PineDrama

"We collect certain information about the device you use to access the Platform, such as your IP address, user agent, mobile carrier, time zone settings, identifiers for advertising purposes, model of your device, the device system, network type, your screen resolution and operating system, app and file names and types, keystroke patterns or rhythms, battery state, audio settings and connected audio devices."

TikTok collects keystroke patterns, battery state, app/file names and types, and connected audio devices — well beyond what is needed for a video-sharing platform's core functionality.

"We collect information about your approximate location, including location information based on your SIM card and/or IP address. With your permission, we may also collect precise location data (such as GPS). In addition, we collect location information (such as tourist attractions, shops, or other points of interest) if you choose to add location information to your User Content."

TikTok collects approximate location passively via SIM card and IP address, and can also collect precise GPS location, enabling detailed location tracking.

"We may update this Privacy Policy from time to time. When we update the Privacy Policy, we will notify you by updating the "Last Updated" date at the top of this policy and posting the new Privacy Policy or providing any other notice required by applicable law. Your continued access to or use of the Platform after the date of the updated policy constitutes your acceptance of the updated policy."

TikTok can change the privacy policy at any time with minimal notice, and continued use is treated as acceptance — users must actively stop using the platform to reject changes.

"We may also share your information with other members, subsidiaries, or affiliates of our corporate group, including to provide the Platform, to improve and optimise the Platform, to prevent illegal use and to support users. Advertisers, publishers, and measurement and other partners share information with us about you and the actions you have taken outside of the Platform, such as your activities on other websites and apps or in stores."

TikTok shares user data broadly across its corporate group and with numerous third parties including advertisers, measurement partners, and service providers, creating an extensive data-sharing ecosystem.

"We retain information for as long as necessary to provide the Platform and for the other purposes set out in this Privacy Policy. We also retain information when necessary to comply with contractual and legal obligations, when we have a legitimate business interest to do so (such as improving and developing the Platform, and enhancing its safety, security and stability), and for the exercise or defence of legal claims."

TikTok's data retention policy is vague, with no specific deletion timelines and broad justifications for keeping data indefinitely, including 'legitimate business interest' in improving the platform.

"Where you log-in from multiple devices, we use your information such as your device IDs and user ID to identify your activity across devices. We may also associate you with information collected from devices other than those you use to log-in to the Platform. Advertisers, publishers, and measurement and other partners share information with us about you and the actions you have taken outside of the Platform, such as your activities on other websites and apps or in stores, including the products or services you purchased."

TikTok links user activity across multiple devices, associates users with data from devices they don't log into, and receives data about user behavior on external websites and apps from advertising partners.

"If you violate our Terms of Service, Community Guidelines, or other conditions or policies, we may remove your account from the Platform or User Content from public view immediately, but may keep other information about you to process the violation."

TikTok retains user data even after removing an account for policy violations, with no clear timeline for when this retained data would be deleted.