TikTok Privacy Summary
Short-form video sharing platform for creating, discovering, and sharing videos with music, effects, and social features across mobile devices.
Quick Summary
TikTok's February 2026 privacy policy reveals extensive data collection covering everything you watch, create, search, and buy — including consumer health data and biometric identifiers from your videos. Operated by TikTok USDS Joint Venture LLC in the US, your data is shared with advertisers, payment processors, analytics partners, and business affiliates. The algorithm builds a deep behavioral profile to drive its recommendation engine.
Why You Should Care About TikTok's Privacy Practices
TikTok collects consumer health data (explicitly named in its policy under Washington's My Health My Data Act) and biometric identifiers from video content — face and voice features. Every video you watch, how long you watch it, and whether you replay it feeds the recommendation algorithm. TikTok Shop tracks your full purchase history including payment data. Your data is shared with PayPal, Stripe, ad partners, and "business affiliates." Even if you never post, your viewing behavior alone creates a detailed profile used for targeted advertising.
Why High Exposure?
- Collects 20 types of personal data
- 9 concerning practices identified
- Shares data with 9 third parties
- 9 tracking methods used
- Limited user controls for data management
Privacy Highlights
What They Collect
- Account info (username, email, phone number, date of birth, password)
- Profile info (profile picture, bio, links to other accounts)
- Content you create (videos, photos, audio, comments, livestreams, drafts)
- Direct messages and group chat content
- Payment and billing info (for TikTok Shop, TikTok Coins, and in-app purchases)
- Full viewing history (every video watched, duration, replays, completion rate)
- Search history and queries
- Interaction data (likes, shares, follows, saves, comments)
- TikTok LIVE participation and gifting activity
- TikTok Shop purchase and browsing history
- Device info (model, OS, browser, device IDs, screen resolution)
- IP address and network information
- GPS location (if permission granted)
- IP-derived approximate location (always collected)
- Cookies and tracking technologies
- Consumer health data (per Washington My Health My Data Act and similar state laws)
- Biometric identifiers inferred from video content (face and voice features)
- Third-party linked account data (if you sign in via Google, Apple, etc.)
- Advertiser and data partner data (matched against your profile)
How They Share Data
- Advertising, marketing, and analytics partners
- PayPal and Stripe (payment processing for TikTok Shop and Coins)
- Business partners and co-branded service providers
- Creators and sellers (aggregated analytics about their content and shop)
- Customer and technical support providers
- Law enforcement and government (legal requests and subpoenas)
- ByteDance affiliates and group companies
- Buyers or successors (in mergers, acquisitions, or asset sales)
Data Retention
Data retained while account is active and for a period after deletion. Specific retention periods vary by data type; some categories (like health data) have stricter requirements under state laws. Legal, safety, and fraud obligations can extend retention.
Your Rights
- Access and download your data (TikTok data download tool)
- Delete your account and content
- Correct inaccurate profile information
- Opt out of targeted advertising
- Manage app permissions (location, camera, microphone)
- Consumer health data rights (for Washington state and similar jurisdictions)
- CCPA rights for California residents (access, deletion, opt-out of sale)
Detailed Analysis
Concerning Practices
- Consumer health data explicitly collected — TikTok names this as a data category covered by Washington My Health My Data Act and similar laws
- Biometric identifiers (face and voice features) inferred from your video content — even videos you delete
- Full viewing history tracked — every video you watch, how long, how many times, whether you finished it
- TikTok Shop purchase and browsing data shared with payment processors and sellers
- ByteDance affiliation — data shared with ByteDance group companies, raising national security concerns in multiple jurisdictions
- TikTok Pixel tracks your behavior on third-party websites even when you're not using TikTok
- Drafts stored on TikTok servers — content you never publish is still collected
- Location inferred from IP even without explicit permission grant
- Ad partners receive detailed behavioral data including watch patterns and interaction history
Personal Data Types
Tracking Methods
Third Parties
User Controls
Frequently Asked Questions About TikTok
Legal Disclaimer
This analysis is provided for informational purposes only and should not be used as legal advice. Privacy Exposure ratings and summaries are AI-generated assessments based on publicly available privacy policies — they are not statements of fact and may contain errors. Learn how ratings are determined. Consult with legal professionals for matters requiring legal guidance.