TikTok Consumer Health Data Policy

Legal Rights & Agreement Rules · Context

Supplements the TikTok Privacy Policy, not a replacement

This policy is an add-on to the TikTok Privacy Policy. It applies to the same "Services" that the Privacy Policy defines, and any capitalized term it does not define itself takes the Privacy Policy's meaning. It is dated January 22, 2026 as both its last-updated and effective date.

Supporting quotations

Last Updated / Effective Date: January 22, 2026

This TikTok Consumer Health Data Privacy Policy supplements the TikTok Privacy Policy and applies to the Services, as defined therein.

Capitalized terms that are not defined in this Consumer Health Data Privacy Policy have the meaning given to them in the

Not stated here

• The TikTok Privacy Policy, which defines "Services" and the other capitalized terms, is linked but not part of this document, so what the Services cover is not stated here.

Legal Rights & Agreement Rules · Context

TikTok USDS Joint Venture LLC operates the Services and is "we"

The policy names TikTok USDS Joint Venture LLC as the operator of the Services and uses "we" or "us" for that entity. Every statement about what "we" collect, use or share in this policy is a statement about that company.

Supporting quotations

The Services are operated by TikTok USDS Joint Venture LLC (“we” or “us”).

Not stated here

• This sentence does not say whether other TikTok companies operate any part of the Services; affiliate sharing is addressed separately.

Legal Rights & Agreement Rules · Context

Applies to information that may count as consumer health data under state law

TikTok says it is committed to protecting the privacy of consumer health data. This policy explains how it collects, uses and shares information that may be considered "consumer health data" under Washington's My Health My Data Act and other similar US state laws. The wording is conditional: it does not say that TikTok treats any particular information as consumer health data.

Supporting quotations

We are committed to protecting the privacy of consumer health data.

In the event there are circumstances where some of the information we process may be considered “consumer health data” under Washington’s My Health My Data Act and other similar US state laws, this Consumer Health Data Privacy Policy explains how we collect, use, and share such information.

Qualifications & exceptions

• Applies only to information that may be considered "consumer health data" under Washington's My Health My Data Act and other similar US state laws.

Not stated here

• The policy does not name the other "similar US state laws".
• It does not say which of the information TikTok processes it considers consumer health data.
• The commitment to protect privacy is stated generally; this section describes no specific protective measure.

Data Access & Collection · Company practice

May collect information from you, automatically and from other sources

TikTok says it may collect information from and about you in three ways: information you provide, information collected automatically, and information from other sources. This opening sentence is about information generally; the health-related examples follow in the list below it.

Supporting quotations

We may collect information from and about you, including information that you provide, automatically collected information, and information from other sources.

Not stated here

• The policy does not say here what the automatically collected information or the "other sources" are.

Sharing & Disclosure · Context

Information shared in public activities can be read and used by others, and laws may not protect it

If you take part in public activities on the Services, TikTok says the information you share may be read, collected or used by other users and the public. It warns that laws may not protect consumer health data you choose to make public and tells you to use caution in disclosing personal information.

Supporting quotations

If you choose to engage in public activities on the Services, you should be aware that any information you share may be read, collected, or used by other users and the public.

Laws may not protect consumer health data you choose to make public, and you should use caution in disclosing personal information while using the Services.

Qualifications & exceptions

• Applies to information you share through public activities you choose to engage in.

Not stated here

• The policy does not list which activities on the Services are public.

Data Access & Collection · Context

The listed health-related data is illustrative and depends on settings and use

The policy notes that the scope of consumer health data differs between laws and may be broader in some jurisdictions. It then lists information TikTok may collect "for your information and awareness", depending on your settings and how you use the Services. The wording is "may collect" and the list ends with a catch-all item, so the list is not framed as the complete set of data TikTok could treat as health-related.

Supporting quotations

The scope of consumer health data is defined differently under different laws, and the scope may be broader in some jurisdictions than others.

For your information and awareness, we may collect the following information depending on your settings and how you use the Services:

Qualifications & exceptions

• Collection depends on your settings and how you use the Services.

Not stated here

• The policy does not say which settings affect what is collected.

Data Access & Collection · Company practice

May collect health-condition information you or others put in content, messages or searches

TikTok may collect information about physical and mental health conditions that you or others choose to provide in content you create or upload. The examples include composing, sending or receiving messages through the Services' messaging functionalities, creating or posting non-public user content about a recent illness, and searching the Services for information about an illness or condition.

Supporting quotations

Information about your physical and mental health conditions that you or others choose to provide in the content that you create or upload through the Services.

you or others may provide such information if you compose, send, or receive messages through the Services’ messaging functionalities, create or post non-public user content discussing a recent illness, or search for information about an illness or condition through the Services’ search function.

Qualifications & exceptions

• The information is described as something "you or others choose to provide", including in messages and non-public content.

Not stated here

• The policy does not say how TikTok uses message, non-public content or search information beyond the uses stated later in this policy.
• "Others" may provide information about you; the policy does not say what applies when someone else provides it.

Data Access & Collection · Company practice

May collect health-related information you disclose in surveys, contests and campaigns

TikTok may also collect health information you choose to provide when you take part in surveys, research, promotions, contests, marketing campaigns, challenges, competitions or events that TikTok conducts or sponsors and in which you disclose health-related conditions or preferences.

Supporting quotations

You may also choose to provide such information if, for example, you participate in surveys, research, promotion, contests, marketing campaigns, challenges, competitions or events conducted or sponsored by us, in which you disclose information related to any health-related conditions or preferences.

Qualifications & exceptions

• Applies to activities "conducted or sponsored by us" in which you choose to disclose health-related information.

Not stated here

• The "for example" wording means these activities are examples, not a complete list.

Inference & Profiling · Company practice

Analyzes videos, images and audio for objects, faces, body parts and spoken words

TikTok may collect information about the videos, images and audio in your user content, such as identifying objects and scenery, whether and where a face or other body parts appear, and the text of the words spoken.

Supporting quotations

Information about the videos, images and audio recordings that are a part of your user content, such as by identifying objects and scenery; the existence and location of a face and other body parts; and the text of the words spoken in your user content.

Qualifications & exceptions

• Applies to what is in your user content.

Not stated here

• The "such as" wording means these are examples; the policy does not list every kind of information drawn from content.
• The policy does not say whether this applies to private or non-public content.

Data Access & Collection · Company practice

May collect faceprints and voiceprints from user content

TikTok says it may collect biometric identifiers and biometric information, as defined under US laws, from your user content. It names faceprints and voiceprints as examples. The policy points to a TikTok support page for more on how face and voice information is processed.

Supporting quotations

We may collect biometric identifiers and biometric information as defined under US laws, such as faceprints and voiceprints from your user content.

Click here to learn more.

Qualifications & exceptions

• "Biometric identifiers and biometric information" are as defined under US laws.

Not stated here

• The support page linked for face and voice information is not part of this document.
• This section does not state how long such data is kept.

Cross-references

• qualified by (model-proposed): Seeks required permissions before collecting biometrics, where the law requires — The biometric collection statement is followed by a commitment to seek required permissions first, but only where the law requires them, so the commitment qualifies the collection statement without making permission universal.

Data Access & Collection · Company commitment

Seeks required permissions before collecting biometrics, where the law requires

TikTok commits to seek any permissions the law requires from you before collecting biometric identifiers and information. The commitment is conditional on a legal requirement: the policy does not promise to ask in every case.

Supporting quotations

Where required by law, we will seek any required permissions from you prior to any such collection.

Qualifications & exceptions

• Only "where required by law"; limited to permissions that are "required".

Not stated here

• The policy does not say which laws require permission, what form the permission takes, or where it is asked.
• The block links a TikTok support page on face and voice information; that page's text is not supplied here, so this card cannot say what it states.

Cross-references

• qualifies (model-proposed): May collect faceprints and voiceprints from user content — The biometric collection statement is followed by a commitment to seek required permissions first, but only where the law requires them, so the commitment qualifies the collection statement without making permission universal.

Data Access & Collection · Company practice

May collect location information that could identify an attempt to seek healthcare

TikTok may collect approximate or precise location information that could identify your attempt to seek healthcare services or supplies. The example given is adding points of interest, such as healthcare centers, to your user content, which the policy describes as something you may choose to do.

Supporting quotations

Location information, including approximate or precise location information, that could identify your attempt to seek healthcare services or supplies.

For instance, you may choose to add certain points of interest like healthcare centers to your user content.

Qualifications & exceptions

• Limited to location information "that could identify your attempt to seek healthcare services or supplies".

Not stated here

• The policy gives one example (points of interest in user content); it does not say whether other location sources, such as device location, are included.

Inference & Profiling · Company practice

May collect other information that can be used to infer health data

TikTok may also collect other information that may be used to infer or derive consumer health data. The item is open-ended: it does not say what the information is or how an inference would be made.

Supporting quotations

Other information that may be used to infer or derive consumer health data.

Not stated here

• The policy does not say what this other information is or whether TikTok itself makes the inferences.

Data Access & Collection · Context

Points to the Privacy Policy for more on what is collected and how

For more detail on the types of data collected and how, the policy refers readers to the "Information We Collect" section of the TikTok Privacy Policy. That section is not part of this document.

Supporting quotations

For additional details about the types of data we collect and how we collect it, please review “Information We Collect” in the

Not stated here

• The content of "Information We Collect" was not supplied, so this analysis does not state what it says.

Use & Processing · Company practice

May use consumer health data to operate, improve, support and administer the Services

TikTok may use consumer health data to operate the Services, including to improve, support and administer them and to fulfill and enforce its Terms of Service.

Supporting quotations

We may use consumer health data to operate the Services, including to improve, support and administer the Services, and fulfill and enforce our Terms of Service.

Qualifications & exceptions

• Stated purposes are "to operate the Services, including" the listed ones.

Not stated here

• The policy does not say here whether uses such as advertising or recommendations fall within "operate the Services".

Use & Processing · Permission or license

May also use it with your consent or as applicable law allows

Beyond the operating purposes, TikTok may use your consumer health data otherwise with your consent or in accordance with applicable law. This allows uses not itemized in the previous sentence whenever either of those two conditions is met.

Supporting quotations

We may also use your consumer health data otherwise with your consent or in accordance with applicable law.

Qualifications & exceptions

• Applies when there is your consent or the use is in accordance with applicable law.

Not stated here

• The policy does not describe how consent is asked for or what uses "applicable law" would permit.

Use & Processing · Context

Points to the Privacy Policy for more on how information is used

For more detail on how information is used, the policy refers readers to the "How We Use Your Information" section of the TikTok Privacy Policy. That section is not part of this document.

Supporting quotations

For additional details about how we use information, please review “How We Use Your Information” in the

Not stated here

• The content of "How We Use Your Information" was not supplied, so this analysis does not state what it says.

Sharing & Disclosure · Permission or license

May share personal information, including consumer health data, as reasonably necessary to provide the Services

TikTok says that, subject to applicable laws, it may share personal information, which may include each of the categories of consumer health data described earlier in the policy, as reasonably necessary to provide you the Services, in the ways listed. The wording of the lead-in is tied to providing the Services, but several listed items (a sale, merger or other business transfer; legal reasons; as otherwise permitted by law) are not phrased in terms of providing the Services. The policy does not reconcile the two, so how far the lead-in limits those items is not stated.

Supporting quotations

Subject to applicable laws, we may share personal information, which may include each of the categories of consumer health data as described above, as reasonably necessary to provide you the Services in the following manner:

Information about your physical and mental health conditions that you or others choose to provide in the content that you create or upload through the Services.

We may collect biometric identifiers and biometric information as defined under US laws, such as faceprints and voiceprints from your user content.

Qualifications & exceptions

• Subject to applicable laws.
• Lead-in limit: "as reasonably necessary to provide you the Services".

Not stated here

• "Reasonably necessary" is not defined.
• The six listed ways do not name advertising or analytics partners or say whether any sharing is a sale; the Privacy Policy section the list points to is not supplied here.
• Whether the lead-in's "reasonably necessary to provide you the Services" limit applies to the business-transfer, legal-reasons and as-otherwise-permitted-by-law items is not stated.

Cross-references

• contrast (model-proposed): Shares as otherwise permitted by law — The lead-in limits sharing to what is reasonably necessary to provide the Services, while the last listed item allows sharing as otherwise permitted by law without that purpose. The policy does not say which governs; both are quoted and the tension is left open.

Sharing & Disclosure · Company practice

Shares with service providers and business partners for business operations

TikTok may share this information with service providers and business partners to help it perform business operations and for business purposes. As an example, they may receive certain information to help TikTok provide services, like content moderation.

Supporting quotations

With service providers and business partners to help us perform business operations and for business purposes.

For instance, service providers and business partners may receive certain information to help us provide services, like content moderation.

Qualifications & exceptions

• Within the lead-in's limit: subject to applicable laws and as reasonably necessary to provide the Services.

Not stated here

• "Business partners" and "business purposes" are not defined here; the example (content moderation) is not stated to be the only use.

Sharing & Disclosure · Company practice

Shares with TikTok's affiliates as necessary for this policy's purposes

TikTok may share with affiliates it controls or that are under common control with it, as necessary for the purposes set out in this Consumer Health Data Privacy Policy.

Supporting quotations

With our affiliates controlled by, or under common control with, us as necessary for the purposes set forth within this Consumer Health Data Privacy Policy.

Qualifications & exceptions

• Limited to affiliates controlled by, or under common control with, "us", and to what is "necessary for the purposes set forth" in this policy.

Not stated here

• The policy does not name the affiliates or say where they are located.

Sharing & Disclosure · Company practice

Shares in connection with a sale, merger or other business transfer

TikTok may share information in connection with a sale, merger or other business transfer. The item says nothing further about what is shared, who receives it or what limits apply to the recipient.

Supporting quotations

In connection with a sale, merger, or other business transfer.

Not stated here

• The policy does not say who receives the information, whether it must be used consistently with this policy, or whether users are told.

Sharing & Disclosure · Company practice

Shares for legal reasons

TikTok may share information "for legal reasons". The item is a single phrase: it does not say which legal reasons, which authorities or parties, or what TikTok requires before sharing.

Supporting quotations

For legal reasons.

Not stated here

• The policy does not define "legal reasons" or say whether a legal process is required.

Sharing & Disclosure · Company practice

Shares with your consent or at your direction, such as when you allow a third-party service to access your account

TikTok may share information with your consent or at your direction. The example given is that if you choose to allow a third-party service to access your account, TikTok may share certain information about you with that third party depending on your permissions.

Supporting quotations

With your consent or at your direction.

For example, if you choose to allow a third-party service to access your account, we may share certain information about you with the third party depending on your permissions.

Qualifications & exceptions

• The third-party example applies when you choose to allow the service access and depends on the permissions you give.

Not stated here

• The policy does not say how consent is requested or whether it can be withdrawn; the account-access example is not stated to be the only form.

Sharing & Disclosure · Company practice

Shares purchase information with the seller and its payment and fulfillment providers

When you make a purchase from a third party on the Services, including from a merchant selling through TikTok's shopping features, TikTok may share the information related to the transaction with that third party and its payment processors and transaction fulfillment providers. This is introduced as an addition to the consent item ("In addition").

Supporting quotations

In addition, when you make a purchase from a third party on the Services, including from a merchant selling products through our shopping features, we may share the information related to the transaction with that third party and their payment processors and transaction fulfillment providers.

Qualifications & exceptions

• Applies to purchases from a third party on the Services, including from merchants selling through shopping features.

Not stated here

• The policy does not say which transaction details are shared or whether those details can include health-related information.

Sharing & Disclosure · Permission or license

Shares as otherwise permitted by law

The last item lets TikTok share "as otherwise permitted by law". It is a catch-all that is not tied to any purpose named in the policy, so any sharing the law allows falls within the list's wording, subject to the lead-in's "subject to applicable laws" and "reasonably necessary to provide you the Services" wording.

Supporting quotations

As otherwise permitted by law.

Qualifications & exceptions

• Tied only to what law permits.

Not stated here

• The policy does not say what recipients or purposes this covers, or how it interacts with the lead-in's "reasonably necessary to provide you the Services" limit.

Cross-references

• contrast (model-proposed): May share personal information, including consumer health data, as reasonably necessary to provide the Services — The lead-in limits sharing to what is reasonably necessary to provide the Services, while the last listed item allows sharing as otherwise permitted by law without that purpose. The policy does not say which governs; both are quoted and the tension is left open.

Sharing & Disclosure · Context

Points to the Privacy Policy for more on sharing

For more detail on sharing, the policy refers readers to the "How We Share Your Information" section of the TikTok Privacy Policy. That section is not part of this document.

Supporting quotations

For additional details about how we share information, please review “How We Share Your Information” in the

Not stated here

• The content of "How We Share Your Information" was not supplied, so this analysis does not state what it says.

Account & Service Control · User right or choice

You may request to know, access, correct or delete the information collected about you

You may submit a request to know, access, correct or delete the information TikTok has collected about you, using the TikTok privacy request page at https://www.tiktok.com/legal/report/privacy.

Supporting quotations

You may submit a request to know, access, correct, or delete the information we have collected about you at https://www.tiktok.com/legal/report/privacy.

Qualifications & exceptions

• Requests are submitted through the stated web page.

Not stated here

• The policy does not state here a response deadline, identity verification, exceptions or limits on each request type.
• The page the link opens is not part of this document.

Account & Service Control · User right or choice

You may appeal a decision on your request through the same method

You may also submit a request to appeal any decision TikTok has made about your request, through the same method used to make the request.

Supporting quotations

You may also submit a request to appeal any decision we have made about your request through this same method.

Qualifications & exceptions

• Appeals go through the same method as the original request.

Not stated here

• The policy does not say how the appeal is handled, how long it takes or what happens after it.

Account & Service Control · Context

Points to the Privacy Policy for more on how to exercise rights

For more detail on how to exercise your rights, the policy refers readers to the "Your Rights and Choices" section of the TikTok Privacy Policy. That section is not part of this document.

Supporting quotations

For additional details on how to exercise your rights, please review “Your Rights and Choices” in the

Not stated here

• The content of "Your Rights and Choices" was not supplied, so this analysis does not state what it says.

Legal Rights & Agreement Rules · Permission or license

TikTok may amend or update this policy from time to time

TikTok reserves the ability to amend or update this Consumer Health Data Privacy Policy from time to time.

Supporting quotations

We may amend or update this Consumer Health Data Privacy Policy from time to time.

Not stated here

• The policy does not say whether an update applies to information already collected or requires new consent.

Legal Rights & Agreement Rules · Procedure

Notice of updates may be only a changed date or a reposted policy

When TikTok updates the policy, it may notify you by updating the "Last Updated / Effective Date" date at the top of the new policy, posting the new policy, or providing other notice required or permitted by applicable law. It recommends that you review the policy from time to time to stay informed.

Supporting quotations

When we update this Consumer Health Data Privacy Policy, we may notify you of changes by updating the “Last Updated / Effective Date” date at the top of the new Privacy Policy, posting the new Privacy Policy, or by providing other notice required or permitted by applicable law.

We recommend that you review this Consumer Health Data Privacy Policy from time to time to stay informed of our privacy practices.

Qualifications & exceptions

• The wording is "may notify": it names three options and does not commit to any one of them.

Not stated here

• The policy does not give an advance-notice period or promise a direct message to users.