FinePrint
All companies

TikTok Terms of Service & Privacy Policy

D+

TikTok

Poor

Based on a complete review of both the Terms of Service and Privacy Policy, TikTok collects a vast amount of user data, including sensitive and biometric information, and uses it extensively for personalization, advertising, and AI model training. The terms grant broad, irrevocable licenses to user content and severely limit user liability while placing significant burdens on users for dispute resolution.

Source: https://www.tiktok.com/legal/page/us/terms-of-service/en

What They Collect

Account & Identity Data

Username, password, email, phone number, profile image, date of birth, and information to verify identity or age.

LOW RISK

User Content & Communications

Comments, photographs, livestreams, audio recordings, videos, text you create, import, upload, or publish. This includes content collected *before* you choose to save or publish it (pre-uploading). Also, messages you compose, send, or receive through messaging functionalities.

HIGH RISK

AI Interactions

Prompts, questions, files, and other information you submit to AI-powered interfaces, as well as the responses generated.

MEDIUM RISK

Clipboard Content

Text and images accessed through your device's clipboard when you use certain sharing or copy/paste functions.

HIGH RISK

Purchase Information

Payment card information, billing, delivery, contact information, and purchase history when you make transactions on the Services.

LOW RISK

Contacts

Your phone and social network contacts (names, phone numbers, email addresses, friends lists) if you grant permission to sync them.

optionalMEDIUM RISK

Settings & Preferences

Your account settings and communication preferences.

LOW RISK

Correspondence

Information in communications you send to TikTok, such as support requests.

LOW RISK

Survey & Marketing Data

Information you share by filling in advertisers’ forms, or through participation in surveys, research, promotions, marketing campaigns, events, or contests.

optionalLOW RISK

Sensitive Personal Information

Racial/ethnic origin, religious beliefs, mental/physical health diagnosis, sexual life/orientation, transgender/nonbinary status, citizenship/immigration status, or financial information, if you voluntarily include it in your user content or other submissions. TikTok states it does not require this.

optionalMEDIUM RISK

Location Information

Approximate location based on device/network (SIM card, IP address, device settings). Precise location if you enable location services for the app. Also, points of interest added to user content.

optionalMEDIUM RISK

Usage & Interaction Data

Information about how you interact with content and ads, duration and frequency of use, engagement with other users, and interactions with websites when using the in-app browser.

MEDIUM RISK

Technical & Device Information

IP address, user agent, mobile carrier, time zone, advertising identifiers, device model, operating system, app/file names and types, keystroke patterns or rhythms, battery state, audio settings, connected audio devices. TikTok assigns device IDs and user IDs to identify activity across devices.

HIGH RISK

Content Characteristics & Biometrics

Analysis of videos, images, and audio in your content to identify objects, scenery, faces, body parts, and spoken text. May collect biometric identifiers (faceprints and voiceprints) from user content, seeking permission where required by law.

HIGH RISK

Metadata

Information automatically uploaded with your content, messages, or AI interactions, such as how, when, where, and by whom it was created or sent. Includes your username to trace content back to your account.

LOW RISK

Cookies & Tracking Technologies

Data collected via cookies, web beacons, pixels, SDKs, etc., for features, analytics, advertising, and promoting services on other sites/apps.

LOW RISK

Third-Party Service Data

Public profile information and email if you sign up, log in, or link your TikTok account to a third-party service.

optionalLOW RISK

Off-Platform Activity Data

Information from advertisers, publishers, and partners about your actions outside TikTok (e.g., pages visited, products purchased, apps downloaded), including mobile identifiers, hashed emails/phone numbers, and cookie identifiers. This includes data collected via TikTok Advertiser Tools (like TikTok Pixel) integrated into other websites/apps.

HIGH RISK

Transaction & Delivery Data

Information from sellers and payment/transaction fulfillment providers, such as payment confirmation and delivery details for purchases.

LOW RISK

Affiliate & Public Data

Information from corporate affiliates, other users (e.g., if you're mentioned in their content), and publicly available sources.

LOW RISK
What They Do With Your Data

Service Operation & Administration

To enable you to create, share, and consume content, interact with others, and provide user support.

LOW RISK

Service Improvement & Development

To review, support, improve, and develop the Services, and to train, test, and improve technology like machine learning models and algorithms. This involves analyzing how people use the Services, conducting research, monitoring activity across devices, and scanning, analyzing, and reviewing user content, messages, AI interactions, and associated metadata.

HIGH RISK

Personalization & Customization

To personalize your experience, such as providing your 'For You' feed, content creation tools, and customized ads and sponsored content on and off the Platform.

MEDIUM RISK

Shopping Features

To provide shopping features and facilitate the purchase and delivery of products, goods, and services.

LOW RISK

Marketing & Promotion

To promote TikTok's and third-party products/services through marketing campaigns, including using user content with your permission.

MEDIUM RISK

Advertising Services

To provide and improve advertising services and measure the effectiveness of ads served.

MEDIUM RISK

Social Functions

To support social functions, including connecting users, suggesting accounts, and enabling sharing/downloading of content.

LOW RISK

Inference of Information

To infer additional information about you, such as your age, gender, and interests.

MEDIUM RISK

Safety, Security & Stability

To maintain and enhance the safety, security, and stability of the Services by identifying and addressing technical issues, detecting abuse, fraud, and illegal activity.

LOW RISK

Identity & Age Verification

To verify your identity or age for certain features like livestreaming or verified accounts.

LOW RISK

Communication with Users

To communicate with you, including notifying you about service changes.

LOW RISK

Enforcement of Policies

To enforce Terms of Service, Community Guidelines, and other policies, and to protect the safety of the community. This includes scanning, analyzing, and reviewing user content, messages, AI interactions, and associated metadata.

HIGH RISK

Legal Compliance & Defense

To comply with legal obligations, respond to legal requests, and defend TikTok's legal rights and commercial interests.

LOW RISK

Data Combination & Aggregation

To combine collected information for any of the stated purposes, and to aggregate or de-identify information.

MEDIUM RISK
What Rights You Give Up

Content License

HIGH RISK
By creating, inputting, publishing, and otherwise providing Your Content on or to the Platform, you grant to TikTok USDS Joint Venture a license to use Your Content that is: non-exclusive, irrevocable, and royalty-free... assignable and sub-licensable, including through multiple tiers... worldwide... for the purposes of operating, improving, and providing the Platform and developing new technologies (including training, testing, and improving our machine learning models and algorithms) and services... you also grant to each user of the Platform a non-exclusive, royalty-free, perpetual and irrevocable, worldwide license to use Your Content...

This means: You give TikTok a permanent, worldwide, royalty-free right to use, copy, distribute, modify, and display your content (including for training AI models and for their business partners). Other users also get a similar permanent right to use your content if you make it public.

Indemnification

MEDIUM RISK
You agree to defend, indemnify, and hold harmless TikTok USDS Joint Venture and our affiliates, service providers, and business partners... from any and all claims, demands, damages... arising out of or relating to your use of the Platform under these Terms, including a breach of your obligations, representations and warranties under these Terms.

This means: If your actions on the platform cause any legal trouble or costs for TikTok or its partners, you promise to cover all their expenses, including legal fees.

Limitation of Liability

HIGH RISK
The Platform is provided “as is.” We and our affiliates make no guarantees that the Platform... will be safe, secure, and free from errors... DISCLAIM ALL WARRANTIES... Under no circumstance will TikTok USDS Joint Venture or our affiliates... be liable... for any punitive, consequential, incidental, exemplary or special damages... or any damages based on lost profits... To the extent permitted by applicable law, the maximum aggregate liability... shall... exceed the greater of $100 or the amount you have paid us in the past 12 months.

This means: TikTok offers the service 'as is' with no guarantees. They won't be responsible for most types of damages you might suffer, including lost profits or data. Their total liability to you is capped at $100 or what you've paid them in the last 12 months, whichever is greater. This is a very low cap for a major platform.

Mandatory Informal Dispute Resolution

LOW RISK
If we have a dispute with you... we will first try and resolve it with you amicably. You agree to do the same for us... Engaging in this informal dispute resolution process is a requirement that must be completed before filing any legal action.

This means: Before you can sue TikTok, you must first try to resolve the issue informally by notifying them and waiting for a response.

Exclusive Jurisdiction & Venue

HIGH RISK
These Terms... will be governed by the laws of the State of California... Any claim... shall also be resolved exclusively in the U.S. District Court for the Central District of California or the Superior Court of the State of California, County of Los Angeles... You also agree to submit to the personal jurisdiction of either of these courts...

This means: Any legal disputes will be handled under California law and must be filed in specific courts in Los Angeles, California. You agree to accept the authority of these courts.

One-Year Limitation Period for Legal Action

HIGH RISK
YOU AND TIKTOK USDS JOINT VENTURE AGREE THAT YOU MUST INITIATE ANY PROCEEDING OR ACTION WITHIN ONE (1) YEAR OF THE DATE OF THE OCCURRENCE OF THE EVENT OR FACTS GIVING RISE TO A DISPUTE... OTHERWISE, YOU FOREVER WAIVE THE RIGHT TO PURSUE ANY CLAIM OR CAUSE OF ACTION...

This means: You have only one year from when a problem occurs to start any legal action against TikTok. If you wait longer, you lose your right to sue them.

Assignment of Rights

MEDIUM RISK
Our rights and obligations under these Terms are freely assignable by us without any requirement to notify you or any third party, in connection with a merger, acquisition, sale or disposition of assets, sale or transfer of equity... or otherwise.

This means: TikTok can transfer its rights and responsibilities under these terms to another company (e.g., if they are bought out) without telling you.

How to Leave

Delete your account

You can delete your account and specific videos at any time through the in-app settings. Instructions are provided in the Help Center.

Data retention

TikTok retains information for as long as necessary to provide services, comply with legal obligations, for legitimate business interests (like improving services, security), and for legal claims. Content you delete may remain publicly accessible if other users have incorporated it into their own content.

Data portability

You can request a copy of your data through your in-app settings or a webform.

Overall exit difficulty:MEDIUM RISK
Red Flags

Extensive & Invasive Data Collection

TikTok explicitly states it collects clipboard content, keystroke patterns/rhythms, biometric identifiers (faceprints/voiceprints), and extensive off-platform data via tools like TikTok Pixel. This goes beyond what's typically necessary for a social media app and enables highly detailed profiling and surveillance of your digital life, both on and off the platform.

Industry context: While many apps collect usage data, the explicit mention of clipboard content, keystroke patterns, and biometric data (beyond basic facial recognition for filters) is more aggressive and invasive than what's commonly disclosed by other major social media platforms.

Broad, Irrevocable Content License for AI Training

You grant TikTok a non-exclusive, irrevocable, royalty-free, assignable, sub-licensable, worldwide license to use your content for operating, improving, and providing the platform, and explicitly for 'training, testing, and improving our machine learning models and algorithms.' You also grant a similar perpetual license to *other users* of the platform. This means you lose significant control over your creative work, allowing TikTok and potentially anyone else to use it forever, for free, even for commercial AI training, without further permission or payment.

Industry context: While many platforms require a license to host user content, the 'irrevocable,' 'sub-licensable,' and explicit 'AI training' clauses, combined with a perpetual license to *other users*, are particularly broad and user-unfriendly, especially given the current landscape around AI model training and content ownership.

Severe Limitation of Liability & Extremely Low Cap

TikTok disclaims almost all liability for various types of damages you might incur and caps its maximum aggregate liability to you at the greater of $100 or the amount you've paid them in the past 12 months. This means if something goes seriously wrong due to TikTok's fault (e.g., a major data breach, service interruption, or issues with their AI features), your ability to seek meaningful compensation is severely restricted, potentially leaving you with little recourse.

Industry context: Liability limitations are standard in online services, but a $100 cap for a global platform with billions in revenue is exceptionally low and heavily favors the company, making it worse than average for the industry.

Mandatory California Jurisdiction & One-Year Limitation Period

All legal disputes must be resolved under California law in specific Los Angeles courts, and you have only one year from when a problem occurs to initiate any legal action. This creates a significant barrier for users outside California (or even outside the US) to pursue legal claims, making it costly and inconvenient. The one-year limit drastically shortens the time you have to act, potentially causing you to lose your rights before you even realize you have a claim.

Industry context: While specific jurisdictions are common, forcing all users of a global service to a single state court is restrictive. A one-year limitation period is significantly shorter than typical statutes of limitations and is worse than average, heavily favoring the company.

Extensive Data Use for AI Training & Enforcement

TikTok explicitly states that user content, messages, and AI interactions are scanned, analyzed, and reviewed to train machine learning models/algorithms and to enforce their terms and guidelines. This means virtually everything you create or communicate on the platform is subject to automated and human review, not just for content moderation but also to build and improve TikTok's AI systems. This raises significant privacy concerns about the scope of surveillance.

Industry context: Many platforms use data for AI, but the explicit mention of *messages* and *AI interactions* for both training and enforcement, combined with pre-upload scanning, indicates a more aggressive and pervasive approach to content analysis than typically seen.

The Bottom Line

TikTok's Terms of Service and Privacy Policy outline a highly data-intensive service. They collect a vast array of personal information, including potentially sensitive and biometric data, and use it extensively for personalization, advertising, and training their AI models. You grant TikTok broad, irrevocable rights to your content, and your ability to seek recourse for issues is severely limited by restrictive liability clauses, a low liability cap, and mandatory California jurisdiction with a short one-year window for legal action. Proceed with caution, be mindful of what you share, and understand that your content and data are being used in many ways, including to develop TikTok's AI. Always consult a qualified attorney for legal advice.

This analysis is for educational purposes only. FinePrint is not a law firm. AI analysis may contain errors or miss important nuances. For legal decisions, consult a licensed attorney.
This analysis is based on publicly available Terms of Service and Privacy Policy as of the analysis date. Terms may have changed since this analysis. Always check the current version.

Want to analyze a different service? Analyze any TOS →