What Data Does TikTok Collect?

TikTok's privacy policy is one of the most expansive data collection documents of any mainstream consumer app. Most people assume it's similar to Instagram or YouTube — some profile data, some watch history, maybe location. The reality goes significantly further.

Here is a complete breakdown of what TikTok's privacy policy says it collects, based on our full analysis of TikTok's privacy policy.

The obvious stuff

Like any social platform, TikTok collects:

• Your account details — name, username, date of birth, email, phone number
• Your profile photo and bio
• Videos, comments, likes, and direct messages
• Payment information if you use TikTok Shop
• Your browsing and search history within the app

None of this is surprising. What comes next is.

Keystroke patterns and rhythms

TikTok's privacy policy explicitly lists "keystroke patterns or rhythms" as data it collects. The company says this is used for security and anti-spam purposes — not to record what you type, but how you type.

The distinction matters less than it might sound. Typing rhythm is effectively a biometric. The cadence of your keystrokes is as unique as a fingerprint. Once captured, it can identify you across devices and accounts, even if you log out or create a new account. No other major social platform openly discloses collecting this.

Biometric identifiers — faceprints and voiceprints

TikTok's policy states it "may collect biometric identifiers and biometric information as defined under US laws, such as faceprints and voiceprints" from videos you upload.

Consent is only sought "where required by law" — meaning in Illinois, Texas, Washington, and a handful of other states with biometric privacy legislation. Everywhere else, collection happens without explicit consent. TikTok paid $92 million to settle a class-action lawsuit in Illinois over this exact practice in 2021.

Videos you record but never post

This one catches most people off guard. TikTok uses what it calls "pre-uploading" — it processes your video content at the moment of creation, before you decide whether to save or publish it.

The policy is direct about why: to generate recommendations for audio, effects, and captions, and to provide personalised suggestions. In other words, even a video you immediately delete may have been processed by TikTok's servers.

Clipboard content

TikTok can access your device clipboard — text and images you've copied from other apps — when you use certain features. This includes passwords copied from a password manager, sensitive information copied from another app, or anything else sitting in your clipboard at the time.

Apple introduced notifications when apps access clipboard data with iOS 14; TikTok was one of the first apps caught doing this repeatedly, even when the app was in the background.

Your device in extraordinary detail

TikTok's technical fingerprint of your device includes:

• Hardware model, screen resolution, battery level, audio settings
• Names and types of all apps and files on your device
• Mobile carrier, network type, IP address, advertising identifiers
• Connected audio devices, Bluetooth pairings
• SIM card region and time zone

The app and file list is particularly notable — no other mainstream social app claims to collect names of apps installed on your device at this level.

Cross-device tracking and inferred data

TikTok assigns persistent device and user IDs and explicitly states it "may use this and other information to identify your activity across devices." It also says it infers additional attributes from your behaviour — including age, gender, and interests — even if you haven't provided them.

Who gets this data?

Beyond collecting the data, TikTok shares it with:

• TT Commerce & Global Services LLC and its affiliates — a ByteDance-connected entity
• Advertisers and measurement partners
• Independent academic researchers (anonymised, but broad)
• Law enforcement when legally required

The ByteDance connection is the most contested element. ByteDance is subject to Chinese national security law, which can compel Chinese companies to hand over data to the government. TikTok has invested heavily in "Project Texas" — storing US user data on Oracle servers — but the policy still allows data to flow to servers in Singapore and other locations.

What you can do

If you're going to keep using TikTok:

• Set your account to private (Settings → Privacy)
• Disable personalised ads in settings
• Don't sync your contacts
• Never open links inside the TikTok browser — copy the URL and open it externally
• Revoke precise location permission in your phone's app settings
• Be aware that draft videos may be processed before you post or delete them

For a complete breakdown of TikTok's privacy grade, category scores, and red flags, read our full TikTok privacy policy analysis. TikTok received an F — the lowest grade of any app we've analysed.