Effective date: January 14, 2026
Volcano Technology Limited and its Affiliates ("we", "us", "our", or "Volcano") are committed to protecting your privacy. This SmartLife Privacy Policy describes our practices regarding Personal Data processed through our services, including the SmartLife Mobile Application and connected Smart Devices.
- Customer Service: 1-844-672-5646 or [email protected]
- Privacy Office: [email protected]
- EU/UK Data Controller: Tuya GmbH, Peter-Müller-Straße 16/16a, 40468 Düsseldorf, Germany
Our Services are not intended for minors under 16 years of age. Volcano requests that minors do not provide personal data. We will delete any inadvertently collected data upon parental notification.
- Affiliate: Entities controlled by Volcano or jointly controlling it
- Personal Data: Information identifying individuals or reflecting individual activity
- Personal Sensitive Data: Biometric information, communication records, health data, transaction data, precise location information
- Smart Devices: Computing devices with wireless network connectivity
We collect information that you voluntarily provide to us, including:
- Account Registration: Name, email address, phone number, and credentials
- User Feedback: Reports and feedback you submit
- AI Services: Dialogue content, memos, notes, translations, calorie tracking, and health data
- Transaction Information: Payment details (US users)
- Third-Party Integration: Information from connected third-party accounts
We automatically collect certain information when you use our Services:
- Mobile Device Details: Device model, IP address, operating system version, app version, and push notification identifiers
- Service Logs: IP addresses, usage patterns, access dates and times
- Payment Information: Payment and refund records (US users)
When you connect Smart Devices, we may collect:
- Basic Device Data: Device name, ID, status, and firmware version
- Connection Data: Wi-Fi information, device MAC addresses, and IP addresses
- Device-Reported Data: Brightness, temperature, humidity, heart rate, and activity metrics
- Smart Camera Footage: Conditionally encrypted and stored locally
- Health Device Data: Weight, heart rate, blood pressure, and sleep records
We process your Personal Data for the following purposes:
- Service Provision: To create and manage your account, operate devices, and provide location-based services
- Service Improvement: To analyze usage, enhance security, and prevent fraud
- Communications: To send service notifications, account alerts, and updates about purchased services
- Maintenance & Analysis: To diagnose problems, improve user experience, and track ad attribution
- Marketing: To design personalized products, provide targeted recommendations, and conduct surveys
- Legal Compliance: To comply with legal requirements, enforce agreements, and manage risks
Volcano may share your Personal Data with:
- Service Providers: Third parties providing hosting, payment processing, and customer support
- Device Manufacturers: Smart device makers and network providers
- Platform Partners: Sellers and payment institutions (US users)
- Corporate Affiliates: Related entities for business operations
- Business Transfers: Third parties in reorganization or merger scenarios
- Health Platforms: Apple Health, Google Fit, and Fitbit (with your consent)
Important: Volcano does not sell or share your personal information as defined under the CCPA and CPRA for behavioral advertising purposes.
Your Personal Data may be transferred internationally. Transfers outside the EEA/UK/Switzerland comply with European Commission standard contractual clauses under GDPR Article 46.
You may exercise the following rights via app settings, by emailing [email protected], or through our official website:
- Access: Me > Settings > Privacy Settings > Personal Data Export
- Correction: Me > Settings > Account and Security
- Deletion: Me > Settings > Account and Security > Delete Account
- Processing Restrictions: Contact via Help Center
- Data Portability: Email request to our Data Protection Officer
- Consent Withdrawal: Through device settings, app preferences, or email request
- Objection Rights: Available for processing based on legitimate interests
Response Time: We will respond within 15 business days or 30 calendar days per jurisdiction requirements.
We implement comprehensive security measures to protect your data:
- Proprietary algorithms for data isolation and access authentication
- Security algorithm communications with dynamic key encryption
- Data filtering, validation, and complete audit trails
- Encrypted storage of user confidential information
- Institutional controls including staff training and access restrictions
- Enterprise Privacy Certification (EPC) obtained
We retain your data according to the following schedule:
| Data Type | Retention Period |
|---|
| User account information | Until unbinding or account deletion |
| Device operation logs | Up to 7 days |
| Feedback records | Until unbinding or account deletion |
| Device management data | Until unbinding or account deletion |
Automatic deletion occurs if accounts remain inactive for two consecutive years.
Our Services are not directed to individuals under 16 years of age. Volcano does not knowingly collect data from minors and requires parental permission before collecting information from children.
California residents may request disclosure of information collected under Civil Code Section 1798.83. Volcano does not disclose Personal Data to third parties for direct marketing purposes without your consent.
Our Hey Tuya AI Assistant provides dialogue services using generative AI with natural language understanding. The system includes content safety detection to prevent illegal or harmful outputs. AI services provide auxiliary information only and are not used for automated legally-binding decisions.
We may update this Privacy Policy from time to time. Material changes will be communicated via email or app notification prior to implementation.
- Consent Manager: Will Yu ([email protected])
- Grievance Officer: Will Yu (use subject line: "DPDP Grievance – [Issue]")
- Escalation available to Data Protection Board of India
- US Users: TrustArc dispute resolution at feedback-form.truste.com/watchdog/request
- EU Users: File a complaint with your Data Protection Authority per GDPR Article 77
Tuya GmbH is identified as the Data Holder. Our Services generate product status data, usage logs, and user operation data in JSON format, stored in MySQL, and exportable as XLS files. Data retention: 7 days for device logs, 1 year for service events. Users retain direct data access, deletion, and third-party sharing rights via authorization QR codes.