Privacy Policy - non-EU

Legal Rights & Agreement Rules · Context

The policy covers TikTok apps, websites, software and related services, provided and controlled by TikTok Pte. Ltd.

The page is dated "Last updated: July 8, 2025". It says the "Platform" means TikTok apps, websites, software and related services, and that the Platform is provided and controlled by TikTok Pte. Ltd., registered at 1 Raffles Quay in Singapore; "TikTok", "we" and "us" mean that company. Two later jurisdiction-specific terms change who "we" is: for India the Platform is provided and controlled by ByteDance (India) Technology Private Limited and "TikTok", "we" and "us" are read to mean that entity, and for shopping features in Japan the data controller is Bytedance KK (with TikTok Pte. Ltd. controlling some shopping-feature activities), and "we" means both companies.

Supporting quotations

Last updated: July 8, 2025

This Privacy Policy applies to TikTok services, which include TikTok apps, websites, software and related services (the “Platform”).

The Platform is provided and controlled by TikTok Pte. Ltd., with its registered address at 1 Raffles Quay, #26-10, South Tower, Singapore 048583 (“TikTok”, “we” or “us”).

the Platform is provided and controlled by ByteDance (India) Technology Private Limited

the data controller responsible for the processing of your personal data is Bytedance KK.

Qualifications & exceptions

• India: "TikTok", "we" and "us" are read as ByteDance (India) Technology Private Limited.
• Japan, shopping features only: the data controller is Bytedance KK, and "we" means TikTok Pte. Ltd. and Bytedance KK.

Not stated here

• The policy does not list which other group companies run the Platform in other countries.

Cross-references

• has exception (model-proposed): India: the Platform is provided by ByteDance (India) Technology Private Limited, and "TikTok" means that entity — For India the provider and the meaning of "TikTok", "we" and "us" is ByteDance (India) Technology Private Limited rather than TikTok Pte. Ltd.
• has exception (model-proposed): Japan: for shopping features the data controller is Bytedance KK, and TikTok Pte. Ltd. for some activities — For shopping features in Japan the data controller is Bytedance KK, with TikTok Pte. Ltd. controlling some activities, which differs from the general statement that TikTok Pte. Ltd. provides and controls the Platform.

Legal Rights & Agreement Rules · Context

The policy covers personal information of users and other individuals; people who disagree should not use the Platform

The policy says it explains how TikTok collects, uses, shares and otherwise processes the personal information of users "and other individuals", so it is not limited to account holders. It also says that anyone who does not agree with the policy should not use the Platform. The sentence is phrased as advice ("should not") rather than as a stated consequence, and the policy does not say here what happens to someone who has already used the Platform.

Supporting quotations

This Privacy Policy explains how we collect, use, share, and otherwise process the personal information of users, and other individuals.

If you do not agree with this policy, you should not use the Platform.

Qualifications & exceptions

• Scope is users "and other individuals".
• "should not use" is advice wording, not a stated enforcement step.

Not stated here

• This section does not say how disagreement is signalled or whether an existing account is affected; the update section says continued use counts as acceptance of an updated policy.

Legal Rights & Agreement Rules · Company practice

TikTok uses information to enforce its Terms of Service, Community Guidelines and other conditions and policies

TikTok uses information to enforce its Terms of Service, Community Guidelines and other conditions and policies.

Supporting quotations

To enforce our Terms of Service, Community Guidelines, and other conditions and policies.

Legal Rights & Agreement Rules · Company practice

TikTok will share information with authorities and others if legally required, or needed to comply or enforce terms

TikTok says it will share your information with law enforcement agencies, public authorities or other organisations if legally required to do so, or if the use is reasonably necessary to comply with a legal obligation, process or request, or to enforce its Terms of Service and other agreements, policies and standards, including investigating potential violations.

Supporting quotations

We will share your information with law enforcement agencies, public authorities or other organisations if legally required to do so, or if such use is reasonably necessary to:

comply with legal obligation, process or request;

enforce our Terms of Service and other agreements, policies, and standards, including investigation of any potential violation thereof;

Qualifications & exceptions

• Two triggers: legal requirement, or reasonable necessity for the listed reasons.
• "will share" is firm wording for these cases.

Not stated here

• The policy does not say whether you are notified of such a disclosure.

Legal Rights & Agreement Rules · Company practice

TikTok will share information if needed for security, fraud, rights or safety, including with other companies

Under the same lead-in as the legal-sharing card, TikTok says it will share your information with authorities or other organisations if reasonably necessary to detect, prevent or address security, fraud or technical issues, or to protect the rights, property or safety of TikTok, its users, a third party or the public as required or permitted by law. This includes exchanging information with other companies and organisations for fraud protection and credit risk reduction.

Supporting quotations

We will share your information with law enforcement agencies, public authorities or other organisations if legally required to do so, or if such use is reasonably necessary to:

detect, prevent or otherwise address security, fraud or technical issues; or

protect the rights, property or safety of us, our users, a third party or the public as required or permitted by law (including exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction).

Qualifications & exceptions

• Protecting rights, property or safety is "as required or permitted by law".
• Exchange with other companies is for fraud protection and credit risk reduction.

Not stated here

• Which other companies and organisations receive the information is not stated.

Legal Rights & Agreement Rules · Restriction or exception

TikTok disclaims responsibility for the privacy policies of partner, advertiser and affiliate sites it links to

TikTok says it will from time to time include links to and from the websites of its partner networks, advertisers and affiliates. If you follow such a link, those sites have their own privacy policies, and TikTok does not accept responsibility or liability for them. It asks you to check those policies before submitting information.

Supporting quotations

If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies.

Please check these policies before you submit any information to these websites.

Qualifications & exceptions

• Applies to sites of partner networks, advertisers and affiliates reached through links.

Legal Rights & Agreement Rules · Restriction or exception

Jurisdiction-specific Supplemental Terms supersede and control over the rest of the policy where they conflict

The Supplemental Terms section says that if the provisions relevant to the jurisdiction from which you access or use the services conflict with the rest of the policy, those jurisdiction-specific terms supersede and control. The policy lists terms for Australia, Egypt, India, Indonesia, Israel, Japan, Kenya, Latin America, Nigeria, the Philippines, Russia, Singapore, South Africa, Türkiye, Uganda, the United Arab Emirates and Vietnam. Several of those sections repeat their own conflict rule, in similar words.

Supporting quotations

In the event of a conflict between the provisions of the Supplemental Terms – Jurisdiction-Specific that are relevant to your jurisdiction from which you access or use the services, and the rest of policy, the relevant jurisdictions’ Supplemental Terms – Jurisdiction-Specific will supersede and control.

Qualifications & exceptions

• Applies only to the extent of a conflict.
• Which terms apply depends on the jurisdiction from which you access or use the services.

Not stated here

• The policy does not say how a conflict is decided for a person who uses the services from more than one jurisdiction.

Cross-references

• qualifies (model-proposed): TikTok lists information it may collect: what you provide, what is collected automatically and what comes from others — The Supplemental Terms precedence rule limits how far the general collection list applies for the jurisdictions the policy names.

Legal Rights & Agreement Rules · Context

India: the Platform is provided by ByteDance (India) Technology Private Limited, and "TikTok" means that entity

For India, the Platform is provided and controlled by ByteDance (India) Technology Private Limited, and TikTok is the brand for providing and promoting the services. When using the services from India, "TikTok", "we" or "us" in the policy is read to refer to that entity.

Supporting quotations

If you are using our services in India, the Platform is provided and controlled by ByteDance (India) Technology Private Limited.

When using these services from India, please accordingly read “TikTok”, “we” or “us” in this policy to refer to Bytedance (India) Technology India Private Limited.

Qualifications & exceptions

• Applies if you use the services from India.

Not stated here

• The text names the entity slightly differently in two places ("Bytedance (India) Technology India Private Limited" in the final clause); the policy does not explain the difference.

Cross-references

• exception to (model-proposed): The policy covers TikTok apps, websites, software and related services, provided and controlled by TikTok Pte. Ltd. — For India the provider and the meaning of "TikTok", "we" and "us" is ByteDance (India) Technology Private Limited rather than TikTok Pte. Ltd.

Legal Rights & Agreement Rules · Context

Japan: for shopping features the data controller is Bytedance KK, and TikTok Pte. Ltd. for some activities

For shopping features in Japan, the data controller responsible for processing your personal data is Bytedance KK, at the Tokyo address given. Certain shopping-feature activities may be performed by TikTok Pte. Ltd., which is the data controller for those activities, for example development and improvement of the shopping features. In the policy, "TikTok", "we" or "us" then means TikTok Pte. Ltd. and Bytedance KK.

Supporting quotations

If you are using our shopping features in Japan, the data controller responsible for the processing of your personal data is Bytedance KK.

However, certain activities relating to the operation of our shopping features may be performed by TikTok Pte. Ltd., which will be the data controller for these processing activities.

When we refer to “TikTok”, “we” or “us” in this Privacy Policy, we mean TikTok Pte. Ltd. and Bytedance KK.

Qualifications & exceptions

• Applies only if you use the shopping features in Japan.
• TikTok Pte. Ltd. is controller for the activities it performs, such as shopping-feature development and improvement.

Not stated here

• The policy does not say which controller is responsible for Japan use outside shopping features other than the general statement that TikTok Pte. Ltd. provides the Platform.

Cross-references

• exception to (model-proposed): The policy covers TikTok apps, websites, software and related services, provided and controlled by TikTok Pte. Ltd. — For shopping features in Japan the data controller is Bytedance KK, with TikTok Pte. Ltd. controlling some activities, which differs from the general statement that TikTok Pte. Ltd. provides and controls the Platform.

Legal Rights & Agreement Rules · Company practice

Kenya: TikTok relies on contract necessity, and on legitimate interests, legal obligations or consent for other purposes

For Kenya, the additional terms prevail over the main text in a conflict. TikTok collects and uses personal data to offer the Platform under the lawful basis that processing is necessary for the performance of a contract you enter or have entered. For other purposes not necessary for the contract, processing may be based on its legitimate interests, compliance with legal obligations and/or consent you may have given.

Supporting quotations

If you are using our services in Kenya, the following additional terms apply. In the event of any conflict between the following additional terms and the provisions of the main body of this Policy, the following terms shall prevail.

We do so under the lawful basis that the processing is necessary for the performance of a contract in which you are entering or have entered.

the processing may be based upon (i) our legitimate interests; (ii) compliance with our legal obligations; and/or (iii) consent you may have provided to us

Qualifications & exceptions

• Applies when using services in Kenya.
• Other bases are stated with "may" and "and/or".

Not stated here

• The policy does not say which purposes rely on which basis.

Legal Rights & Agreement Rules · Company practice

Nigeria: signing up or using the Platform means you agree to processing, based on contract and other bases

For Nigeria, the additional terms prevail over the main text in a conflict. TikTok says it follows the principles of Nigerian law on processing personal data and that by signing up or using the Platform you agree to processing under the policy. It processes personal data on the basis that it is necessary for performance of a contract you enter or have entered. In some circumstances it processes for other purposes, which may be based on legitimate interests, legal obligations, your consent, the performance of a task in the public interest and/or protecting vital interests.

Supporting quotations

If you are using our services in Nigeria, the following additional terms apply. In the event of any conflict between the following additional terms and the provisions of the main body of this Privacy Policy, the following terms shall prevail.

By signing up to and/or using the Platform, you agree to the processing and use of your personal data in accordance with this Privacy Policy.

We process your personal data on the basis that the processing is necessary for the performance of a contract which you are entering or have entered.

the processing may be based upon (i) our legitimate interests; (ii) compliance with our legal obligations; (iii) consent you may have provided to us; (iv) for the performance of a task in public interest; and/or (v) to protect vital interests

Qualifications & exceptions

• Applies when using services in Nigeria.
• The additional bases are stated with "may" and "and/or".

Not stated here

• The text does not say which purposes rely on which basis.

Legal Rights & Agreement Rules · Company practice

Uganda: TikTok processes data for contract performance, and for legal obligations and/or consent for other purposes

For Uganda, TikTok collects and uses personal data to offer the Platform under the lawful basis that processing is necessary for the performance of a contract you enter or have entered. For other purposes not necessary for the contract, processing may be based on compliance with legal obligations and/or consent you may have provided.

Supporting quotations

We do so under the lawful basis that the processing is necessary for the performance of a contract in which you are entering or have entered.

the processing may be based upon (i) compliance with our legal obligations; and/or (ii) consent you may have provided to us

Qualifications & exceptions

• Applies when using services in Uganda.
• Other bases are stated with "may" and "and/or"; legitimate interests is not listed here.

Not stated here

• The text does not say which purposes rely on which basis.

Legal Rights & Agreement Rules · Restriction or exception

UAE: the policy is governed by UAE law, and small claims go to the DIFC Small Claims Tribunal

For the UAE, by using the Platform there, the policy is governed by and interpreted under the laws of the UAE. For a dispute between the parties about the policy, a claim for a sum within the limits the DIFC Small Claims Tribunal specifies from time to time is referred by either party to that Tribunal.

Supporting quotations

Governing law and dispute resolution

By using our Platform in the UAE, this Privacy Policy will be governed by and interpreted in accordance with the laws of the UAE. In the event of a dispute arising between the parties in connection with this Privacy Policy:

where the dispute relates to a claim for a sum within the limits specified by the DIFC Small Claims Tribunal from time to time, then the dispute shall be referred by either party to the said Tribunal; and

Qualifications & exceptions

• Applies when using the Platform in the UAE.
• The Tribunal route applies only to claims within its specified limits, which the policy does not state.

Not stated here

• The Tribunal's monetary limit is not stated in the policy.

Legal Rights & Agreement Rules · Restriction or exception

UAE: other disputes go to mediation, then binding DIFC-LCIA arbitration in Dubai in English

For the UAE, all disputes other than the small-claims type go first to mediation under the Mediation Rules of the DIFC-LCIA Arbitration Centre. If mediation does not settle the dispute within 30 days of starting, or a longer period the parties agree in writing, the dispute is referred to and finally resolved by arbitration under the DIFC-LCIA Arbitration Rules. The language is English, there is one arbitrator, and the arbitration is conducted in Dubai. The rules are stated to be incorporated by reference but are not part of this document.

Supporting quotations

for all other disputes, the parties shall seek settlement of that dispute by mediation in accordance with the Mediation Rules of the DIFC-LCIA Arbitration Centre, which Rules are deemed to be incorporated by reference to this clause.

If the dispute is not settled by mediation within 30 days of the commencement of the mediation, or such further period as the parties shall agree in writing, the dispute shall be referred to and finally resolved by arbitration under the Arbitration Rules of the DIFC-LCIA Arbitration Centre

The language to be used in the mediation and in the arbitration, shall be English. In any arbitration commenced pursuant to this clause the number of arbitrators shall be one and the arbitration shall be conducted in Dubai.

Qualifications & exceptions

• Applies when using the Platform in the UAE.
• Arbitration follows only if mediation fails within 30 days or the agreed longer period.
• The mediation and arbitration rules are incorporated by reference and are not supplied.

Not stated here

• The content of the DIFC-LCIA rules is not in this document and is not read here.

Legal Rights & Agreement Rules · Restriction or exception

Vietnam: you have statutory obligations, including protecting personal data and giving accurate data

For Vietnam, you also have statutory obligations: to protect your own personal data; to request other relevant organisations and individuals to protect your personal data; to respect and protect the personal data of others; to provide complete and accurate personal data when giving consent to processing; and other obligations under applicable laws.

Supporting quotations

You have the following statutory obligations:

Protect your own personal data;

Request other relevant organizations and individuals to protect your personal data;

Respect and protect personal data of others;

Provide complete and accurate personal data upon giving consent to the processing of your personal data; and

Other obligations under applicable laws.

Qualifications & exceptions

• Applies when using services in Vietnam.

Not stated here

• "Other obligations under applicable laws" are not listed.

Legal Rights & Agreement Rules · Restriction or exception

Nothing in the policy waives or limits statutory consumer rights that cannot be limited by contract

The policy states that nothing in it shall be construed as a waiver or limitation of statutory consumer rights that cannot be contractually limited under applicable laws. The sentence sits after the Vietnam terms and before the "Other Jurisdictions" heading and does not say whether it applies only to Vietnam or to the whole policy. It names no particular law or right.

Supporting quotations

Nothing in this Privacy Policy shall be construed as a waiver or limitation to statutory consumer rights that cannot be contractually limited under applicable laws.

Qualifications & exceptions

• Covers only statutory consumer rights that "cannot be contractually limited under applicable laws".

Not stated here

• Whether this sentence is part of the Vietnam terms or applies to the whole policy is not stated; its placement is the only clue.
• No specific statutory rights or laws are named.

Legal Rights & Agreement Rules · Context

In jurisdictions with a non-English official language, the local-language policy may set out additional local terms

For jurisdictions where the national or official language is not English, the policy says the version of the TikTok Privacy Policy in your local language may set out additional terms specific to your jurisdiction, and asks you to refer to that version for further information. Those local-language versions are separate documents and are not read here.

Supporting quotations

In jurisdictions where the national or official language is not English, the version of the TikTok Privacy Policy in your local language may set out additional terms specific to your jurisdiction. Please also refer to the version of this Privacy Policy in your local language for further information.

Qualifications & exceptions

• Stated with "may"; applies where the national or official language is not English.

Not stated here

• What the local-language versions say is unknown from this document, and the policy does not say whether they override this English text.

Legal Rights & Agreement Rules · Company practice

Russia: TikTok relies on consent, contract, legitimate interest and legal obligations, and signing up means you consent

For Russia, TikTok processes your personal data on the grounds of your consent, performance of a contract, its legitimate interest, obligations to process personal data, or when required by law. By signing up and using the Platform you consent to processing of your personal data in accordance with the policy.

Supporting quotations

When we process your personal data, we rely on the grounds of your consent, performance of a contract, our legitimate interest and obligations to process personal data, or when we are so required by law.

By signing up and using the Platform, you consent to the processing of personal data in accordance with this Privacy Policy.

Qualifications & exceptions

• Applies when using services in Russia.
• Consent is stated to follow from signing up and using the Platform.

Not stated here

• The text does not say which purposes rely on which ground.

Legal Rights & Agreement Rules · Procedure

South Africa: TikTok SA's PAIA Manual describes its data processing and how to exercise data subject rights

For South Africa, the policy says TikTok's legal entity there, TikTok South Africa (Pty) Limited, is required by section 51 of the Promotion of Access to Information Act 2 of 2000 (PAIA) to compile an information manual. The manual covers its processing of personal information under the Protection of Personal Information Act 4 of 2013 (POPIA), the process for individuals to exercise POPIA data subject rights, the records it holds under PAIA, and the process to request access to those records. The manual is available through a link. The manual's contents are not part of this document.

Supporting quotations

TikTok's legal entity in South Africa, TikTok South Africa (Pty) Limited (TikTok SA), is required by the terms of section 51 of the Promotion of Access to Information Act 2 of 2000 (PAIA) to compile an information manual (PAIA Manual)

(ii) the process that must be followed for relevant individuals to exercise their data subject rights as provided for in POPIA

TikTok SA's PAIA Manual can be accessed

Qualifications & exceptions

• Applies when using services in South Africa.
• The Acts are cited by the policy; their text is not supplied here.

Not stated here

• The PAIA Manual is a separate document and is not read here.

Legal Rights & Agreement Rules · Context

Türkiye: the Turkish-language Privacy Policy gives further information on compliance with Law No. 6698

For Türkiye, the policy refers you to the Turkish-language Privacy Policy for further information on TikTok's compliance with Law No. 6698 on the Protection of Personal Data. That Turkish-language policy is a separate document and is not read here; this section contains no other Türkiye-specific terms.

Supporting quotations

If you are using our services in Türkiye, please refer to the

for further information on our compliance with Law No. 6698 on the Protection of Personal Data.

Qualifications & exceptions

• Applies when using services in Türkiye.
• The cited law is named by the policy; its text is not supplied.

Not stated here

• What the Turkish-language policy provides is unknown from this document.

Legal Rights & Agreement Rules · Context

Uganda: additional terms apply to use of the services in Uganda, set out in the paragraphs that follow

The Uganda heading opens by saying that if you are using the services in Uganda, additional terms apply. The operative Uganda terms (legal bases, consequences of not providing data, age and parental consent, accurate data) follow in the next paragraphs.

Supporting quotations

If you are using our services in Uganda the following additional terms apply.

Qualifications & exceptions

• Applies when using services in Uganda.

Legal Rights & Agreement Rules · Restriction or exception

TikTok may update this policy, and continued use of the Platform after the updated date counts as accepting it

TikTok may update the policy from time to time. When it does, it will notify you by updating the "Last Updated" date at the top of the policy and posting the new policy, or by giving any other notice required by applicable law. Your continued access to or use of the Platform after the date of the updated policy constitutes acceptance of it, and if you do not agree to the updated policy you must stop accessing or using the Platform.

Supporting quotations

We may update this Privacy Policy from time to time.

we will notify you by updating the “Last Updated” date at the top of this policy and posting the new Privacy Policy or providing any other notice required by applicable law

Your continued access to or use of the Platform after the date of the updated policy constitutes your acceptance of the updated policy. If you do not agree to the updated policy, you must stop accessing or using the Platform.

Qualifications & exceptions

• Notice is the changed date and posting, plus any other notice that applicable law requires.
• Acceptance is by continued access or use after the update date.
• A person who does not agree "must stop" using the Platform.

Not stated here

• The policy does not promise direct notice such as email, beyond what applicable law requires.