Misalignments between Privacy Claims and Privacy Policies in Smart Sex Toys

Paper Title

Misalignments between Privacy Claims and Privacy Policies in Smart Sex Toys

Publication Info

• Topic area: Privacy and transparency in IoT devices, specifically smart sex toys
• Keywords: Smart sex toys, privacy policies, IoT privacy, digital intimacy, data protection, FemTech, live streaming, user data, HCI, sensitive data

Background and Problem

• Problem / challenge: The privacy claims made in marketing materials for smart sex toys often do not align with the details provided in their privacy policies. Many policies lack transparency and fail to address critical aspects of data handling, leaving users uninformed about how sensitive data is managed.
• Significance: Smart sex toys collect highly sensitive and intimate data, such as sexual preferences and usage patterns, which, if mishandled, can lead to significant privacy violations and harm. Transparency is crucial for user trust and informed decision-making.
• Motivation and related work: Prior research has highlighted privacy risks in IoT and FemTech products, including vague privacy policies and data misuse. However, smart sex toys, despite their sensitive nature, remain underexplored in terms of privacy communication and policy alignment. This paper addresses this gap by empirically analyzing privacy claims and policies in this domain.

Solution

• Proposed approach: A content analysis of privacy claims in product descriptions and privacy policies for 146 smart sex toys across 14 brands, focusing on transparency, accessibility, and alignment.
• Novelty:
  1. Empirical documentation of misalignments between privacy claims and policies in smart sex toys.
  2. Analysis of the accessibility and completeness of privacy policies.
  3. Examination of privacy communication in the context of live streaming features.
  4. Recommendations for improving transparency and safeguarding sensitive data in digital intimacy.
• Procedure and key techniques:
  • Systematic data collection of product descriptions, privacy policies, and app permissions from manufacturer websites.
  • Coding and analysis of privacy claims and policy disclosures based on established privacy frameworks.
  • Evaluation of six key dimensions of privacy policy disclosure: data collection, usage, transfer, storage, sharing, and retention.
  • Assessment of live streaming features and their framing in marketing materials.

Results

• Concrete findings:
  • Only 28% of products mentioned privacy in their marketing, often vaguely or without technical detail.
  • 20% of products had no accessible privacy policy, and 65% of available policies were difficult to locate.
  • Critical details about data transfer and storage were omitted or vaguely addressed in most policies.
  • Live streaming features, offered by 30% of products, were promoted without acknowledgment of privacy risks.
• Advantage over baselines: This study provides a comprehensive empirical analysis of privacy communication in a highly sensitive IoT domain, highlighting specific gaps and inconsistencies that have not been systematically documented before.
• Experiments / evaluation:
  • Dataset: 146 products from 14 brands, categorized into eight types of smart sex toys.
  • Metrics: Presence and specificity of privacy claims, accessibility of privacy policies, completeness of policy disclosures across six dimensions.
  • Methods: Inductive and deductive coding, frequency analysis, and thematic analysis of privacy-related content.
• Limitations and future work:
  • The study does not analyze the actual data management practices of manufacturers.
  • Non-English markets and brands may be underrepresented.
  • Future research should explore motivations behind vague privacy policies and engage with high-stakes user groups, such as sex workers, to co-develop privacy safeguards.

Summary

This study reveals significant misalignments between privacy claims in marketing materials and the privacy policies of smart sex toys. Only a minority of products addressed privacy in their descriptions, and most policies lacked transparency, particularly regarding data transfer and storage. Live streaming features were promoted without addressing associated privacy risks. These findings underscore the need for greater transparency, regulatory oversight, and user-centered design in the smart sex toy industry. The study provides actionable recommendations for HCI researchers, designers, and regulators to improve privacy communication and safeguard sensitive data in digital intimacy contexts.