This policy covers TikTok apps, websites, software and related services that link to it
The policy applies to personal information that TikTok processes in connection with TikTok apps, websites, software and related services, which it calls the Platform. It covers only those offerings that link to or reference this Privacy Policy.
Details
Who
TikTok
What it covers
personal information processed in connection with TikTok apps, websites, software and related services
Condition
services that link to or reference this Privacy Policy
Supporting quotations
applies to the personal information that TikTok processes in connection with TikTok apps, websites, software and related services (the “Platform”), that link to or reference this Privacy Policy
Qualifications & exceptions
Applies to the Platform offerings that link to or reference this Privacy Policy.
Not stated here
The text does not list which apps, websites or services link to it.
The controller sentence is written for people who live in the EEA, the UK or Switzerland; this policy does not say which policy applies to anyone elsewhere.
For EEA, UK and Swiss residents, two TikTok companies are joint controllers
If you live in the EEA, the UK or Switzerland, TikTok Technology Limited (an Irish company, TikTok Ireland) and TikTok Information Technologies UK Limited (a UK company, TikTok UK) are named as the joint controllers of your information processed in connection with this policy. Under Contact Us, each company is listed with a postal address, TikTok Ireland in Dublin and TikTok UK in London.
Details
Who
TikTok Technology Limited (TikTok Ireland) and TikTok Information Technologies UK Limited (TikTok UK)
Where
EEA, United Kingdom, Switzerland
What it does
act as joint controllers
Supporting quotations
If you live in the European Economic Area (“EEA”), the United Kingdom (“UK”), or Switzerland, TikTok Technology Limited, an Irish company (“TikTok Ireland”), and TikTok Information Technologies UK Limited (“TikTok UK”), a UK company, ("TikTok," "our," "we," or "us") are the joint controllers of your information processed in connection with this Privacy Policy
This version states a last-updated date of 30 November 2025
The policy opens with the line "Last updated: 30 November 2025", which is the only version date this text gives.
Details
When
Last updated 30 November 2025
Supporting quotations
Last updated: 30 November 2025
Not stated here
The text names no later or upcoming version.
Data Access & Collection · Context
The policy says it collects information in three ways
TikTok says it collects information in three ways: information you provide, automatically collected information, and information from other sources. The sections after this sentence give the detail for each.
Details
Who
TikTok
What it does
collects information in three ways
Supporting quotations
We collect your information in three ways: Information You Provide, Automatically Collected Information, and Information From Other Sources
Data Access & Collection · Company practice
Account information includes birth date, username, contact details and password
When you set up an account, TikTok collects what you provide, such as your date of birth, username, email address and/or telephone number, and password. You can choose to add other information such as a bio or image.
Details
Who
TikTok
What it does
collects
What it covers
date of birth, username, email address and/or telephone number, password; optional bio or image
Condition
when you set up an account
Supporting quotations
We collect information that you provide when you set up an account, such as your date of birth, username, email address and/or telephone number, and password. You can choose to add other information to your account, such as a bio or image.
Qualifications & exceptions
Collected when you set up an account.
Extra items such as a bio or image are added by your choice.
Data Access & Collection · Company practice
User Content and its metadata are collected, and so are details about non-users shown in it
TikTok collects the content you create, import, upload or publish, such as photographs, videos, audio recordings, livestreams, comments, hashtags, feedback and reviews, along with metadata such as when, where and by whom it was created. Information about you can also appear in content other users publish, even if you are not a user.
Details
Who
TikTok
What it covers
content you create, import, upload or publish, with metadata
Condition
also applies to non-users who appear in users' content
Supporting quotations
We collect the content you create, import, upload or publish through the Platform, such as photographs, videos, audio recordings, livestreams, comments, hashtags, feedback, reviews, and the associated metadata (such as when, where, and by whom the content was created)
Even if you are not a user, information about you may appear in content created or published by users on the Platform.
Qualifications & exceptions
Includes metadata on when, where and by whom the content was created.
Applies to people who are not users when other users' content shows information about them.
Content is collected at the time of creation, even if you do not save or upload it
TikTok collects User Content through pre-loading at the time of creation, import or upload, whether or not you choose to save or upload it. The policy's example is recommending music based on the video.
Details
What it does
collects through pre-loading
Condition
at creation, import or upload, whether or not saved or uploaded
Why
for example to recommend music based on the video
Supporting quotations
We collect User Content through pre-loading at the time of creation, import, or upload, regardless of whether you choose to save or upload that User Content, for example, to recommend music based on the video.
Qualifications & exceptions
Applies regardless of whether you choose to save or upload the content.
Not stated here
The text does not say how long content that is never saved or uploaded is kept.
Clipboard content is collected if you copy and paste to or from the Platform
TikTok collects text, images and video from your device's clipboard if you choose to copy and paste content to or from the Platform, or share content between it and a third-party platform.
Details
What it covers
content from your device's clipboard
Condition
if you choose to copy and paste to or from the Platform or share with a third-party platform
Supporting quotations
We also collect content (such as text, images, and video) from your device's clipboard if you choose to copy and paste content to or from the Platform or share content between it and a third party platform.
Qualifications & exceptions
Only if you choose to copy and paste or share between the Platform and a third-party platform.
Location is collected when you add it to your content
TikTok collects location information, such as tourist attractions, shops or other points of interest, if you choose to add it to your User Content.
Details
What it covers
location information such as points of interest
Condition
if you choose to add it to your User Content
Supporting quotations
In addition, we collect location information (such as tourist attractions, shops, or other points of interest) if you choose to add the location information to your User Content.
Qualifications & exceptions
Only if you choose to add location information to your User Content.
Message content and metadata are collected, including chats with sellers and virtual assistants
TikTok collects the content of messages you send and receive on the Platform, plus metadata such as when a message was sent, received or read and who took part. It also collects messages sent or received through chat when you use the shopping feature to talk to sellers or use virtual assistants.
Details
What it covers
message content and metadata
Condition
also chat with sellers through the shopping feature and with virtual assistants
Supporting quotations
We collect the content of the messages you send and receive on the Platform and the associated metadata (such as the time the message was sent, received or read, as well as the participants in the communication).
We also collect the messages you send or receive through our chat functionality when using our shopping feature to communicate with sellers or using virtual assistants.
Qualifications & exceptions
Includes the time sent, received or read and the participants in the conversation.
Data Access & Collection · Company practice
Contacts are collected only if you sync them or look for people through social network contacts
If you choose to sync contacts, TikTok collects names, phone numbers and email addresses from your device's phone book and matches them to users of the Platform. If you choose to find other users through your social network contacts, it collects your public profile information and the names and profiles of those contacts. TikTok also collects information about accounts you follow and accounts that follow you, which the text does not tie to either choice.
Details
Condition
if you choose to sync contacts
Condition
if you choose to find users through social network contacts
What it covers
accounts you follow and that follow you
Supporting quotations
If you choose to sync your contacts, we will collect information from your device’s phone book such as names, phone numbers, and email addresses, and match that information to users of the Platform.
If you choose to find other users through your social network contacts, we will collect your public profile information as well as names and profiles of your social network contacts.
We also collect information about the accounts you follow and that follow you.
Qualifications & exceptions
Phone book collection applies if you choose to sync contacts.
Social network collection applies if you choose to find other users that way.
Follow information is stated without a condition.
Data Access & Collection · Company practice
Purchase information includes payment card, billing, delivery and contact details
When you make a purchase, payment or other transaction on or through the Platform, including buying TikTok Coins or products through shopping features, TikTok collects transaction information such as payment card information, billing, delivery and contact information, and the products you bought.
Details
What it covers
payment card, billing, delivery and contact information, and products purchased
Condition
when you make a purchase, payment or other transaction
Supporting quotations
When you make a purchase, a payment, or other transaction on or through the Platform, including when you buy TikTok Coins or purchase products through our shopping features, we collect information about the transaction, such as payment card information, billing, delivery, and contact information, and products you purchased.
Data Access & Collection · Company practice
Information is collected if you take part in surveys, research, promotions or events
If you choose to take part in a survey, research, promotion, contest, marketing campaign or event run or sponsored by TikTok, it collects the information you provide in doing so.
Details not recorded for this card
Supporting quotations
We collect Information You Provide if you choose to participate in a survey, research, promotion, contest, marketing campaign, or event conducted or sponsored by us.
Qualifications & exceptions
Only if you choose to take part.
Data Access & Collection · Company practice
Contacting TikTok can involve sending proof of identity or age
When you contact TikTok, it collects what you send, such as proof of identity or age, feedback or inquiries about your use of the Platform, or reports of possible violations of its Terms of Service, Community Guidelines or other policies.
Details
Condition
when you contact TikTok
What it covers
what you send, such as proof of identity or age
Supporting quotations
When you contact us, we collect the information you send us, such as proof of identity or age, feedback or inquiries about your use of the Platform or information about possible violations of our
Not stated here
The Terms of Service and Community Guidelines are linked but not supplied here, so the policy's text does not say what they require.
Data Access & Collection · Company practice
Form entries are collected, and TikTok can fill forms from account details if you let it
TikTok collects the information you provide when you fill in a form on the Platform. You can let TikTok fill in forms automatically with your account information, such as addresses or payment information.
Details
What it covers
information entered in forms
What it does
fill in forms automatically with account information
Condition
if you let TikTok do so
Supporting quotations
We collect the Information You Provide when you fill in a form on the Platform. You can let TikTok fill in forms automatically with your account info, like your addresses or payment info.
Qualifications & exceptions
Automatic form filling is something you can choose to allow.
Data Access & Collection · Company practice
Technical information includes keystroke patterns, IP address and device identifiers
When you access the Platform, TikTok collects device and network connection information: device model, operating system, keystroke patterns or rhythms, IP address, system language and device settings. It also collects service-related, diagnostic and performance information such as crash reports and performance logs, and it assigns each user a device ID and user ID automatically.
Details
What it covers
device model, operating system, keystroke patterns or rhythms, IP address, system language, device settings, diagnostics, device ID and user ID
Condition
when you access the Platform
Supporting quotations
We collect certain device and network connection information when you access the Platform. This information includes your device model, operating system, keystroke patterns or rhythms, IP address, system language and device settings.
We also collect service-related, diagnostic, performance information, including crash reports and performance logs. We automatically assign you a device ID and user ID.
Not stated here
The text does not say what keystroke patterns or rhythms are used for.
Activity is identified across your devices using device and user IDs
Where you log in from multiple devices, TikTok uses information such as your device ID and user ID to identify your activity across those devices, for a seamless log-in experience and for security purposes.
Details
What it does
identifies your activity across devices
Why
seamless log-in experience and security
Condition
where you log in from multiple devices
Supporting quotations
Where you log-in from multiple devices, we use information such as your device ID and user ID to identify your activity across devices to give you a seamless log-in experience and for security purposes.
Qualifications & exceptions
Applies where you log in from multiple devices.
Stated purposes are a seamless log-in experience and security.
Approximate location is collected automatically, precise location if you enable location services
TikTok automatically collects approximate location (country, state or city) based on technical information such as SIM card and IP address. Where you enable location services for the TikTok app in your device settings, it collects approximate or precise location from your device.
Details
What it covers
approximate location from technical information
What it covers
approximate or precise device location
Condition
where you enable location services for the TikTok app
Supporting quotations
We automatically collect information about your approximate location (e.g. country, state, or city) based on your Technical Information (such as SIM card and IP address).
Also, where you enable location services for the TikTok app within your device settings, we collect approximate or precise location information from your device.
Qualifications & exceptions
Approximate location is collected automatically from technical information.
Device location, approximate or precise, applies where you enable location services for the TikTok app.
Not stated here
The linked page on how location is collected is not supplied here, so this card cannot say more than the policy text does.
Data Access & Collection · Company practice
Usage information includes interactions, engagement duration and search history
TikTok collects how you engage with the Platform, including how you interact with content and ads, how long and how often you use it, your engagement with other users, and your search history.
Details
What it covers
interactions with content and ads, duration and frequency of use, engagement with other users, search history
Supporting quotations
We collect information about how you engage with the Platform, including information about how you interact with content and ads, the duration and frequency of your use, your engagement with other users, and your search history.
Faces, objects and spoken words in your content are detected for moderation, effects and captions
TikTok detects and collects characteristics of the videos, images and audio in your User Content, for example identifying objects and scenery, whether a face or other body parts appear in an image and where, and the text of words spoken. Examples of why are content moderation, special effects such as filters and avatars, and captions.
Details
What it covers
characteristics of videos, images and audio in User Content (objects, scenery, presence and location of a face or body parts, spoken words)
Why
content moderation, special effects, captions
Supporting quotations
We detect and collect characteristics and features about the videos, images, and audio recordings that are part of your User Content, for example, by identifying objects and scenery, the existence or location within an image of a face or other body parts; and the text of words spoken in your User Content.
We do this, for example, for content moderation and to provide special effects (such as video filters and avatars) and captions.
Qualifications & exceptions
Purposes are given as examples ("for example"), not as a closed list.
Not stated here
The text does not say whether these detected characteristics are used to identify a person.
The text does not say how long the detected characteristics are kept.
Inference & Profiling · Company practice
TikTok infers age range, gender and interests about you
TikTok infers attributes such as age range and gender, and interests, from the information it already has about you. It uses inferences, for example, for safety such as content moderation, to show relevant information and, where permitted, to serve personalised ads based on your interests.
Details
What it does
infers attributes and interests
What it covers
age range, gender and interests
Why
safety, relevant information, and where permitted personalised ads
Supporting quotations
We infer your attributes (such as age-range and gender) and interests based on the information we have about you.
We use inferences, for example, to keep the Platform safe (such as for content moderation), to show you relevant information, and, where permitted, to serve you personalised ads based on your interests.
Qualifications & exceptions
Personalised ads from inferences apply "where permitted".
Uses are given as examples ("for example").
Not stated here
The text does not say which pieces of information the inferences are drawn from.
Cookies and similar technologies are used to run the Platform and for marketing
TikTok uses cookies and similar tracking technologies to operate the Platform, for example to remember language preferences, avoid showing you the same video more than once, and for security. It also uses these technologies for marketing purposes. It says it will obtain consent for cookies where required by law.
Details
What it covers
cookies and similar tracking technologies
Why
operating the Platform, security, marketing
Condition
consent where required by law
Supporting quotations
We use cookies and similar tracking technologies to operate and provide the Platform. For example, we use cookies to remember your language preferences, make sure you don’t see the same video more than once, and for security purposes. We also use these technologies for marketing purposes.
We will obtain your consent to our use of cookies where required by law.
Qualifications & exceptions
Consent for cookies is obtained only where required by law.
Not stated here
The Cookies Policy is linked but not supplied here, so this policy does not set out which cookies are used for marketing.
Linking & Identification · Company practice
Advertising and measurement partners send TikTok data about what you do off the Platform
Advertisers, measurement and other partners share information with TikTok about you and your actions outside the Platform, such as activity on other websites and apps or in stores, including products or services you purchased online or in person. They also share mobile identifiers for advertising, hashed email addresses and phone numbers, and cookie identifiers, which TikTok uses to match you and your off-Platform actions with your TikTok account.
Details
Who
advertisers, measurement and other partners
What it covers
information about your actions outside the Platform, mobile identifiers, hashed emails and phone numbers, cookie identifiers
Why
match you and your actions with your TikTok account
Supporting quotations
Advertisers, measurement and other partners share information with us about you and the actions you have taken outside of the Platform, such as your activities on other websites and apps or in stores, including the products or services you purchased, online or in person.
These partners also share information with us, such as mobile identifiers for advertising, hashed email addresses and phone numbers, and cookie identifiers, which we use to help match you and your actions outside of the Platform with your TikTok account.
Qualifications & exceptions
Covers actions outside the Platform, including in-person purchases.
Partners can also let TikTok collect directly through tools such as TikTok Pixel
Some advertisers and partners integrate TikTok Advertiser Tools (such as TikTok Pixel) in their website or app, which lets TikTok collect similar information directly from them. TikTok says these partners must have the necessary rights and permissions to share your information, and that it processes some of this information as a joint controller with them.
Details
Who
advertisers and partners that integrate TikTok Advertiser Tools
What it does
let TikTok collect directly from their website or app
Condition
partners must have the necessary rights and permissions
Supporting quotations
Some of our advertisers and other partners enable us to collect similar information directly from their website or app by integrating our
These partners are required to have the necessary rights and permissions to share your information with us before doing so. We process certain information that we receive from these partners as a joint controller with them.
Qualifications & exceptions
Applies to partners that integrate TikTok Advertiser Tools.
The rights-and-permissions requirement is stated as something partners are required to have.
Not stated here
The arrangements with these partners are linked but not supplied, so their terms are not known.
Sellers and payment providers send payment confirmation and delivery information
TikTok receives information about you from sellers and from payment and transaction fulfilment providers, such as payment confirmation details and information about delivery of products you bought through its shopping features.
Details not recorded for this card
Supporting quotations
We receive information about you from sellers as well as payment and transaction fulfillment providers, such as payment confirmation details, and information about the delivery of products you have purchased through our shopping features.
Qualifications & exceptions
Concerns products purchased through TikTok's shopping features.
Data Access & Collection · Company practice
Third-party sign-in and developer tools send TikTok account and profile information
When you sign up or log in using a third party's sign-in feature, that platform provides information such as your email address, authentication ID and public profile. When you use a third-party service that integrates TikTok Developer Tools, TikTok receives the information needed for features like cross-service authentication or cross-posting. TikTok may also receive information from third-party providers that it uses for safety, including protecting users and content moderation.
Details
Who
third-party platforms and providers
What it covers
email address, authentication ID, public profile; information needed for cross-service features; safety information
Supporting quotations
Third party platforms provide us with information (such as your email address, authentication ID, and public profile) when you choose to sign up for or log in to the Platform using sign-in features provided by those third parties.
we will receive the information necessary to provide you with features like cross-service authentication or cross-posting.
We may also receive information from third party providers which we use for safety purposes, including to protect users on the Platform and for content moderation.
Qualifications & exceptions
Sign-in information is received when you choose to sign up or log in with a third party.
Developer Tools information is limited to what is necessary to provide the feature.
Your contact details can reach TikTok when you or another user sync contacts
TikTok may receive contact information that you hold, or that is held about you, when contact information is synced with the Platform by you or by another user. This means contact details about you can arrive through someone else's sync.
Details
What it does
receives contact information
Condition
when contact information is synced by you or another user
Supporting quotations
We may also receive contact information that you hold or is held about you when contact information is synced with our Platform by you or another user.
Qualifications & exceptions
Applies when contact information is synced by you or another user.
Other organisations, public sources and other people's reports can supply information about you
TikTok may collect or receive information about you from organisations, businesses, people and others, for example publicly available sources, government authorities, professional organisations and charity groups. It also collects information about you where you are mentioned in User Content, Messages, or a complaint, appeal, request or feedback from a user or third party, or where a user gives it your contact information.
Details
Who
organisations, businesses, people, public sources, government authorities, other users
What it covers
information about you
Supporting quotations
We may collect or receive information about you from organisations, businesses, people, and others, including, for example, publicly available sources, government authorities, professional organisations, and charity groups.
We also collect information about you where you are included or mentioned in User Content, Messages, in a complaint, appeal, request or feedback submitted by a user or third party, or if your contact information is provided to us by a user.
Qualifications & exceptions
Sources are given as examples ("including, for example").
Not stated here
The text does not say what information these sources provide.
Use & Processing · Company practice
TikTok uses your information to operate and improve the Platform, for the listed purposes and others
TikTok says it uses your information to operate, provide, develop and improve the Platform, including for the purposes listed under this heading. The list is introduced with "including", so the text does not present it as complete. It points to the legal bases section for more detail.
Details
Who
TikTok
What it does
uses your information
Why
operate, provide, develop and improve the Platform
Supporting quotations
We use your information to operate, provide, develop, and improve the Platform, including for the following purposes.
Qualifications & exceptions
The list is introduced with "including".
Not stated here
The text does not say whether there are purposes beyond the list.
Use & Processing · Company practice
Information is used to provide the Platform, including user support
TikTok uses your information to provide and administer the Platform, such as letting you create, share and consume content, interact with other users and their content, and giving user support.
Details
Why
provide and administer the Platform, including user support
Supporting quotations
Provide and administer the Platform, such as enabling you to create, share, and consume content, to interact with other users and their content, and provide user support.
Sharing & Disclosure · Company practice
Information is used for shopping features and shared with sellers and payment providers to process orders
TikTok uses your information to provide shopping features, such as personalised shopping benefits, and to facilitate purchase and delivery of products, goods and services. This includes sharing your information with sellers, payment and transaction fulfilment providers, and other service providers to process your orders.
Details
Why
shopping features and processing orders
What it does
shares information with sellers, payment and transaction fulfilment providers, and other service providers
Supporting quotations
Provide our shopping features (such as personalised shopping benefits) and facilitate the purchase and delivery of products, goods and services, including sharing your information with sellers, payment and transaction fulfilment providers, and other service providers in order to process your orders.
Qualifications & exceptions
Sharing is stated as being to process your orders.
Use & Processing · Company practice
Information is used to personalise features such as the For You feed and creation tools
TikTok uses your information to personalise and customise certain features and content, such as your For You feed and content creation tools.
Details
Why
personalise features and content such as the For You feed and creation tools
Supporting quotations
Personalise and customise certain features and content such as providing your “For You” feed and content creation tools.
Use & Processing · Company practice
Content and other information are reviewed by automated means and human moderators to enforce policies
TikTok uses your information to enforce its Terms, Community Guidelines and other policies that apply to you. It reviews User Content and other information through a mix of technology, including automated means, and human moderation, to protect the safety and well-being of its community.
Details
What it does
reviews User Content and other information
Why
enforce policies and protect community safety and well-being
Supporting quotations
We review User Content and other information through a mix of technology (including through automated means) and human moderation to protect the safety and well-being of our community.
Not stated here
The Terms and Community Guidelines are not supplied in this text, so the card cannot say what they require.
Use & Processing · Company practice
Information is used to let your content be used in other users' videos
TikTok uses your information to provide interactive features, such as enabling your content to be used in other users' videos.
Details
Why
enabling your content to be used in other users' videos
Supporting quotations
Provide certain interactive features, such as enabling your content to be used in other users’ videos
Not stated here
This item does not itself say whether you can restrict this use.
Use & Processing · Company practice
Information is used to suggest your account to others and others' accounts to you
TikTok uses your information to suggest your account to other users and suggest other accounts to you, to help connect users.
Details
Why
suggest accounts to connect users
Supporting quotations
Suggest your account to other users and suggest accounts of others to you to help connect you with other users.
Use & Processing · Company practice
Information is used to provide and improve advertising, with personalised ads limited to where permitted and consented
TikTok uses your information to provide and improve its advertising services, including to serve ads and, where permitted, personalised ads. Elsewhere the policy says that, with your consent and in regions where it is available, certain information associated with your TikTok account is used to personalise ads served through its advertising network.
Details
Why
provide and improve advertising services, including personalised ads
Condition
personalised ads where permitted
Condition
with your consent and in regions where available, for ads served via the advertising network
Supporting quotations
Provide and improve our advertising services, including to serve ads (including personalised ads, where permitted).
With your consent and in regions where it is available, we use certain information associated with your TikTok user account to personalise ads served via our advertising network.
Qualifications & exceptions
Personalised ads are stated "where permitted".
Advertising-network personalisation applies with your consent and in regions where it is available.
Not stated here
The TikTok Ad Network Privacy Policy is linked but not supplied here, so this card cannot describe how the advertising network processes information.
Cross-references
qualified by (model-proposed): With your consent, personalised ads use your activity on and off the Platform — The general advertising use says personalised ads are served "where permitted"; the consent section says personalised ads are based on your consent, so consent is the condition behind that qualifier.
Use & Processing · Company practice
Information is used to create analytics reports for partners, sellers and creators
TikTok uses your information to create analytics reports so partners, sellers and creators can see how their content, ads or products perform and better understand their audience and buyers.
Details
Why
analytics reports for partners, sellers and creators
Supporting quotations
Create analytics reports so that partners, sellers and creators can see how their content, ads or products are performing and to better understand their audience and buyers.
Security & Safeguards · Company practice
Information is used to keep the Platform safe, secure and stable
TikTok uses your information to maintain and enhance the safety, security and stability of the Platform by identifying and addressing technical or security issues, such as technical bugs, spam accounts, and detecting abuse, fraud and illegal activity.
Details
Why
safety, security and stability, including detecting abuse, fraud and illegal activity
Supporting quotations
Maintain and enhance the safety, security, and stability of the Platform by identifying and addressing technical or security issues or problems (such as technical bugs, spam accounts, and detecting abuse, fraud, and illegal activity).
Use & Processing · Company practice
Information is used to improve the Platform, including training machine learning models
TikTok uses your information to review, improve and develop the Platform, including by monitoring interactions and usage across your devices, analysing how people use it, and training, testing and improving its technology such as machine learning models and algorithms.
Details
What it does
monitors interactions and usage across your devices; trains, tests and improves technology
Why
review, improve and develop the Platform, including machine learning models and algorithms
Supporting quotations
Review, improve, and develop the Platform, including by monitoring interactions and usage across your devices, analysing how people are using it, and by training, testing, and improving our technology, such as our machine learning models and algorithms.
Not stated here
This item does not say which categories of information are used for training.
Sharing & Disclosure · Company practice
Information is shared with third-party platforms to provide features you ask for
TikTok shares your information with third-party platforms to provide you with features, such as content sharing at your request when you integrate your TikTok account with a third-party service.
Details
What it does
shares your information with third-party platforms
Condition
when you integrate your account with a third-party service, such as content sharing at your request
Supporting quotations
Share your information with third party platforms to provide you with features, like content sharing at your request when you integrate your TikTok account with a third party service.
Qualifications & exceptions
Applies when you integrate your TikTok account with a third-party service or ask for sharing.
Sharing & Disclosure · Company practice
Information is used to facilitate research by independent researchers who meet criteria
TikTok uses your information to facilitate research conducted by independent researchers that meets certain criteria.
Details not recorded for this card
Supporting quotations
Facilitate research conducted by independent researchers that meets certain criteria.
Qualifications & exceptions
Limited to research that meets certain criteria.
Not stated here
This item does not list the criteria.
Use & Processing · Company practice
Information is used to promote the Platform or third-party services
TikTok uses your information to promote the Platform or third-party services through marketing communications, contests or promotions.
Details not recorded for this card
Supporting quotations
Promote the Platform or third party services through marketing communications, contests, or promotions.
Sharing & Disclosure · Company practice
Information is used to enable sellers to send you marketing, with TikTok as joint controller
TikTok uses your information to facilitate the sending of marketing communications by sellers to you on the Platform. It says it acts as a joint controller with the sellers in this scenario.
Details
What it does
facilitates sellers' marketing communications to you
Who
TikTok and sellers as joint controllers
Supporting quotations
Facilitate the sending of marketing communications by sellers to you on our Platform. We act as a joint controller with the sellers in this scenario.
Not stated here
The arrangements with these sellers are linked but not supplied here, so this card cannot say how responsibility is divided.
Legal Rights & Agreement Rules · Company practice
Information is used to meet legal obligations, perform public-interest tasks or protect vital interests
TikTok uses your information to comply with legal obligations, as necessary to perform tasks in the public interest, or to protect the vital interests of users and other people.
Details not recorded for this card
Supporting quotations
Comply with our legal obligations, or as necessary to perform tasks in the public interest, or to protect the vital interests of our users and other people.
Legal Rights & Agreement Rules · Company practice
Information is used to protect the Platform and defend legal rights and commercial interests
TikTok uses your information to protect the Platform and to defend its legal rights and commercial interests, and those of its affiliates, users and the public.
Details not recorded for this card
Supporting quotations
Protect the Platform and defend our legal rights and commercial interests, and those of our affiliates, users and the public.
Sharing & Disclosure · Company practice
Service providers receive all three categories of information as necessary to provide their services
TikTok engages service providers for cloud hosting and content delivery, customer and technical support, content moderation, marketing, analytics and payment services. It shares Information You Provide, Automatically Collected Information and Information From Other Sources with them as necessary to enable them to provide their services.
Details
Who
service providers
What it covers
Information You Provide, Automatically Collected Information, Information From Other Sources
Condition
as necessary to enable them to provide their services
Supporting quotations
They provide services such as: cloud hosting, and content delivery, customer and technical support, content moderation, marketing, analytics, and payment services.
We share Information You Provide, Automatically Collected Information, and Information From Other Sources with these service providers as necessary to enable them to provide their services.
Qualifications & exceptions
Sharing is stated as necessary for the providers to deliver their services.
Not stated here
The text does not name the service providers.
Sharing & Disclosure · Company practice
Limited information is shared with integrated third-party platforms and partners
TikTok shares limited information, which may include Information You Provide, Technical Information and Usage Information, with third-party platforms and partners whose services are integrated with the Platform or with whom it has a commercial relationship. Stated reasons are a seamless experience, letting your content be shared on other platforms, letting sellers view and manage your orders, and helping those partners authenticate users.
Details
Who
third-party platforms and partners
What it covers
limited information that may include Information You Provide, Technical Information and Usage Information
We share limited information which may include Information You Provide, Technical Information, and Usage Information with third party platforms and partners whose platform or services are integrated with the Platform, or with whom we have a commercial relationship.
We do this to give you a seamless experience, allow your content to be shared on other platforms, allow sellers to view and manage your orders through our shopping features, and enable third party platforms and partners to better authenticate users.
Qualifications & exceptions
Described as limited information that "may include" the listed categories.
Sharing & Disclosure · Company practice
Logging in with a third party, or sharing your content to other platforms, sends specific data
The policy gives three examples. If you log in to a third-party platform using your account, TikTok shares your basic account information and any other Information You Provide. If you sign up or log in to the Platform with account details from a third-party platform such as Facebook or Google, it shares certain Technical Information to facilitate this. If you share User Content you publish on the Platform to other social media platforms, it shares that content and related information.
Details
Condition
you log in to a third-party platform with your account
Condition
you sign up or log in with a third-party platform's account details
Condition
you share User Content to other social media platforms
Supporting quotations
log-in to a third party platform using your account, we will share your basic account information and any other Information You Provide
sign-up or log-in to the Platform using your account details from a third party platform (such as Facebook or Google), we will share certain Technical Information to facilitate this
share User Content you publish on the Platform on other social media platforms, we will share your User Content and related information
Qualifications & exceptions
Each example is tied to a specific action by you.
The examples are introduced with "Some examples include".
Sharing & Disclosure · Company practice
Advertisers get aggregate reports, and contact details only with your permission
TikTok gives advertisers reports on how their ads and other content perform. The reports contain aggregate information drawn from Information You Provide, Automatically Collected Information and Information From Other Sources. TikTok does not share information that can be used to contact you, such as name or email address, with advertisers unless you give permission.
Details
Who
advertisers
What it covers
aggregate performance reports
Exception
contact information shared if you give permission
Supporting quotations
These reports contain aggregate information of certain Information You Provide, Automatically Collected Information, and Information From Other Sources.
We don’t share information with advertisers that can be used to contact you (such as your name or email address) unless you give us your permission.
Qualifications & exceptions
Reports contain aggregate information.
Contact information is shared only if you give your permission.
Sharing & Disclosure · Company practice
Measurement and data partners receive information to build aggregate ad reports
TikTok shares Information You Provide, Technical Information and Usage Information with third-party measurement providers. They create aggregate reports that help TikTok measure advertising on the Platform and help advertisers understand its effectiveness and audience.
Details
Who
third-party measurement providers
What it covers
Information You Provide, Technical Information, Usage Information
Why
aggregate reports to measure advertising
Supporting quotations
We share Information You Provide, Technical Information and Usage Information with third party measurement providers who create aggregate reports that help us measure advertising served on the Platform and help our advertisers understand their effectiveness and their audience.
Not stated here
The text says the providers' reports are aggregate but does not say the information shared with them is aggregated.
Sharing & Disclosure · Company practice
Purchase information and device details go to sellers and their service providers
When you buy through the shopping features, TikTok shares Purchase Information with the seller and service providers acting for them, including order items, contact details and delivery information so your order can be processed. It also shares certain Technical Information about your device or connection to help secure the transaction. The policy tells you to check the product and seller location details on the Platform to see where your information will be sent.
Details
Who
sellers and service providers acting on their behalf
What it covers
Purchase Information (order items, contact details, delivery information) and certain Technical Information
Condition
when you purchase through the shopping features
Supporting quotations
When you make a purchase through the shopping features on our Platform, we share Purchase Information related to the transaction with the sellers and service providers acting on their behalf. This includes order items, contact details and delivery information so that your order can be processed.
We also share certain Technical Information about your device or connection with these parties to help ensure the security of the transaction.
please review the product and seller location details provided on the Platform for information about where your information will be sent
Qualifications & exceptions
Applies when you purchase through the shopping features.
Not stated here
The text does not say where sellers are located; it points to the seller location details shown on the Platform.
Sharing & Disclosure · Company practice
Creators, advertisers and sellers get aggregated statistics; TikTok is sometimes a joint controller
TikTok provides aggregated statistics and insights so people and businesses can understand engagement with the Platform. Creators, advertisers and sellers can get counts of views, likes, comments and shares, and information on their followers, buyers and audience. It builds this from Information You Provide and Automatically Collected Information, and in certain circumstances is a joint controller with TikTok account holders for this processing.
Details
Who
creators, advertisers and sellers
What it covers
aggregated statistics and insights
Condition
joint controller with account holders in certain circumstances
Supporting quotations
We provide aggregated statistics and insights to help people and businesses understand how people are engaging with the Platform.
We create this aggregate information using Information You Provide and Automatically Collected Information. In certain circumstances, TikTok is a joint controller with TikTok account holders for this processing.
Qualifications & exceptions
The statistics are aggregated.
Joint control applies "in certain circumstances".
Not stated here
The text does not say which circumstances make TikTok a joint controller with account holders; the linked page on joint processing is not supplied here.
Sharing & Disclosure · Company practice
Corporate Group entities process all three categories of information to support the Platform
Certain entities in TikTok's corporate group process Information You Provide, Automatically Collected Information and Information From Other Sources for TikTok as necessary to provide functions such as storage, content delivery, security, research and development, analytics, payment services, customer and technical support, and content moderation.
Details
Who
entities within TikTok's corporate group
Why
storage, content delivery, security, research and development, analytics, payment, support, moderation
Supporting quotations
These entities process Information You Provide, Automatically Collected Information, and Information From Other Sources for us, as necessary to provide certain functions, such as storage, content delivery, security, research and development, analytics, payment services, customer and technical support, and content moderation.
Qualifications & exceptions
Processing is stated as necessary to provide the listed functions.
Not stated here
The text does not name the group entities in this section.
Sharing & Disclosure · Company practice
Your account information and content can be visible to other users and the public, depending on your settings
Based on your privacy settings, your Account Information, User Content and Usage Information may be visible to other users and the public. With a public account and posts you have not individually restricted, your Account Information and User Content can be viewed or shared by anyone on or off the Platform, with or without a TikTok account. Depending on your settings, they may also appear on search engines, content aggregators and news sites.
Details
What it covers
Account Information, User Content, Usage Information
Condition
depends on your privacy settings
Condition
public account and posts not individually restricted
Supporting quotations
Based on your privacy settings, your information, including your Account Information, User Content, and Usage Information may be visible to other users and the public.
if you have a public account and have not restricted the visibility of your posts individually, your Account Information and User Content can be viewed or shared by anyone on or off the Platform, whether or not they have a TikTok account
Depending on your privacy settings, your Account Information and User Content may also appear on search engines, content aggregators, and news sites.
Qualifications & exceptions
Visibility depends on your privacy settings.
Public exposure applies to a public account where post visibility is not individually restricted.
Not stated here
The linked page on account types and privacy settings is not supplied here, so this card cannot say what each setting does.
Your information is shared with independent researchers for qualifying research
TikTok shares your information with independent researchers to facilitate research that meets certain criteria. It refers to the Legal Bases section for how that is described.
Details
Who
independent researchers
Condition
research that meets certain criteria
Supporting quotations
We share your information with independent researchers to facilitate research that meets certain criteria as described in Our Legal Bases and How We Process Your Information.
Information may be disclosed in a merger, sale, financing or other corporate transaction
TikTok says your information may be disclosed to third parties in connection with a corporate transaction, such as a merger, sale of assets or shares, reorganisation, financing, change of control, or acquisition of all or part of its business.
Details
What it does
may disclose your information to third parties
Condition
in connection with a corporate transaction
Supporting quotations
Your information may be disclosed to third parties in connection with a corporate transaction, such as a merger, sale of assets or shares, reorganisation, financing, change of control, or acquisition of all or a portion of our business.
Qualifications & exceptions
Applies in connection with a corporate transaction; the examples are introduced with "such as".
Not stated here
The text does not say whether you are notified of such a disclosure.
Sharing & Disclosure · Company practice
Information may be accessed, kept and shared with authorities and others on a good-faith belief of necessity
TikTok may access, preserve and share the information described under What Information We Collect with law enforcement agencies, public authorities, researchers, copyright holders or other third parties if it has a good faith belief this is necessary to comply with law, legal process or government requests as consistent with internationally recognised standards; to protect rights, property and safety; to investigate and enforce its Terms, Guidelines or other terms and policies; or to detect, investigate, prevent or address misleading activity, copyright infringement or other illegal activity.
Details
Who
law enforcement agencies, public authorities, researchers, copyright holders, other third parties
What it does
access, preserve and share information
Condition
good faith belief that it is necessary for one of four listed reasons
Supporting quotations
We may access, preserve, and share the information described in "What Information We Collect" with law enforcement agencies, public authorities, researchers, copyright holders, or other third parties if we have good faith belief that it is necessary to:
comply with applicable law, legal process or government requests, as consistent with internationally recognised standards
protect the rights, property, and safety of our users, copyright holders, and others, including to protect life or prevent imminent bodily harm
investigate potential violations of and enforce our Terms, Guidelines, or any other applicable terms, policies, or standards
detect, investigate, prevent, or address misleading activity, copyright infringement, or other illegal activity
To learn more about how we handle requests from law enforcement agencies and public authorities, see our
We share your information with independent researchers to facilitate research that meets certain criteria
Qualifications & exceptions
Applies when TikTok has a good faith belief the action is necessary for one of the four stated reasons.
Compliance with legal requests is tied to "internationally recognised standards".
Not stated here
The Law Enforcement Guidelines are linked but not supplied here, so this card cannot say how requests are handled.
The recipients include "researchers"; this passage does not explain how that relates to the independent researcher sharing described elsewhere.
Information such as your IP address may be given to law enforcement in a life-threatening emergency
As an example of protecting people's safety, TikTok says it may give information such as your IP address to law enforcement in an emergency where someone's life or safety is at risk. The vital-interests section adds that it may provide law enforcement or emergency services with information in urgent situations to protect health or life, generally Information You Provide and Automatically Collected Information, depending on the situation.
Details
Who
law enforcement agencies and emergency services
What it covers
information such as your IP address
Condition
an emergency or urgent situation where life, health or safety is at risk
Supporting quotations
For example, we may provide information (such as your IP address) to law enforcement in the event of an emergency where someone’s life or safety is at risk
This could also include providing law enforcement agencies or emergency services with information in urgent situations to protect health or life. We generally provide Information You Provide and Automatically Collected Information, although it depends on the specific situation.
Qualifications & exceptions
Applies to an emergency where someone's life or safety is at risk.
The set of information provided depends on the specific situation.
TikTok says it needs a legal basis and names six it relies on
TikTok says it may only use your information when it has a legal basis, which varies with the purpose of the processing. The six bases it names are contractual necessity, legitimate interests (its own, yours or another party's), consent, compliance with a legal obligation, performing a task in the public interest, and protection of vital interests.
Details
Who
TikTok
What it covers
six legal bases
Supporting quotations
We may only use your information when we have a “legal basis” to do so. We use different legal bases depending on why we use your information
These legal bases are contractual necessity, legitimate interests (ours, yours or those of another party), consent, compliance with a legal obligation, performing a task in the public interest, and protection of vital interests.
Legal Rights & Agreement Rules · User right or choice
The right to access your information always applies, whichever legal basis is used
The legal bases section explains why TikTok uses your information, how it is processed, the categories involved and the associated rights, and says those rights always include the right to access your information. It points to the Your Rights and Choices section for how to exercise rights.
Details
What it covers
right to access your information
Condition
always, for every legal basis described
Supporting quotations
This section also describes why we use your information, how this information is processed, the categories of information involved, and the associated rights (which always includes the right to access your information).
Qualifications & exceptions
The associated rights vary by basis, but access is stated as always included.
Legal Rights & Agreement Rules · Company practice
Contractual necessity applies if you can legally enter a contract, and covers all three categories
If you have the legal capacity to enter into an enforceable contract, TikTok uses Information You Provide, Automatically Collected Information and Information From Other Sources where necessary to perform the contract you enter into, which is its Terms, when you register for, access or use the Platform.
Details
Condition
you have the legal capacity to enter into an enforceable contract
What it covers
Information You Provide, Automatically Collected Information, and Information From Other Sources
Why
necessary to perform the contract (the Terms)
Supporting quotations
If you have the legal capacity to enter into an enforceable contract, we use Information You Provide, Automatically Collected Information, and Information From Other Sources where it is necessary to perform the contract you enter into (our Terms) when you register for, access, or use the Platform.
Qualifications & exceptions
Applies only if you have the legal capacity to enter into an enforceable contract.
Covers use that is necessary to perform the Terms.
Not stated here
The Terms are not supplied in this text, so the card cannot say what the contract requires.
Under contractual necessity, information provides the Platform and personalises the For You feed
On the contractual necessity basis, TikTok uses your information to let you access and use the Platform, including creating, sharing and consuming content, interacting with others, using social features, and providing products and services you buy. It also uses it to personalise features such as the For You feed, which shows videos TikTok thinks you would be interested in, and by suggesting accounts to you.
Details
Why
provide the Platform and products and services you purchase
Why
personalise features such as the For You feed and suggest accounts
Supporting quotations
We use your information to allow you to access and use the Platform, including allowing you to create, share and consume content, interact with others, utilise social features, and provide you with products and services you purchase.
We also personalise certain features and content such as providing your “For You” feed, which shows you videos that we think you would be interested in
by suggesting accounts to you
Qualifications & exceptions
Applies on the contractual necessity basis, so only where you can enter an enforceable contract.
Not stated here
The linked page about the For You feed is not supplied here.
Sharing & Disclosure · Company practice
Under contractual necessity, purchase information is shared with sellers and fulfilment providers
On the contractual necessity basis, TikTok uses your information to process orders, facilitate purchase and delivery of products, and communicate with you about your orders. This includes sharing Purchase Information with sellers, payment and transaction fulfilment providers, and other service providers.
Details
What it does
processes orders and shares Purchase Information
Who
sellers, payment and transaction fulfilment providers, other service providers
Supporting quotations
We use your information to process orders, such as to facilitate the purchase and delivery of products, and communicate with you about your orders. This includes sharing Purchase Information with Sellers, Payment and Transaction Fulfilment Providers, and Other Service Providers
Qualifications & exceptions
Applies on the contractual necessity basis.
Use & Processing · Company practice
Under contractual necessity, information is used to enforce rules, including removing content or banning accounts
On the contractual necessity basis, TikTok uses your information to enforce its Terms, Guidelines and policies, including through automated means and human moderation. This may include age-restricting or removing content, maintaining For You feed eligibility standards, or suspending or banning your account if it determines you are violating the Terms or Guidelines.
Details
Why
enforce Terms, Guidelines and policies
What it does
age-restrict or remove content, suspend or ban accounts
Condition
if TikTok determines you are violating its Terms or Guidelines
Supporting quotations
We use your information to enforce our Terms, Guidelines, and policies (including through automated means and human moderation). This may include age restricting or removing content, maintaining our For You feed eligibility standards, or suspending or banning your account if we determine that you are violating our Terms or Guidelines.
Qualifications & exceptions
Account suspension or banning applies if TikTok determines you are violating its Terms or Guidelines.
Applies on the contractual necessity basis.
Use & Processing · Company practice
Under contractual necessity, information is used for service messages, purchase support and queries
On the contractual necessity basis, TikTok uses your information to administer the Platform, such as communicating with you on service-related matters, giving updates and support about purchases, and responding to and processing queries, claims or disputes, including when you tell it about a problem or ask for a copy of your information.
Details
Why
administer the Platform, service communications, purchase support, queries, claims and disputes
Supporting quotations
We also use the information we have to administer the Platform, such as to communicate with you on service related matters, provide you with updates and support regarding any purchase you make on or through the Platform, and respond to and process your queries, claims or disputes (including when you tell us about a problem, or ask for a copy of your information).
Qualifications & exceptions
Applies on the contractual necessity basis.
Legal Rights & Agreement Rules · User right or choice
Where contractual necessity applies, you can port the information you provided
Whenever TikTok uses your information because it is necessary for the contract with you, you have the right to port the information you have provided to it.
Details
What it covers
right to port information you have provided
Condition
when the contractual necessity basis is used
Supporting quotations
Whenever we use your information on the basis that it is necessary for the contract we have with you, you have the right to port information you have provided to us.
Qualifications & exceptions
Applies when the contractual necessity basis is used.
Covers information you have provided.
Legal Rights & Agreement Rules · Company practice
Legitimate interests can be TikTok's, yours or a third party's, if not outweighed by your rights
TikTok uses your information where necessary to achieve legitimate interests, whether its own, yours or a third party's, provided those interests are not outweighed by your interests or fundamental rights and freedoms. The items that follow each name the interest relied upon and the categories of information used.
Details
Condition
necessary to achieve legitimate interests not outweighed by your interests or fundamental rights and freedoms
Supporting quotations
We use your information where this is necessary to achieve legitimate interests - whether belonging to us, you, or a third party - provided these interests are not outweighed by your interests or fundamental rights and freedoms.
Qualifications & exceptions
Applies only if the interests are not outweighed by your interests or fundamental rights and freedoms.
Use & Processing · Company practice
Legitimate interest: features that let other users include your videos, such as Duet and Stitch
To enable users to create content with interactive features such as Duet and Stitch, other users can include your videos in theirs if you allow this in your settings. The interest relied upon is providing tools that inspire creativity and collaboration and create chances to reach new audiences, using Information You Provide and Automatically Collected Information.
Details
Condition
if you allow this in your settings
Why
tools for creativity, collaboration, enjoyment and reaching new audiences
What it covers
Information You Provide and Automatically Collected Information
Supporting quotations
Interactive features, like Duet and Stitch, enable other users to include your videos in their videos (if you allow this in your settings).
To provide users with tools to inspire creativity, collaboration, and enjoyment, and to create opportunities for users to reach new audiences.
Information used: Information You Provide and Automatically Collected Information.
Enable users to create content with interactive features.
Qualifications & exceptions
Other users can include your videos only if you allow this in your settings.
Use & Processing · Company practice
Legitimate interest: your account may be suggested to other users, including after a contact sync
TikTok may suggest your account to other users, including when a user syncs their contacts with the Platform. The interest relied upon is helping users quickly and efficiently find and connect with each other, using all three categories of information.
Details
What it does
suggest your account to other users, including after another user syncs contacts
Why
help users find and connect
What it covers
Information You Provide, Automatically Collected Information, and Information From Other Sources
Supporting quotations
We may suggest your account to other users, including when a user chooses to sync their contacts with the Platform.
To enable users to quickly and efficiently find and connect with other users.
Information used: Information You Provide, Automatically Collected Information, and Information From Other Sources.
Suggest your account to other users.
Use & Processing · Company practice
Legitimate interest: every user, including those who opted out of personalised ads, sees generic ads
TikTok shows all users generic ads, including users who chose not to receive personalised ads. It relies on a legitimate interest in keeping the Platform free of charge, and processes limited categories of information, for example to serve ads by country or language, so the advertising is useful to advertisers. It uses Information You Provide and Automatically Collected Information.
Details
What it does
shows generic ads to all users
Condition
including users who chose not to receive personalised ads
Why
keep the Platform free and make advertising useful to advertisers
Supporting quotations
We show all users generic ads, including those who have chosen not to receive personalised ads.
We show generic ads to keep the Platform free of charge. We process limited categories of your information to make sure our advertising service is useful to our advertisers (for example, to serve ads to users in a particular country or to users who speak the same language).
Information used: Information You Provide and Automatically Collected Information.
Provide all users with generic advertising.
Qualifications & exceptions
Applies to all users, including those who chose not to receive personalised ads.
Described as limited categories of information.
Cross-references
contrast (model-proposed): With your consent, personalised ads use your activity on and off the Platform — Personalised ads depend on your consent, while generic ads are shown to every user, including users who chose not to receive personalised ads. Declining personalised ads therefore does not mean seeing no ads.
Use & Processing · Company practice
Legitimate interest: helping creators, sellers and advertisers measure ads and content
TikTok provides measurement and analytics services that help creators, sellers and advertisers measure the effectiveness and distribution of ads and other content viewed on the Platform. The policy states the interest relied upon and the information used immediately after this description.
Details
Who
creators, sellers and advertisers
Why
measure effectiveness and distribution of ads and content
Supporting quotations
We help creators, sellers and advertisers measure the effectiveness and distribution of ads and other content viewed on the Platform.
For users who cannot contract, legitimate interest covers providing the Platform
For users who cannot enter into an enforceable contract, TikTok uses their information to let them access and use the Platform, including creating, sharing and consuming content, interacting with others, using features and getting products and services they buy. The interest relied upon is providing and maintaining products that let these users communicate, discover, engage and express themselves, and the users' own interest in easy and intuitive access. It uses all three categories of information.
Details
Condition
users who cannot enter into an enforceable contract
Why
provide and maintain products and features for communication, discovery and expression
What it covers
Information You Provide, Automatically Collected Information, and Information From Other Sources
Supporting quotations
We use your information to allow you to access and use the Platform, including allowing you to create, share, and consume content, interact with others, utilise features, and provide you with products and services you purchase.
To provide, support, and maintain products and features that enable users who can’t enter into an enforceable contract with us to communicate, discover, and engage with content and express themselves.
We also rely on the legitimate interest of our users in being able to access the Platform in an easy and intuitive manner
Information used: Information You Provide, Automatically Collected Information, and Information From Other Sources.
Provide you with the Platform
Qualifications & exceptions
Applies to users who cannot enter into an enforceable contract with TikTok.
Use & Processing · Company practice
For users who cannot contract, legitimate interest covers personalising features such as the For You feed
For users who cannot enter into an enforceable contract, TikTok uses information to personalise features such as the For You feed, which shows videos it thinks the user would be interested in, and by suggesting accounts. The interest relied upon is providing features that help these users discover content and people relevant to their interests. It uses all three categories of information.
Details
Why
personalise features such as the For You feed
Condition
users who cannot enter into an enforceable contract
What it covers
Information You Provide, Automatically Collected Information, and Information From Other Sources
Supporting quotations
We use your information to personalise certain features and content on the Platform, such as providing your “For You” feed, which shows you videos that we think you would be interested in
To provide, support, and maintain products and features that enable users who can’t enter into an enforceable contract with us to communicate, discover, create and engage with content and users relevant to their interests.
Information used: Information You Provide, Automatically Collected Information, and Information From Other Sources.
Personalise features and content
Qualifications & exceptions
Applies to users who cannot enter into an enforceable contract.
Not stated here
The linked page about the For You feed is not supplied here.
Use & Processing · Company practice
For users who cannot contract, legitimate interest covers enforcing rules and protecting vulnerable users
For users who cannot enter into an enforceable contract, TikTok uses information to enforce its Terms, Guidelines and policies through automated means and human moderation, which may include age-restricting or removing content or suspending or banning an account for violations. The interest relied upon is keeping the Platform free of harmful or inappropriate content, investigating suspicious activity, and protecting users who may be particularly vulnerable to exploitation or harm. It uses all three categories of information.
Details
Why
enforce rules and protect users who may be vulnerable
What it covers
Information You Provide, Automatically Collected Information, and Information From Other Sources
Supporting quotations
We use your information to enforce our Terms, Guidelines, and policies (including through automated means and human moderation). This may include age restricting or removing content, maintaining our For You feed eligibility standards, or suspending or banning your account if we determine that you are violating our Terms or Guidelines.
To keep the Platform free of harmful or inappropriate content, to investigate suspicious activity or breaches of our Terms, Guidelines, or policies and to protect the safety of users who can’t enter into an enforceable contract with us, including to prevent exploitation or other harm to which such individuals may be particularly vulnerable.
Information used: Information You Provide, Automatically Collected Information, and Information From Other Sources.
Enforce our Terms, Guidelines, or policies.
Qualifications & exceptions
Applies to users who cannot enter into an enforceable contract.
Suspension or banning applies if TikTok determines the Terms or Guidelines are being violated.
Use & Processing · Company practice
For users who cannot contract, legitimate interest covers service updates and queries
For users who cannot enter into an enforceable contract, TikTok uses information to administer the Platform, such as communicating with users and responding to and processing queries, claims or disputes. The interest relied upon is sharing meaningful service-related updates and processing those queries, claims and disputes. It uses all three categories of information.
Details
Why
communicate with users and process queries, claims and disputes
What it covers
Information You Provide, Automatically Collected Information, and Information From Other Sources
Supporting quotations
We use the information we have to administer the Platform, such as to communicate with users and respond to and process queries, claims or disputes (including when you tell us about a problem, or ask for a copy of your information).
To share meaningful updates with our users who can’t enter into an enforceable contract with us about service-related matters, and process their queries, claims and disputes.
Information used: Information You Provide, Automatically Collected Information, and Information From Other Sources.
Administer the Platform.
Qualifications & exceptions
Applies to users who cannot enter into an enforceable contract.
Legal Rights & Agreement Rules · User right or choice
For these legitimate-interest uses, you can object and request restriction
Whenever TikTok uses your information because it is necessary for legitimate interests, including the uses for people under the age of majority, you can object to that use and request restriction of it.
Details
What it covers
right to object and request restriction
Condition
when legitimate interests are the basis
Supporting quotations
Whenever we use your information on the basis that it is necessary for legitimate interests, you can object to, and request restriction of, such usage.
Qualifications & exceptions
Applies when the legitimate interests basis is used.
Legal Rights & Agreement Rules · User right or choice
When TikTok asks for consent, you can revoke it through device permissions or in-app settings
TikTok says it asks for your consent to access or use your information for specific purposes. If it does, you will always be able to revoke consent through your device permissions or in-app settings.
Details
Condition
where TikTok asks for consent for a specific purpose
What it does
revoke consent through device permissions or in-app settings
Supporting quotations
We ask for your consent to access or use your information for specific purposes. If we do, you’ll always be able to revoke your consent through your device permissions or in-app settings.
Qualifications & exceptions
Applies where TikTok asks for consent for a specific purpose.
Use & Processing · Company practice
With your consent, personalised ads use your activity on and off the Platform
With your consent, TikTok serves you personalised ads on the Platform based on your activity on and off the Platform. With your consent and in regions where it is available, it also uses certain information associated with your TikTok account to personalise ads served through its advertising network. It uses all three categories of information for this purpose.
Details
Condition
with your consent
Condition
in regions where advertising-network personalisation is available
What it covers
Information You Provide, Automatically Collected Information, and Information From Other Sources
Supporting quotations
With your consent, we serve you personalised ads on the Platform based on your activity on and off the Platform.
With your consent and in regions where it is available, we use certain information associated with your TikTok user account to personalise ads served via our advertising network.
Information used: Information You Provide, Automatically Collected Information, and Information From Other Sources for this purpose.
Personalised advertising.
Qualifications & exceptions
Personalised ads require your consent.
Advertising-network personalisation also depends on availability in your region.
Not stated here
The TikTok Ad Network Privacy Policy is linked but not supplied here, so this card cannot describe the advertising network's processing.
With your consent, TikTok stores your payment card information for future transactions
With your consent, TikTok stores your payment card information to facilitate future transactions through the Platform. The information used is Information You Provide.
Details
Condition
with your consent
What it does
stores payment card information
Why
facilitate future transactions
Supporting quotations
With your consent, we store your payment card information to facilitate future transactions through our Platform.
Information used: Information You Provide
Retain your payment card information.
Qualifications & exceptions
Storage happens with your consent.
Not stated here
The text does not say how long stored card information is kept.
Sharing & Disclosure · Company practice
With your consent, sellers can send you marketing and may receive your email address
With your consent, TikTok facilitates the sending of marketing communications to you by sellers on the Platform and/or shares your email address with sellers so they can send you marketing. The information used is Information You Provide and Automatically Collected Information.
Details
Condition
with your consent
What it does
facilitates sellers' marketing and may share your email address with sellers
Supporting quotations
With your consent, we facilitate the sending of marketing communications to you by sellers on our Platform and/or share your email address with sellers for the purpose of sending marketing communications to you.
Information used: Information You Provide and Automatically Collected Information
Sellers’ marketing communications.
Qualifications & exceptions
Applies with your consent.
Data Access & Collection · Company practice
Device permissions you grant, such as camera, photos and location, control what TikTok receives
TikTok collects information that you allow it to receive through your device-based settings, such as access to your camera, photos and location services, and uses it for the purposes described in the policy. All three categories of information are listed as used for this.
Details
Condition
information you allow through device-based settings such as camera, photos and location services
Why
the purposes described in this Privacy Policy
Supporting quotations
We collect information that you allow us to receive through your device-based settings (such as access to your camera, photos and location services) which we use for subsequent purposes as described in this Privacy Policy.
Information used: Information You Provide, Automatically Collected Information, and Information From Other Sources
Device permissions.
Qualifications & exceptions
Collection depends on the access you allow through device settings.
Legal Rights & Agreement Rules · User right or choice
You can withdraw consent at any time, but earlier processing stays lawful
Whenever TikTok uses your information based on your consent, you can withdraw consent at any time. Withdrawal does not affect the lawfulness of processing done on the basis of your consent before you withdrew it. The policy gives instructions for withdrawing consent for applicable personalised ads settings.
Details
What it does
withdraw consent at any time
Condition
where TikTok uses your information based on your consent
Exception
earlier processing remains lawful
Supporting quotations
Whenever we use your information based on your consent, you can withdraw your consent at any time. However, your withdrawal of consent will not affect the lawfulness of processing your information based on your consent prior to your withdrawal of consent.
You can withdraw your consent for applicable personalised ads related settings by following these
Qualifications & exceptions
Applies where TikTok relies on your consent.
Withdrawal is not retroactive for processing done before the withdrawal.
Not stated here
The linked instructions for withdrawing consent to personalised ads are not supplied here.
Legal Rights & Agreement Rules · User right or choice
Where processing rests on your consent, you can port the information you provided
You also have the right to port information you have provided to TikTok that it uses based on your consent.
Details
What it covers
right to port information you provided
Condition
used based on your consent
Supporting quotations
You also have the right to port information you have provided to us that we use based on your consent.
Qualifications & exceptions
Applies to information you provided that TikTok uses based on your consent.
Legal Rights & Agreement Rules · Company practice
Information may be used to meet legal obligations, including regulators' and law enforcement requests
TikTok may use your information, including your Account Information or User Content, where necessary to comply with a legal obligation. This includes obligations to communicate with you, take measures to keep users safe, or comply with a valid legal request such as an order or disclosure request from regulators, law enforcement agencies or courts. It generally uses Information You Provide and Automatically Collected Information, depending on the situation.
Details
Condition
necessary to comply with a legal obligation or valid legal request
What it covers
generally Information You Provide and Automatically Collected Information
Supporting quotations
We may use your information including your Account Information or User Content where it is necessary to comply with a legal obligation. This includes situations where we have obligations to communicate with you, take measures to ensure the safety of our users, or comply with a valid legal request such as an order or disclosure request from regulators, law enforcement agencies or courts.
We generally use Information You Provide and Automatically Collected Information, although it depends on the specific situation.
Qualifications & exceptions
Applies where necessary to comply with a legal obligation.
Which information is used depends on the specific situation.
Legal Rights & Agreement Rules · Company practice
Information may be used for public-interest tasks, and you can object or seek restriction
TikTok may use your information where necessary to perform a task in the public interest, including research, preventing and detecting crime, safeguarding children and promoting public safety, security and integrity as laid down by applicable law. It generally uses Information You Provide and Automatically Collected Information, depending on the situation. Where this basis applies, you have the right to object to and seek restriction of the use.
Details
Why
research, preventing and detecting crime, safeguarding children, public safety, security and integrity
What it covers
right to object and seek restriction
Supporting quotations
We may use your information where it is necessary to perform a task in the public interest, including undertaking research, preventing and detecting crime, safeguarding children and promoting public safety, security, and integrity as laid down by applicable law. We generally use Information You Provide and Automatically Collected Information, although it depends on the specific situation.
When we use your information on the basis that it is necessary for a task carried out in the public interest, you have the right to object to, and seek restriction of, our usage.
Qualifications & exceptions
Applies where necessary for a task carried out in the public interest, as laid down by applicable law.
Which information is used depends on the specific situation.
Use & Processing · Company practice
Information may be used to protect life or safety, including by scanning Messages where law permits
TikTok may use your information where necessary to protect your or someone else's life, physical integrity or safety. This could include scanning Messages and their metadata where permitted by law, and providing information to law enforcement or emergency services in urgent situations to protect health or life. It generally provides Information You Provide and Automatically Collected Information, depending on the situation.
Details
What it does
may scan Messages and associated metadata
Condition
where permitted by law
Who
law enforcement agencies and emergency services
Supporting quotations
We may use your information where it is necessary to protect your or someone else's life, physical integrity, or safety. This could include scanning Messages and associated metadata where permitted by law.
This could also include providing law enforcement agencies or emergency services with information in urgent situations to protect health or life. We generally provide Information You Provide and Automatically Collected Information, although it depends on the specific situation.
Qualifications & exceptions
Scanning Messages applies "where permitted by law".
Applies where necessary to protect life, physical integrity or safety.
Which information is provided depends on the specific situation.
Not stated here
The linked page on direct message scanning is not supplied here.
Rights apply generally or only in some circumstances, and TikTok Ireland responds
You have rights and choices about your information. Some apply generally and others only in certain circumstances, and depending on the scenario they may be subject to limitations. TikTok Ireland is responsible for responding to your request within the relevant legal periods and, if necessary, liaises with TikTok UK.
Details
Who
TikTok Ireland, liaising with TikTok UK if necessary
Condition
some rights only in certain circumstances; possible limitations
Supporting quotations
Some of these rights apply generally, while others will only apply in certain circumstances. Depending on the scenario, these rights may be subject to some limitations.
TikTok Ireland will be responsible for responding to your request within the relevant periods provided by law. If necessary to resolve your request, TikTok Ireland will liaise with TikTok UK.
Qualifications & exceptions
Some rights apply only in certain circumstances.
Rights may be subject to limitations depending on the scenario.
Not stated here
The text does not state the response periods; it refers to the relevant periods provided by law.
Legal Rights & Agreement Rules · User right or choice
You can ask for confirmation, details and a copy of your information, free of charge
You can ask TikTok, free of charge, to confirm what information it processes about you, to provide certain information about the processing, and for a copy of your information. In-app controls let you see information available to other users through the "me" tab and request a copy with the "Download your data" tool.
Details
What it does
ask for confirmation, information about processing, and a copy
What it covers
in-app: the "me" tab and the Download your data tool
Supporting quotations
You can ask us, free of charge, to confirm what information we process about you, to provide certain information about the processing, and for a copy of your information.
access your information that is available to other users when you navigate to the "me" tab on your account
request a copy of your information by using the “Download your data” tool
Not stated here
The linked instructions for requesting your data are not supplied here.
Legal Rights & Agreement Rules · User right or choice
You can delete content or your account in-app, or ask TikTok to delete your information
You can delete or ask TikTok to delete your information. In-app controls let you delete content posted on your account, such as User Content and Account Information, delete your full account, or request deletion of a particular piece of content using the in-app reporting feature.
Details
What it does
delete or ask TikTok to delete your information
What it covers
posted content, Account Information, your full account, a particular piece of content
Supporting quotations
You can delete or ask us to delete your information.
delete the content posted on your account, such as your User Content and your Account Information
delete your full account
request the deletion of a particular piece of content using the in-app reporting feature
Not stated here
This passage states no conditions, exceptions or timeline for deletion; the linked instructions and reporting help pages are not supplied here.
Retention after deletion is not addressed in this passage.
Cross-references
contrast (model-proposed): Information is kept as long as necessary for the Platform, other purposes and legal needs — You can delete content or your account or ask TikTok to delete your information, while TikTok also says it retains information when necessary for legal obligations, a legitimate business interest or legal claims. The policy does not say how these fit together.
Legal Rights & Agreement Rules · User right or choice
You can correct inaccurate information, much of it in-app
You can change or ask TikTok to change or correct your information where it is not accurate. You can change or correct much of it through in-app controls and settings, such as Account Information and video content.
Details
What it does
change or ask to correct inaccurate information
Condition
where the information is not accurate
Supporting quotations
You can change or ask us to change or correct your information where that information is not accurate. You can change or correct much of your information through the in-app controls and settings (such as your Account Information and video content).
Qualifications & exceptions
Applies where the information is not accurate.
Legal Rights & Agreement Rules · User right or choice
You can receive your information in a portable format where contract or consent is the basis
You have the right to data portability where TikTok relies on contractual necessity or consent. You can receive your information in a structured, commonly used and machine-readable format and share it with a third party, by choosing "Download your data" in settings or through TikTok's Data Portability API.
Details
Condition
where TikTok relies on contractual necessity or consent
What it does
receive your information in a structured, machine-readable format and share it
Supporting quotations
You have the right to data portability in circumstances where we rely on contractual necessity or consent as our legal basis. This means that you have the right to receive your information in a structured, commonly used, and machine-readable format and to share it with a third party.
You can exercise your right of portability by choosing to “Download your data” in your settings.
You can also port your TikTok data through TikTok’s Data Portability API.
Qualifications & exceptions
Applies where TikTok relies on contractual necessity or consent as its legal basis.
Not stated here
The linked instructions and Data Portability API page are not supplied here.
Legal Rights & Agreement Rules · User right or choice
You can object to processing for public-interest tasks, legitimate interests or research, in certain circumstances
You have the right to object to the processing of your information in certain circumstances: when TikTok performs a public-interest task, pursues its or a third party's legitimate interests, or processes data to facilitate scientific or historical research in certain circumstances. You should provide relevant information, including the processing you object to, why, and how it affects you. TikTok will stop that processing unless it has compelling legitimate grounds to continue or needs it for legal claims.
Details
Condition
public-interest task, legitimate interests, or facilitating scientific or historical research
Exception
TikTok may continue with compelling legitimate grounds or for legal claims
Supporting quotations
This right applies when we are performing a task in the public interest, pursuing our legitimate interests or those of a third party, or when your data is processed for the purpose of facilitating scientific or historical research in certain circumstances.
In submitting an objection request, please provide all relevant information, including the processing activity you are objecting to, why you want to object and how the processing activity affects you, and any additional information that you think will help us review your request.
We will stop the particular processing if we don't have compelling legitimate grounds to continue that processing or don’t need it for legal claims.
Qualifications & exceptions
Applies in certain circumstances: public-interest tasks, legitimate interests, or facilitating scientific or historical research.
TikTok stops the processing unless it has compelling legitimate grounds or needs it for legal claims.
Not stated here
The linked right-to-object page is not supplied here.
Legal Rights & Agreement Rules · User right or choice
You can request restriction of processing in four listed situations
You have the right to request restriction of the processing of your information where (a) you are challenging its accuracy, (b) it has been unlawfully processed but you oppose deletion, (c) you need it retained for a legal claim, or (d) you have objected and are awaiting the outcome.
Details
Condition
one of four listed situations (a) to (d)
Supporting quotations
You have the right to request the restriction of the processing of your information where (a) you are challenging the accuracy of the information, (b) the information has been unlawfully processed, but you are opposing the deletion of that information, (c) where you need the information to be retained for the pursuit or defence of a legal claim, or (d) you have objected to processing and you are awaiting the outcome of that objection request.
Qualifications & exceptions
Applies only in the four listed situations.
Legal Rights & Agreement Rules · Procedure
Rights requests go through a webform, and TikTok may ask you to verify identity
To exercise the rights listed, you contact TikTok through its webform. Before responding, TikTok may require you to verify your identity or account details or provide additional information so it can understand your request.
Details
What it does
contact TikTok through the webform to exercise rights
Condition
you may be required to verify identity or account details or provide more information
Supporting quotations
To exercise any of the above rights, please contact us through our
Before we can respond to a request to exercise one or more of the rights listed above, you may be required to verify your identity or your account details or provide additional information so that we can understand your request.
Qualifications & exceptions
Verification or additional information may be required before TikTok responds.
Not stated here
The linked webform is not supplied here, so the card cannot say what it asks for.
Legal Rights & Agreement Rules · User right or choice
If unhappy with a response, you can contact TikTok or complain to a data protection authority
TikTok encourages you to contact it if you are not satisfied with how it responded to a rights request. You also have the right to lodge a complaint with the Irish Data Protection Commission, which it names as TikTok Ireland's lead supervisory authority, or with your local supervisory authority.
Details
What it does
contact TikTok or lodge a complaint with the Irish Data Protection Commission or a local supervisory authority
Supporting quotations
We encourage you to “Contact us” if you are not satisfied with how we have responded to any of your rights requests. You also have the right to lodge a complaint with the Irish Data Protection Commission (TikTok Ireland’s lead supervisory authority) or with your local supervisory authority.
Legal Rights & Agreement Rules · User right or choice
Your privacy settings also control who sees your information
In addition to the rights listed, you can control privacy settings for your account. Elsewhere the policy says that, based on your privacy settings, your Account Information, User Content and Usage Information may be visible to other users and the public.
Details
What it does
control privacy settings for your account
What it covers
visibility of Account Information, User Content and Usage Information
Supporting quotations
In addition to these rights, you can control privacy settings for your account.
Based on your privacy settings, your information, including your Account Information, User Content, and Usage Information may be visible to other users and the public.
Qualifications & exceptions
Visibility depends on the privacy settings you choose.
Not stated here
The linked privacy settings page is not supplied here, so the card cannot list the settings.
Legal Rights & Agreement Rules · User right or choice
EU users can choose whether TikTok combines their activity data with affiliated services such as TikTok Shop
If you are a user in the EU, TikTok offers you the choice of whether to combine and cross-use your TikTok activity data with its affiliated services, like TikTok Shop, where legally required.
Details
Where
users in the EU
Condition
where legally required
What it does
choose whether TikTok combines and cross-uses activity data with affiliated services
Supporting quotations
If you are a user in the EU, we offer you the choice of whether to combine and cross-use your TikTok activity data with our affiliated services, like TikTok Shop, where legally required.
Your choice regarding the use of information across different services.
Qualifications & exceptions
Offered to users in the EU, where legally required.
Not stated here
The text does not say whether users in the UK or Switzerland get this choice.
Affiliated services other than TikTok Shop are not named; the linked page on this choice is not supplied here.
Security & Safeguards · Company commitment
TikTok says it maintains technical, administrative and physical security measures
TikTok says it maintains appropriate technical, administrative and physical security measures designed to protect your information from unauthorised access, theft, disclosure, modification or loss, and that it regularly reviews them in light of new technology and methods.
Details
Who
TikTok
What it does
maintains technical, administrative and physical security measures and reviews them regularly
Supporting quotations
We maintain appropriate technical, administrative, and physical security measures that are designed to protect your information from unauthorised access, theft, disclosure, modification, or loss. We regularly review our security measures to consider available new technology and methods.
Qualifications & exceptions
The measures are described as designed to protect information, which is not a guarantee of outcome.
Not stated here
The text does not name specific security measures, certifications or breach notification practices.
Retention & Deletion · Company practice
Information is kept as long as necessary for the Platform, other purposes and legal needs
TikTok retains information for as long as necessary to provide the Platform and for the other purposes set out in the policy. It also retains information when necessary to comply with contractual and legal obligations, when it has a legitimate business interest such as improving the Platform and its safety, security and stability, and for the exercise or defence of legal claims.
Details
What it does
retains information
Condition
as long as necessary for the Platform and other purposes, legal obligations, legitimate business interest, legal claims
Supporting quotations
We retain information for as long as necessary to provide the Platform and for the other purposes set out in this Privacy Policy. We also retain information when necessary to comply with contractual and legal obligations, when we have a legitimate business interest to do so (such as improving and developing the Platform, and enhancing its safety, security and stability), and for the exercise or defence of legal claims.
Not stated here
The text gives no fixed retention period.
Cross-references
contrast (model-proposed): You can delete content or your account in-app, or ask TikTok to delete your information — You can delete content or your account or ask TikTok to delete your information, while TikTok also says it retains information when necessary for legal obligations, a legitimate business interest or legal claims. The policy does not say how these fit together.
Retention & Deletion · Company practice
Retention periods vary; core account data is kept while you have an account
Retention periods differ by type of information and purpose. For example, when TikTok processes your information to provide the Platform, it keeps that information for as long as you have an account, including Account Information, User Content and Messages.
Details
What it covers
Account Information, User Content and Messages
When
for as long as you have an account
Supporting quotations
The retention periods will be different depending on the type of information and the purposes for which we use the information. For example, when we process your information to provide you with the Platform, we keep this information for as long as you have an account. This information includes your Account Information, User Content, and Messages.
Qualifications & exceptions
Retention varies by type of information and purpose.
The account example covers information used to provide the Platform.
Not stated here
The text does not say how long information is kept after an account ends, or give periods for other types of information.
If you break the rules, content can be hidden from public view while TikTok keeps the information
If you violate the Guidelines or Terms, TikTok may remove Information You Provide, including Account Information and User Content, from public view immediately but keep your information as is necessary to process the violation.
Details
Condition
if you violate the Guidelines or Terms
What it does
removes information from public view and keeps it as necessary to process the violation
Supporting quotations
If you violate our Guidelines or Terms, we may remove Information You Provide including your Account Information and/or User Content from public view immediately but keep your information as is necessary to process the violation.
Qualifications & exceptions
Applies if you violate the Guidelines or Terms.
Not stated here
The text does not say how long information is kept to process a violation.
Cross-references
exception to (model-proposed): Retention periods vary; core account data is kept while you have an account — The general rule keeps account data while you have an account; content-rule violations can lead to removal from public view while TikTok keeps the information as needed to process the violation.
Retention & Deletion · Company practice
Information is stored on servers in the United States, Malaysia and Singapore
TikTok stores the information described under What Information We Collect on servers located in the United States, Malaysia and Singapore.
Details
What it does
stores information on servers
Where
United States, Malaysia, Singapore
Supporting quotations
We store the information described in the “What Information We Collect” section in servers located in the United States, Malaysia and Singapore.
Sharing & Disclosure · Company practice
Corporate Group entities outside your country get limited remote access
Certain Corporate Group entities located outside your country of residence are given limited remote access to the information so they can provide certain functions. TikTok says this access is limited, secure and only granted where necessary under strict security controls and authorisation approval protocols.
Details
Who
Corporate Group entities located outside your country of residence
What it does
limited remote access to the information
Condition
only where necessary under strict security controls and authorisation approval protocols
Supporting quotations
Certain entities in our Corporate Group, located outside your country of residence
are given limited remote access to this information so they can provide certain functions
This access is limited, secure and only granted where necessary under strict security controls and authorisation approval protocols.
Qualifications & exceptions
Access is limited and granted only where necessary.
Not stated here
The list of entities and countries is linked but not supplied here.
Sharing & Disclosure · Company practice
Service providers, partners and other third parties may be located outside your country
TikTok shares the information described under What Information We Collect with service providers, partners and other third-party entities, which can be located outside your country of residence. It says these entities commit to processing information in compliance with applicable privacy laws and to implementing appropriate security measures.
Details
Who
service providers, partners and other third parties, possibly outside your country of residence
What it does
commit to comply with applicable privacy laws and security measures
Supporting quotations
We share “What Information We Collect” with service providers, partners and other third party entities, as described in “How We Share Your Information”. These third parties can be located outside your country of residence.
These entities commit to processing information in compliance with applicable privacy laws and to implementing appropriate security measures to protect your information.
Not stated here
The text does not say which countries these third parties are in.
Legal Rights & Agreement Rules · Company practice
Transfers out of the EEA, UK or Switzerland rely on adequacy decisions or standard contractual clauses
When TikTok transfers your information outside the EEA, the UK or Switzerland, it says it ensures an adequate level of protection by relying on adequacy decisions, where a country is recognised as adequate, or on standard contractual clauses for certain Corporate Group entities and for third parties in countries without an adequacy decision. You can ask for a copy of the adequacy decisions or standard contractual clauses through the Contact Us details. The policy lists a third basis, Article 49, for purchase information, which is covered in its own card.
Details
Condition
transfers outside the EEA, the UK or Switzerland
What it does
rely on adequacy decisions or standard contractual clauses
What it does
request a copy through the Contact Us details
Supporting quotations
When we transfer your information outside of the EEA, the UK, or Switzerland, we ensure it benefits from an adequate level of data protection by relying on:
We transfer your information as described in “What Information We Collect” to some countries with adequacy decisions
We rely on standard contractual clauses to transfer information as described in “What Information We Collect” to certain entities in our Corporate Group
For a copy of these adequacy decisions or standard contractual clauses, please contact us via the details provided in the “Contact us” section below.
Qualifications & exceptions
Adequacy decisions apply to some countries only, such as those listed on the linked page.
Standard contractual clauses apply to certain Corporate Group entities and to third parties in countries without an adequacy decision.
Not stated here
The linked list of countries, the Commission decisions and the standard contractual clauses are not supplied here, so the card cannot say which countries or entities are covered.
Legal Rights & Agreement Rules · Company practice
Purchase information can go to sellers in countries without adequacy decisions where necessary for the purchase
In the absence of an adequacy decision, TikTok says it relies on Article 49(1)(b) and (c) GDPR to transfer Purchase Information to sellers and transaction fulfilment providers in countries without an adequacy decision. It does so when necessary to provide shopping features, to facilitate purchase and delivery, or to process your orders.
Details
What it covers
Purchase Information
Who
sellers and transaction fulfilment providers in countries without an adequacy decision
Condition
when necessary for shopping features, purchase and delivery, or processing orders
Supporting quotations
In the absence of an adequacy decision, We rely on Article 49 (1)(b) and (c) GDPR to transfer
to sellers and transaction fulfilment providers in countries without an adequacy decision when necessary to provide shopping features to facilitate the purchase and delivery of products, goods and services, or to process your orders
Qualifications & exceptions
Applies to Purchase Information sent to sellers and transaction fulfilment providers.
Applies only when necessary for shopping features, purchase and delivery, or processing orders.
Not stated here
The text does not say what the cited GDPR provisions require; the linked description of Purchase Information is not supplied here.
Account & Service Control · Restriction or exception
You must be at least 13 to use the Platform, and underage accounts can be reported
You must be at least 13 years old to use the Platform. If you believe a user is below the minimum age, you can contact TikTok through its webform.
Details
Condition
at least 13 years old to use the Platform
Supporting quotations
You must be at least 13 years old to use the Platform. If you believe that there is a user who is below this minimum age, please contact us using this
Not stated here
The linked underage account reporting page is not supplied here.
Account & Service Control · Company practice
Users under 18 get an age-appropriate experience with some features unavailable
To give users younger than 18 an age-appropriate experience, certain features are not available to them. The policy refers to a Help Centre page for details.
Details
Condition
users younger than 18
What it does
certain features are not available
Supporting quotations
To provide users younger than 18 with an age-appropriate experience, certain features are not available.
Not stated here
The text does not say which features are unavailable; the Help Centre page is not supplied here.
Account & Service Control · Context
Guardians are pointed to a Guardian's Guide and Family Pairing
If you are the guardian of a teen, TikTok points you to its Guardian's Guide, which it says contains information and resources about the Platform and the tools and controls you or your teen can use, including Family Pairing features.
Details
Who
guardians of teens
What it covers
Guardian's Guide and Family Pairing features
Supporting quotations
If you are the guardian of a teen, our
contains information and resources to help you understand the Platform and the tools and controls you or your teen can use, including “Family Pairing” features.
Not stated here
The Guardian's Guide is linked but not supplied here, so the card cannot say what Family Pairing controls do.
Legal Rights & Agreement Rules · Company commitment
TikTok may change the policy and says it will notify you of material changes
TikTok may amend or update the policy from time to time. It says it will notify you of material changes by a notice through the Platform or by other means, and that the Last Updated date at the top reflects the effective date of the changes.
Details
What it does
may amend the policy and notifies material changes by a notice through the Platform or other means
When
Last Updated date reflects the effective date of changes
Supporting quotations
We may amend or update this Privacy Policy from time to time. We will notify you of any material changes to this policy by a notice provided through the Platform or by other means.
The “Last Updated” date at the top of this policy reflects the effective date of such policy changes.
Qualifications & exceptions
Notice is promised for material changes only.
Not stated here
The text does not say how much advance notice is given or when a change takes effect relative to notice.
Legal Rights & Agreement Rules · Procedure
You can contact TikTok about the policy through a webform or reach its Data Protection Officer
You can contact TikTok about the policy through its webform, which is also the route for rights requests. You can also reach TikTok's Data Protection Officer through a separate link.
Details
What it does
contact TikTok through a webform or reach the Data Protection Officer
Supporting quotations
You can contact us about this Privacy Policy through our
You can reach TikTok's Data Protection Officer
To exercise any of the above rights, please contact us through our
Not stated here
The webform and Data Protection Officer pages are linked but not supplied here.
Postal contact addresses are listed for the EEA, Switzerland and the UK
TikTok gives postal addresses for contact. For users in the EEA and Switzerland the address is TikTok Technology Limited in Dublin, Ireland; for users in Switzerland the appointed representative is TikTok Switzerland GmbH in Zürich; and for users in the United Kingdom it is TikTok Information Technologies UK Limited in London.
Details
Where
EEA and Switzerland; Switzerland; United Kingdom
What it covers
postal addresses and Swiss representative
Supporting quotations
For users in the European Economic Area and Switzerland: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.
For users in Switzerland, our appointed representative is: TikTok Switzerland GmbH, Talacker 41, 8001, Zürich, Switzerland.
For users in the United Kingdom: TikTok Information Technologies UK Limited, Kaleidoscope, 4 Lindsey Street, London, EC1A 9HP, United Kingdom.
Legitimate interest for measurement: showing creators, sellers and advertisers how content performed
The interest relied upon for measurement services is enabling creators, sellers and advertisers to see how their ads or content performed and who viewed or interacted with them, so they can make informed decisions. TikTok says this helps keep ads and other content relevant and keeps the Platform free for all users. It uses all three categories of information.
Details
Why
let creators, sellers and advertisers understand how ads and content performed and who viewed them
What it covers
Information You Provide, Automatically Collected Information, and Information From Other Sources
Supporting quotations
Legitimate Interest relied upon: To enable creators, sellers and advertisers to view and understand how their ads or content performed and the audience that viewed or interacted with their ads or content.
This helps keep the advertising and other content we show users relevant and entertaining, and keeps the Platform free for all users.
Information used: Information You Provide, Automatically Collected Information, and Information From Other Sources.
We help creators, sellers and advertisers measure the effectiveness and distribution of ads and other content viewed on the Platform.
Legitimate interest: reviewing User Content, and Messages where the law allows, for rule breaches
TikTok uses your information to keep its community safe, including by reviewing User Content for breaches of its Terms, Guidelines and other policies, and, if permitted under applicable law, Messages and their metadata. The interest relied upon is keeping the community safe, reviewing compliance with the Guidelines and identifying misuse of the Platform. It uses all three categories of information.
Details
What it does
review User Content and, if permitted by law, Messages and metadata
Condition
Messages reviewed only if permitted under applicable law
Why
community safety and identifying misuse
Supporting quotations
We use your information to ensure the safety and well-being of our community, including by reviewing User Content (and if permitted under applicable law, Messages and associated metadata) for breaches of our Terms, Guidelines, and other policies.
To keep our community safe, review compliance with our Guidelines, and identify misuse of the Platform.
Information used: Information You Provide, Automatically Collected Information, and Information From Other Sources.
Ensure the safety and well-being of our community.
Qualifications & exceptions
Review of Messages and associated metadata applies only "if permitted under applicable law".
Legitimate interest: TikTok infers your age range and may ask you for more information to confirm age
As part of its community safety interest, TikTok infers your age range and, under certain circumstances, may ask you to provide additional information to confirm your age. This matches the earlier statement that it infers attributes such as age range.
Details
What it does
infers your age range and may ask for additional information to confirm it
Condition
under certain circumstances
Supporting quotations
We also infer your age range, and under certain circumstances, may ask you to provide additional information to confirm your age.
We infer your attributes (such as age-range and gender) and interests based on the information we have about you.
Qualifications & exceptions
Asking for additional information happens "under certain circumstances".
Not stated here
The text does not say which circumstances lead TikTok to ask you to confirm your age.
Legitimate interest: keeping the Platform stable and secure, including fighting fraud and spam
TikTok uses your information to ensure the stability and security of the Platform by identifying and combating technical or security issues, such as bugs, spam accounts, and detecting abuse, fraud and illegal activity. The interest relied upon is ongoing stability, security and availability. It uses all three categories of information.
Details
Why
stability, security and availability of the Platform, fraud and abuse detection
What it covers
Information You Provide, Automatically Collected Information, and Information From Other Sources
Supporting quotations
We use your information to ensure the stability and security of the Platform, including by identifying and combating technical or security issues (such as technical bugs, spam accounts, and detecting abuse, fraud, and illegal activity).
To ensure the ongoing stability and security of the Platform and to ensure it is continuously available and functioning.
Information used: Information You Provide, Automatically Collected Information, and Information From Other Sources.
Ensure the security and stability of the Platform.
Use & Processing · Company practice
Legitimate interest: analysing use to develop the Platform, including machine learning and promotion
TikTok uses the information it has to understand how people use the Platform and to develop, test and improve it, including its technology such as machine learning models and algorithms. It also uses this information to better understand and promote the Platform, popular topics and emerging trends, and to offer certain personalised features. The interest relied upon is improving, promoting and developing the Platform in an informed way, using all three categories of information.
Details
Why
understand use, develop and improve the Platform and machine learning models, promote the Platform, offer personalised features
What it covers
Information You Provide, Automatically Collected Information, and Information From Other Sources
Supporting quotations
We use the information we have to understand how people are using the Platform and to develop, test, and make improvements to the Platform, including to develop and improve our technology, such as our machine learning models and algorithms. We also use this information to better understand and promote the Platform, popular topics, and emerging trends, and offer certain personalised features.
To improve, promote, and develop the Platform in an informed way.
Information used: Information You Provide, Automatically Collected Information, and Information From Other Sources.
Review, improve, promote, and develop the Platform.
TikTok reviews messages you exchange with customer support to improve its technologies
Within its Platform improvement interest, TikTok says it reviews messages you exchange with customer support to improve technologies supporting such functions.
Details
What it does
reviews messages exchanged with customer support
Why
improve technologies supporting such functions
Supporting quotations
We also review messages you exchange with customer support to improve technologies supporting such functions.
Not stated here
The text does not say who reviews these messages or how they are used beyond improving supporting technologies.
Legitimate interest: sharing information with independent researchers who have demonstrable experience
TikTok shares your information with independent researchers to facilitate research that meets certain criteria, including that the researchers have demonstrable experience and expertise in their area. The interest relied upon is research that aims to develop society's collective knowledge, including on misinformation and disinformation, violence, cybercrime and social trends. The information listed for this use is Information You Provide and Automatically Collected Information.
Details
Who
independent researchers
Condition
research that meets certain criteria, researchers with demonstrable experience and expertise
What it covers
Information You Provide and Automatically Collected Information
Supporting quotations
We share your information with independent researchers to facilitate research that meets certain criteria, including where such researchers have demonstrable experience and expertise in their area.
To facilitate independent research that aims to develop society’s collective knowledge, including in the areas of misinformation and disinformation, violence, cybercrime, and social trends.
Information used: Information You Provide, Automatically Collected Information.
Facilitate independent research.
Qualifications & exceptions
Limited to research that meets certain criteria, including researchers' demonstrable experience and expertise.
Not stated here
The linked page on the research programme is not supplied here, so the full criteria are not known.
Sharing & Disclosure · Company practice
Legitimate interest: sharing with third parties whose platforms or services are integrated with the Platform
TikTok shares your information with third parties whose platforms or services are integrated with, or otherwise made available on, the Platform. The interest relied upon is optimising your experience, letting your content be shared on other platforms, enabling third parties to authenticate users, and allowing commercial agreements to be performed. It uses all three categories of information.
Details
Who
third parties whose platforms or services are integrated with or made available on the Platform
Information You Provide, Automatically Collected Information, and Information From Other Sources
Supporting quotations
We share your information with third parties whose platforms or services are integrated with, or otherwise made available on, the Platform.
To optimise your experience, allow your content to be shared on other platforms, enable third parties to authenticate users, and to allow for the performance of commercial agreements.
Information used: Information You Provide, Automatically Collected Information, and Information From Other Sources.
Share your information with third parties.
Legal Rights & Agreement Rules · Company practice
Legitimate interest: using information to prepare, bring or defend legal claims
TikTok may use your information in connection with preparing for, taking and defending actual or anticipated legal claims or proceedings, including investigating any potential claims it may have or be aware of. The interest relied upon is protecting the Platform and defending the legal rights and commercial interests of TikTok, its affiliates, users and the public. It uses all three categories of information.
Details
Why
prepare, take and defend actual or anticipated legal claims or proceedings
What it covers
Information You Provide, Automatically Collected Information, and Information From Other Sources
Supporting quotations
We may use your information in connection with preparing for, taking and defending actual or anticipated legal claims or proceedings (including investigating any potential claims we may have or be aware of).
to protect the Platform and defend the legal rights and commercial interests of us, our affiliates, our users and the public.
Information used: Information You Provide, Automatically Collected Information, and Information From Other Sources.
Protect the Platform and defend legal rights
Qualifications & exceptions
Covers actual or anticipated legal claims or proceedings.
Use & Processing · Company practice
Legitimate interest: marketing messages about the Platform and third-party products, with consent where required
You may receive marketing messages about the Platform and third-party products and services where TikTok thinks they will interest you. Where required, TikTok says it will obtain your consent to send them. The interest relied upon is promoting the Platform and third-party products and services, using all three categories of information.
Details
What it does
send marketing messages about the Platform and third-party products and services
Condition
consent obtained where required
What it covers
Information You Provide, Automatically Collected Information, and Information From Other Sources
Supporting quotations
You may receive marketing messages about the Platform and third party products and services where we think they will interest you. Where required, we will obtain your consent to send you such communications.
To promote the Platform and third party products and services.
Information used: Information You Provide, Automatically Collected Information, and Information From Other Sources.
Marketing communications.
Qualifications & exceptions
Consent is obtained "where required".
Not stated here
The text does not say where consent is required.
Legal Rights & Agreement Rules · User right or choice
Where legitimate interests are the basis, you can object to the use and ask for restriction
Whenever TikTok uses your information because it is necessary for legitimate interests, you can object to that use and request restriction of it.
Details
What it covers
right to object to and request restriction of use
Condition
when legitimate interests are the basis
Supporting quotations
Whenever we use your information on the basis that it is necessary for legitimate interests, you can object to, and request restriction of, such usage.
Qualifications & exceptions
Applies when the legitimate interests basis is used.
Legal Rights & Agreement Rules · Company practice
For people under the age of majority, TikTok relies on legitimate interests where contract may not apply
If you are under the age of majority (under 18 in most relevant countries) and have only a limited ability to enter an enforceable contract, TikTok says it may be unable to process your information on the basis of contractual necessity. In that case it relies on legitimate interests, and the first use listed is providing you with the Platform.
Details
Condition
under the age of majority (under 18 in most relevant countries) with limited ability to contract
What it does
relies on legitimate interests instead of contractual necessity
Supporting quotations
If you are under the age of majority (under 18 in most relevant countries), with a limited ability to enter into an enforceable contract only, where we may be unable to process your information on the grounds of contractual necessity, we rely on legitimate interests and use the information we collect to:
Provide you with the Platform
Qualifications & exceptions
Applies to people under the age of majority with only a limited ability to enter an enforceable contract.
The age is given as under 18 "in most relevant countries".
Not stated here
The text does not list the countries where the age of majority differs from 18.