TikTok Privacy Policy

This document is TikTok's US Privacy Policy (last updated February 5, 2026), governing data collection, use, and sharing practices for TikTok apps, websites, software, and the TikTok Ad Network, operated by TikTok USDS Joint Venture LLC. The policy states that TikTok collects account information, user-generated content (including pre-upload scanning of videos and audio), biometric identifiers such as faceprints and voiceprints from user content, precise and approximate location data, keystroke patterns, clipboard content, AI interaction inputs and outputs, and device identifiers; the terms authorize sharing this information with advertising and analytics partners, payment processors, sellers, third-party platforms, and affiliates, as well as with TT Commerce and Global Services LLC subject to constraints under Executive Order 14352. The policy asserts collection of biometric identifiers and biometric information as defined under US laws from user content, with a statement that required permissions will be sought where required by law, creating jurisdiction-specific obligations under Illinois BIPA, Washington state law, and Texas law, among others; the pre-upload scanning provision, which states content may be collected prior to a user choosing to save or publish it, is operationally distinct from standard disclosure practice and warrants specific review. The policy references compliance with CCPA and other state privacy laws for sensitive personal information, acknowledges Washington's My Health My Data Act via a separate Consumer Health Data Privacy Policy, and engages COPPA-adjacent protections through age-appropriate experience provisions; the policy's assertion that TikTok does not sell personal information or share for cross-context behavioral advertising where restricted by applicable law includes a conditional qualifier that may interact with CCPA and state-level opt-out right requirements. The document's US-specific version, operated through TikTok USDS Joint Venture LLC, reflects the structural response to US regulatory and national security scrutiny, including explicit reference to Executive Order 14352 compliance obligations, which compliance teams should assess in the context of ongoing US government proceedings and data-sharing restrictions with affiliates.