocation information obtained from sensors such as GPS sensors, WLAN access points, Bluetooth, and base stations."

Tuya collects real-time precise location using GPS, WiFi, Bluetooth, and base stations, and shares location data with Google Maps. The geo-fence feature enables continuous background location monitoring.

"To ensure the proper functioning of the App or to implement specific independent features, we may embed third-party SDKs within the App. Please note: The types of personal data processed by these third-party SDKs may change at any time due to upgrades, updates, or policy changes. You should refer to the latest relevant information provided on the official websites of such third parties."

Tuya embeds third-party SDKs that collect data directly from users' devices, and acknowledges the data these SDKs collect can change at any time without updating this policy. Data is also shared with smart device providers, affiliates, and various service providers.

"If you voluntarily delete your account or do not log in for two consecutive years, the system will automatically delete all of your data. Whether retention is advisable in light of our legal position (such as in regard to the enforcement of our agreements, the resolution of disputes, and applicable statutes of limitations, litigation, or regulatory investigation)."

While some retention periods are defined (7 days for device logs, 1 year for service logs), the policy reserves broad discretion to retain data for legal positioning, dispute resolution, and regulatory purposes with no clear maximum timeline.

"We may update this Policy to reflect changes to our information practices, at least on an annual basis. If we make any material changes we will notify you by email (send to the e-mail address specified in your account) or by means of a notice in the mobile applications prior to the change becoming effective."

Tuya can change the privacy policy at will, with notification only via email or in-app notice. There is no requirement for user consent to new terms — continued use after notification implies acceptance.

"To accurately identify the source of a service failure, we will collect your ID-related information (including account ID, device ID, order ID, home ID, and scene ID). Service Maintenance & Improvement Activity: In order to analyze the usage of the products we provide and improve your user experience, we may analyze the data you provide us... c) Ad Attribution."

Tuya collects multiple persistent identifiers (account ID, device ID, home ID, scene ID) and performs ad attribution tracking, enabling cross-service and cross-device profiling of users.

"Request deletion of Personal Data about you: 'Me-Setting-Account and Security-Delete Account', when you confirm the deletion of your account, your Personal Data will be deleted accordingly. When we are unable to do so for technical reasons, we will ensure that appropriate measures are put in place to prevent any further such use of your Personal Data."

While self-service deletion exists, Tuya acknowledges situations where they cannot delete data for 'technical reasons,' and the broad legal retention carve-outs could allow data to survive account deletion.