TikTok collects information about how you type on your device, including the rhythm and patterns of your keystrokes, as well as detailed device and sensor information.
This analysis describes what TikTok Ads's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Keystroke dynamics can be used as a behavioral biometric identifier, capable of uniquely identifying individuals; collection of this data is unusual among mainstream consumer apps and may carry specific legal implications in biometric data jurisdictions.
Interpretive note: Whether keystroke pattern collection constitutes biometric data under BIPA or GDPR Article 9 depends on how the data is used and processed; the policy does not specify the purpose of this collection beyond general device information, creating interpretive uncertainty.
The updated policy changed the controlling entity from TikTok USDS Joint Venture LLC to TikTok Pte. Ltd., a Singapore-registered company. The U.S.-specific privacy policy language was replaced with terms covering "other regions." Users previously governed under U.S. privacy protections are now subject to different jurisdictional terms.
View change record →TikTok collects keystroke rhythms and patterns from your device, which is a form of behavioral biometric data that can potentially be used to identify you; this collection occurs automatically as part of using the app and is not separately disclosed as a biometric data practice in the policy.
How other platforms handle this
We use your personal information to send you newsletters and other promotional communications, including information about MyFitnessPal's new offerings, features, offers, events, webinars, and other information.
We may infer certain information from your interactions with the Lyft Platform and other personal information available to us. For example, if you frequently ride to or from airports, we may infer you are a frequent traveler.
we may use this information to make it easier for you to find the people you want to send payments to, for account and identity verification and fraud prevention purposes, to reduce the risk you will send payments to the wrong person, or to provide other personalized services.
"We collect certain information about the device you use to access the Platform, such as your IP address, user agent, mobile carrier, time zone settings, identifiers for advertising purposes, model of your device, the device system, network type, your screen resolution and operating system, app and file names and types, keystroke patterns or rhythms, battery state, audio settings and connected audio devices.Excerpt from TikTok Ads's TikTok Privacy Policy
(1) REGULATORY LANDSCAPE: Keystroke dynamics collection engages GDPR Article 4 (definition of biometric data if used for unique identification), Illinois BIPA (which defines biometric identifiers to include data based on an individual's biological characteristics that …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
We read the privacy policies and terms of service of 38 AI platforms. Here is what they say about training, retention, arbitration, and liability.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Keystroke dynamics can be used as a behavioral biometric identifier, capable of uniquely identifying individuals; collection of this data is unusual among mainstream consumer apps and may carry specific legal implications in biometric data jurisdictions.
TikTok collects keystroke rhythms and patterns from your device, which is a form of behavioral biometric data that can potentially be used to identify you; this collection occurs automatically as part of using the app and is not separately disclosed as a biometric data practice in the policy.
ConductAtlas has identified this type of provision across 279 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by TikTok Ads.