TikTok
TikTok collects an extraordinary amount of data about you — including biometric identifiers like faceprints and voiceprints, your keystrokes, your private messages, and even video footage you record but never post — and uses it to train AI models while sharing it freely across affiliated companies, third-party partners, and researchers, with no firm limits on how long it keeps any of it. The company tracks you across other websites and apps, can update its privacy policy without your explicit agreement, and its promise not to sell your data only applies where the law forces it to. If TikTok harms you, your ability to fight back is severely restricted: you have only one year to take legal action, any damages are capped at just $100, and you must sue in Los Angeles while potentially covering TikTok's own legal costs. In exchange for using the platform, you grant TikTok a permanent, irrevocable license to your content and allow it to use your name and image in advertising without compensation.
Last analyzed
Heads up: this analysis is AI-generated, can be incomplete or wrong, and is not legal advice. Use it as a starting point and read the original document before you agree — see our Terms.
Clause-by-clause breakdown
Every clause we flagged in TikTok's agreement, with what it means for you.
TikTok extracts faceprints and voiceprints from your videos.
“We may collect biometric identifiers and biometric information as defined under US laws, such as faceprints and voiceprints, from your user content. Where required by law, we will seek any required permissions from you prior to any such collection.”
Quoted verbatim from the agreement What this means: TikTok scans your uploaded videos and audio to extract faceprints and voiceprints — legally classified as biometric data. This happens as part of routine content processing. Permissions are only sought 'where required by law,' meaning in many states TikTok may collect this without asking you first. Biometric data is among the most sensitive personal information because it cannot be changed if compromised.
What you can do: Avoid uploading videos or audio that clearly show your face or voice if you are concerned about biometric data collection. Check your state's laws — residents of Illinois, Texas, and Washington have stronger biometric protections and may have opt-in rights.
TikTok tracks your activity on other websites and apps too.
“We also collect certain information about your interactions with websites when you use our in-app browser. Advertisers, publishers, and measurement and other partners provide us with information about you and the actions you have taken outside of our websites and apps, including the pages you visit, products or services you purchase, and apps you download. These partners also provide information such as mobile identifiers for advertising, hashed email addresses and phone numbers, and cookie identifiers, which we use to help measure the effectiveness of ads we serve and to better deliver ads to you on our websites and apps, or through TikTok Ad Network elsewhere online, depending on your ads settings. Some of our advertisers and other partners enable us to collect similar information directly from their websites or apps by integrating our TikTok Advertiser Tools (such as TikTok Pixel).”
Quoted verbatim from the agreement What this means: TikTok tracks what you do inside its in-app browser (websites you visit while staying in the TikTok app) and also receives data from advertisers and third-party partners about your activity on entirely separate websites and apps — including what you buy and what apps you download. This builds a detailed profile of your behaviour far beyond TikTok itself. The TikTok Pixel embedded on third-party sites sends your activity back to TikTok even when you never open the TikTok app.
What you can do: Open links in your phone's default browser instead of TikTok's in-app browser. Go to Settings → Ads in the TikTok app and opt out of personalised ads based on off-platform activity.
TikTok keeps your data indefinitely based on self-defined business interests.
“We retain information for as long as necessary to provide the Services and for the other purposes set out in this Privacy Policy. We also retain information when necessary to comply with contractual and legal obligations, when we have a legitimate business interest to do so (such as improving and developing the Services, and enhancing its safety, security and stability), and for the exercise or defense of legal claims. If you violate our Terms of Service, Community Guidelines, or other conditions or policies, we may remove you from the Services immediately, but may keep information about you to process the violation.”
Quoted verbatim from the agreement What this means: TikTok keeps your data for as long as it decides it has a 'legitimate business interest' — a broad, self-defined standard with no fixed time limit. Even if you delete your account after a policy violation, TikTok explicitly reserves the right to keep your data indefinitely to 'process the violation.' There is no stated maximum retention period for most data categories.
What you can do: Submit a formal deletion request via TikTok's privacy portal (tiktok.com/legal/report/privacy) and follow up if you do not receive confirmation. Be aware that data tied to any past policy violation may be retained regardless.
TikTok collects your videos before you decide to post them.
“We may collect user content through pre-uploading at the time of creation, import, or upload, regardless of whether you choose to save or publish that user content, for example, to recommend audio options, provide an effect, generate captions, and provide other personalized recommendations.”
Quoted verbatim from the agreement What this means: TikTok begins collecting your video, photo, or audio content the moment you start creating or importing it — before you decide whether to post it or delete it. If you record a video and then discard it without posting, TikTok may already have collected that content. This means content you never intended to share can still be processed by TikTok.
What you can do: Be aware that anything you record or import within the TikTok app is potentially collected immediately. If you want to create content privately first, use your phone's native camera app and only import the final version into TikTok.
Your messages and content are used to train TikTok's AI models.
“To review, support, improve, and develop the Services, and train, test, and improve technology, such as machine learning models and algorithms, including by analyzing how people are using the Services; conducting research; soliciting feedback; monitoring your activity and usage across the devices you use to access the Services; and scanning, analyzing, and reviewing user content, messages, AI interactions, and associated metadata.”
Quoted verbatim from the agreement What this means: TikTok uses your content — including private messages, AI chat interactions, and associated metadata — to train its machine learning models and algorithms. This is a broad licence to use your personal communications and creative output for AI development. There is no opt-out described for this use of your data.
What you can do: Avoid sharing sensitive personal information in TikTok messages or AI features. There is currently no disclosed opt-out for this use; if this concerns you, consider limiting your use of TikTok's messaging and AI features.
TikTok can change its privacy policy without your explicit consent.
“We may update this Privacy Policy from time to time. When we update this Privacy Policy, we will notify you by updating the "Last Updated" date at the top of the new Privacy Policy, posting the new Privacy Policy, or providing any other notice required by applicable law. We recommend that you review this Privacy Policy regularly to stay informed of our privacy practices.”
Quoted verbatim from the agreement What this means: TikTok can change its privacy policy at any time and its only obligation is to update a date at the top of the page. There is no requirement to obtain your affirmative consent to material changes — simply continuing to use TikTok after a change means you are bound by the new terms. This allows TikTok to expand data collection or sharing practices without your explicit agreement.
What you can do: Set a reminder to check TikTok's Privacy Policy periodically. If you receive a notification of a policy update, review the changes before continuing to use the service.
You have only one year to sue TikTok, not the usual legal limit.
“YOU AND TIKTOK USDS JOINT VENTURE AGREE THAT YOU MUST INITIATE ANY PROCEEDING OR ACTION WITHIN ONE (1) YEAR OF THE DATE OF THE OCCURRENCE OF THE EVENT OR FACTS GIVING RISE TO A DISPUTE THAT IS ARISING OUT OF OR RELATED TO THESE TERMS OR THE PLATFORM. OTHERWISE, YOU FOREVER WAIVE THE RIGHT TO PURSUE ANY CLAIM OR CAUSE OF ACTION, OF ANY KIND OR CHARACTER, BASED ON SUCH EVENTS OR FACTS, AND SUCH CLAIM(S) OR CAUSE(S) OF ACTION ARE PERMANENTLY BARRED.”
Quoted verbatim from the agreement What this means: TikTok cuts the standard legal time limit to sue to just one year, regardless of what your state law normally allows. If you miss this one-year window — even by a day — you permanently lose the right to bring any legal claim against TikTok, no matter how serious the harm. Many states allow two to four years for similar claims, so this clause significantly shortens your window to seek justice.
What you can do: If you believe TikTok has harmed you, consult a lawyer promptly — do not wait more than a year from when the problem occurred.
TikTok's maximum payout to you for any harm is $100.
“To the extent permitted by applicable law, the maximum aggregate liability of TikTok USDS Joint Venture and our affiliates, service providers and business partners, including TT Commerce & Global Services, and its affiliates, and each of our respective officers, directors, employees, agents, and advisors, arising out of or relating to these Terms or your use of the Platform shall, under no circumstance, exceed the greater of $100 or the amount you have paid us in the past 12 months.”
Quoted verbatim from the agreement What this means: No matter what TikTok does wrong — data breaches, privacy violations, content removal — the most you can ever recover from them is $100 (or what you paid in the last year, which for most free users is also $0). Given TikTok's scale and the sensitivity of data it holds, this cap is wildly disproportionate to the potential harm a user could suffer.
What you can do: Understand that individual legal action against TikTok is effectively capped at $100 for most users; class actions or regulatory complaints may be more effective avenues.
TikTok's license to your content can never be taken back.
“By creating, inputting, publishing, and otherwise providing Your Content on or to the Platform, you grant to TikTok USDS Joint Venture a license to use Your Content that is: non-exclusive, irrevocable, and royalty-free (you retain the rights to use Your Content elsewhere, although we don't owe you any payments for sharing Your Content with us) assignable and sub-licensable, including through multiple tiers (so we can, for example, work with service providers and business partners to help distribute Your Content); and worldwide (so we can show your content to a global audience).”
Quoted verbatim from the agreement What this means: The license you grant TikTok over your content is irrevocable — it cannot be taken back. Even if you delete your account or specific videos, TikTok retains the right to use content that was already uploaded. The license is also sub-licensable through multiple tiers, meaning TikTok can pass your content rights to partners, who can pass them further down the chain.
What you can do: Think carefully before posting content you may later want to fully retract; once uploaded, TikTok's license to use it cannot be revoked.
Your data can be sent to other countries, including outside the US.
“Subject to applicable laws, including Executive Order 14352 and any compliance obligations thereunder, we may transmit your information outside of the United States, for purposes of sharing with recipients as described in this Privacy Policy.”
Quoted verbatim from the agreement What this means: TikTok can transfer your personal data outside the US to other countries, subject to legal requirements. The reference to Executive Order 14352 relates to ongoing US government oversight of TikTok's data practices, but the policy still permits broad international data transfers. This means your data may be processed in jurisdictions with different privacy protections.
What you can do: US users concerned about international data transfers have limited recourse beyond exercising deletion rights via TikTok's privacy portal.
TikTok can collect your precise GPS location if you allow it.
“We may also collect precise location data, depending on your settings and as explained below. Also, if you choose to enable location services for the TikTok app within your device settings, we collect approximate or precise location information from your device. You can turn off location services from your device settings at any time.”
Quoted verbatim from the agreement What this means: If you grant location permission, TikTok collects your precise GPS location. Even without that permission, TikTok infers your approximate location from your IP address, SIM card region, and device settings. Precise location data can reveal sensitive patterns like where you live, work, worship, or seek medical care.
What you can do: Deny location permission to TikTok in your device settings. On iPhone, set location access to 'Never'; on Android, select 'Deny' or 'Only while using the app' and consider revoking it entirely.
Your data can be sold to a new owner if TikTok is acquired.
“We may share Information We Collect in connection with or during negotiations of a corporate transaction, such as a merger, acquisition in full or in part, reorganization, asset sale, or in the unlikely event of bankruptcy.”
Quoted verbatim from the agreement What this means: If TikTok is sold, merged, or goes bankrupt, your personal data — including all the sensitive information described in the policy — can be transferred to the new owner as a business asset. You have no right to object to or opt out of this transfer. The new owner may have different privacy practices.
What you can do: There is no practical way to prevent this. If a major ownership change is announced, check whether the new entity's privacy policy is acceptable to you and consider deleting your account before the transfer completes.
TikTok records your typing patterns and detailed device fingerprint.
“Technical information from your device, network, and application, including your IP address, user agent, mobile carrier, time zone settings, identifiers for advertising purposes, model of your device, the device system, network type, your screen resolution and operating system, app and file names and types, keystroke patterns or rhythms, battery state, audio settings and connected audio devices.”
Quoted verbatim from the agreement What this means: TikTok automatically collects an unusually detailed fingerprint of your device, including keystroke patterns and rhythms (how you type), battery state, and what audio devices are connected. Keystroke pattern data can be used to identify you even across different accounts or devices. This level of device fingerprinting goes well beyond what is needed to run the app.
What you can do: There is no direct opt-out for this automatic collection. Using TikTok on a web browser rather than the app may reduce some device-level data collection.
Everything you type to TikTok's AI is collected and stored.
“AI interactions, including prompts, questions, files, and other types of information that you submit to our AI-powered interfaces, as well as the responses they generate.”
Quoted verbatim from the agreement What this means: Everything you type into TikTok's AI features — questions, uploaded files, and the AI's responses — is collected and stored. This data is also used for AI training (see separate finding). If you share sensitive personal information with TikTok's AI assistant, that information becomes part of TikTok's data holdings.
What you can do: Treat TikTok's AI chat features like a public forum — do not share personal, financial, health, or identifying information through them.
Your data is shared across TikTok's network of affiliated companies.
“We may collect or receive information about you from affiliates controlled by, or under common control with, us. We may share Information We Collect with affiliates controlled by, or under common control with, TikTok USDS Joint Venture as necessary for the purposes set forth within this Privacy Policy.”
Quoted verbatim from the agreement What this means: TikTok shares your data with its corporate affiliates, which include ByteDance-related entities. The policy does not name all affiliates or specify what data each receives. This means your information may flow to a wide network of related companies beyond the TikTok app itself.
What you can do: There is no opt-out for affiliate data sharing described in the policy. Minimising the personal information you share on TikTok reduces what can be passed to affiliates.
TikTok's no-data-sale promise only applies where the law requires it.
“We do not sell your personal information or share your personal information with third parties for purposes of cross-context behavioral advertising where restricted by applicable law”
Quoted verbatim from the agreement What this means: TikTok states it does not sell personal data or share it for cross-context behavioural advertising — but only 'where restricted by applicable law.' This means the commitment applies only in states with laws that restrict such practices (like California), not universally. Users in states without such laws may not have this protection.
What you can do: If you are a California resident, you have CCPA rights including the right to opt out of sale/sharing. Use TikTok's privacy portal to exercise these rights.
Children under 13 still see contextual ads on TikTok.
“We may use the information that is collected automatically to provide personalized content; serve contextual advertising; perform analytics and troubleshoot; protect the security and integrity of the user and our services; and ensure legal and regulatory compliance.”
Quoted verbatim from the agreement What this means: Even in the Under 13 Experience, TikTok serves contextual advertising to children and uses their data for analytics. While TikTok states it does not use children's data for cross-context behavioural advertising, contextual ads are still shown to users under 13. Parents should be aware their child is still seeing ads.
What you can do: Review TikTok's Children's Privacy Policy with your child. If you are uncomfortable with any data collection, you can request deletion of your child's account via TikTok's privacy portal.
TikTok can share your data with external researchers.
“We may share certain of your information with qualifying researchers to facilitate independent research.”
Quoted verbatim from the agreement What this means: TikTok can share your personal information with external researchers, subject to unspecified 'qualifying' criteria that TikTok itself determines. The policy does not describe what data is shared, whether it is anonymised, or whether you can opt out of being included in research datasets.
What you can do: There is no disclosed opt-out for research data sharing. If this concerns you, contact TikTok via the privacy portal to ask about your specific data.
TikTok uses your name and photo in ads without paying you.
“Use your name, profile image and username when you interact with ads and sponsored content. The Platform makes it possible for you to interact with sponsored content from brands, creators, and organizations that you enjoy. We may receive compensation from our advertisers and our partners with which you choose to interact. To enable these features, you give us permission to use your name, profile image and username, in connection with ads, sponsored gifts, offers, and other branded or sponsored content that you interact with, without any compensation to you, unless we have entered into a separate commercial agreement with you with respect to a specific promotion or advertisement.”
Quoted verbatim from the agreement What this means: By using TikTok, you automatically give TikTok permission to use your name, photo, and username to endorse ads and sponsored content — without paying you. If you like or interact with a brand's post, TikTok can show that interaction alongside the brand's advertising to other users, making it look like a personal endorsement.
What you can do: Be mindful of which branded content you interact with. Check your account settings for any ad personalisation or social endorsement controls that may limit this use.
TikTok owns any ideas or feedback you send them.
“If you choose to submit comments, ideas, or feedback to us, you give us permission to use them in connection with the Platform and any other services that we choose, for any purpose, without any restriction or compensation to you. You agree that we do not have to consider or act on them, return them, or keep them confidential. We will own all rights in anything we develop based on your comments, ideas, or feedback.”
Quoted verbatim from the agreement What this means: Any feedback, suggestions, or ideas you send to TikTok become TikTok's property. They can use your ideas commercially, build products from them, and owe you nothing in return — no credit, no payment, no acknowledgement. This is a broad assignment of intellectual property rights over your creative input.
What you can do: Avoid sharing novel product ideas or creative concepts with TikTok through feedback channels if you want to retain any rights to them.
You must pay TikTok's legal costs if your actions cause a lawsuit.
“You agree to defend, indemnify, and hold harmless TikTok USDS Joint Venture and our affiliates, service providers, and business partners, including TT Commerce & Global Services and its affiliates, and each of their respective officers, directors, employees, agents and advisors from any and all claims, demands, damages, injunctions, orders, awards, settlements, losses, liabilities, liens, encumbrances, causes of action, of every kind and character, costs (including attorneys' fees and other costs of arbitration, litigation, defense, or settlement), and expenses arising out of or relating to your use of the Platform under these Terms, including a breach of your obligations, representations and warranties under these Terms.”
Quoted verbatim from the agreement What this means: If anyone sues TikTok because of something you did on the platform, you must pay TikTok's legal costs and any damages — including their lawyers' fees. This obligation survives even after you delete your account. The scope is very broad, covering TikTok, all its affiliates, partners, officers, and employees.
What you can do: Follow TikTok's Community Guidelines carefully; any violation that leads to a third-party claim could expose you to significant personal financial liability.
All lawsuits against TikTok must be filed in Los Angeles courts.
“Any claim, cause of action or dispute, arising out of or relating to these Terms or the Platform shall also be resolved exclusively in the U.S. District Court for the Central District of California or the Superior Court of the State of California, County of Los Angeles, regardless of whether the claim, cause of action, or dispute arose prior to your agreement to these Terms. You also agree to submit to the personal jurisdiction of either of these courts for the purpose of litigating any such claim.”
Quoted verbatim from the agreement What this means: All legal disputes must be filed in courts in Los Angeles, California, regardless of where you live. If you live in New York, Florida, or anywhere else in the US, you would need to travel to or hire lawyers in California to pursue any claim. This creates a significant practical barrier for most users seeking to enforce their rights.
What you can do: Be aware that any legal action against TikTok must be filed in California courts; factor this into any decision to pursue a claim.
TikTok reads and stores the content of your private messages.
“We collect the content of the messages you send and receive on the Platform and the associated metadata (such as the time the message was sent, received or read, as well as the participants in the communication). We also collect the messages you send or receive through our chat functionality when using our shopping feature to communicate with sellers or using virtual assistants.”
Quoted verbatim from the agreement What this means: TikTok reads and stores the content of your private messages, not just metadata. This includes messages sent to sellers in TikTok Shop and conversations with virtual assistants. There is no indication that messages are end-to-end encrypted, meaning TikTok has full access to what you write privately to other users.
What you can do: Do not share sensitive personal information, financial details, or private matters through TikTok's messaging features.
You can opt out of personalised ads in TikTok's settings.
“You can navigate to "Ads" in your in-app settings to manage how your activity elsewhere online is used to serve you ads on our websites and apps. Using your in-app settings, you can also manage the ads that TikTok Ad Network serves you elsewhere online.”
Quoted verbatim from the agreement What this means: TikTok provides in-app controls to manage how your off-platform activity is used for ads, and you can also control TikTok Ad Network ads shown on other websites. This is a meaningful user control that goes beyond the legal minimum in many jurisdictions.
What you can do: Go to TikTok app → Settings → Ads and review all available controls. Also check your device's ad tracking settings (iOS: Privacy → Tracking; Android: Ads → Opt out of Ads Personalisation).
You can download your data or delete your account in-app.
“Through your in-app settings, you can directly update your account information, request a copy of your data, or deactivate or delete your account by following the instructions for deactivation here or deletion here.”
Quoted verbatim from the agreement What this means: TikTok provides a self-service mechanism to download your data and delete your account directly within the app, without needing to contact support. This is a user-friendly feature that gives you meaningful control over your information.
What you can do: Go to TikTok app → Settings → Account → Delete Account to remove your account, or use the 'Download your data' option to export a copy of your information before leaving.
TikTok does not sell or ad-target data from children under 13.
“TikTok does not sell information from Children to third parties and does not share such information with third parties for the purposes of cross-context behavioral advertising.”
Quoted verbatim from the agreement What this means: For children under 13 using the Under 13 Experience, TikTok explicitly commits to not selling their data or using it for cross-context behavioural advertising. This is a meaningful protection that goes beyond the minimum legal requirement and provides a clear, enforceable commitment for the youngest users.
You can request to access, correct, or delete your data.
“You have the right to know, access, correct or delete your information. You can submit a request at https://www.tiktok.com/legal/report/privacy or by sending your request to the address provided in the "Contact Us" section below. Depending on where you live, your parent or guardian can also make these requests for you. If you, or your parent or guardian, do make such a request, we will respond appropriately and will not penalize you for it.”
Quoted verbatim from the agreement What this means: TikTok acknowledges users' rights to access, correct, and delete their data, and explicitly states it will not penalise users for exercising these rights. A webform is provided for submitting requests. This is a positive commitment, though the process is manual rather than self-service for all data types.
What you can do: Submit data access or deletion requests via https://www.tiktok.com/legal/report/privacy if you want to review or remove your information.
Frequently asked questions
Is TikTok's Terms & Conditions agreement fair?
- BeforeYouClick grades TikTok E on an A–E scale, where A is the fairest. Its agreement contains 9 critical clauses, 14 warnings and 4 good practices.
What are the biggest problems with TikTok's terms?
- The most serious clauses we flagged are: Biometric Data Extracted From Your Content, Extensive Off-Platform Tracking Via Partners and No Fixed Limit on Data Retention.
How long does it take to read TikTok's terms?
- TikTok's agreement takes about 80 minutes to read in full, across 27 clauses we reviewed. The summary on this page covers the same ground in under a minute.
When was TikTok's agreement last analyzed?
- We last read TikTok's Terms & Conditions on July 3, 2026. Companies change their terms without notice, so check the original document for the current version.
Is this analysis legal advice?
- No. This analysis is AI-generated, can be incomplete or wrong, and is not legal advice. Use it as a starting point and read the original agreement before you agree to it.
More agreements to read
- RedditSocialGrade D
- FacebookSocialGrade E
- X (formerly Twitter)SocialGrade E
- PinterestSocialGrade E
- PosteoProductivityGrade A
- Mullvad VPNSecurityGrade A