Who we are
This website and the Hugwoods device application are operated by Shenzhen Hugwoods Technology Co., Ltd. (深圳抱抱森林科技有限公司). You can contact us at jujiguang@gmail.com or Room 614, Building 4, COFCO Innovation Center, Xin’an Subdistrict, Bao’an District, Shenzhen, China. This notice describes our website and business backend. Please also read the information supplied with your device about its hardware and voice services.
Information we use
For email sign-in, we use your email address to deliver a one-time code and identify your account. Codes expire after ten minutes. We store code hashes, attempt counts and limited delivery information, rather than a reusable account password. If you choose Google sign-in, we receive your Google account identifier and verified email address. We do not request Gmail messages, contacts or Google Drive access, or store Google access or refresh tokens. Google sign-in is available only when enabled.
Devices and reminders
The device application stores device and application identifiers, firmware information, binding and activation status, your device time zone and reminders. Necessary command records help us diagnose failures and prevent duplicate actions. A successful Wi-Fi setup, device activation and successful voice interaction are separate states.
Wi-Fi and voice services
When supported by your device, Wi-Fi credentials are sent by the setup page to the device endpoint, not to our business API. Our web client does not put Wi-Fi passwords in URLs, browser storage or service-worker caches. Device-hosted setup pages and voice processing are supplied by the device platform. Voice interaction may involve that platform processing audio and conversation data; the information for your hardware and service must be read before enabling it.
Cookies and local storage
The device application uses an HttpOnly session cookie for sign-in, a temporary browser-bound cookie for Google sign-in, and session storage for setup recovery. It caches static application files to help during network changes; account API responses are not cached. This website does not currently install advertising trackers or analytics cookies. Your browser and our hosting service still exchange technical request information required to deliver the site.
Providers and international processing
Our hosting, email-delivery and device-platform providers process information needed to deliver their services. Google processes information when you choose Google sign-in. Processing locations depend on the configured service and may differ from your location. Contact us for information about the providers and arrangements applicable to your account before using the service.
Retention and your choices
Expired login and setup records are cleaned up periodically. Account, device and operational records are retained as needed to provide the service, address security issues and meet applicable obligations. You can edit or delete reminders and unlink devices. Signing out does not delete your account. Contact us to request access, correction or deletion of your information, or to ask about retention. We may need to verify that the account belongs to you.
Children and guardians
A brand’s focus on gifts and families does not make every product suitable for every age. Follow the age and safety information for the specific product. A parent or guardian should manage accounts and connected features for children. Contact us if you believe a child has provided account information without appropriate involvement.
Updates and contact
We may update this notice as products and services change. The version date appears at the top of this page. Questions about privacy can be sent to jujiguang@gmail.com.