In January 2026, TikTok’s US operations officially transitioned to a majority-American-owned joint venture — TikTok USDS Joint Venture LLC — under terms negotiated to address congressional concerns about data access by foreign entities. The transition came with a comprehensive overhaul of the platform’s Terms of Service and Privacy Policy.
The changes received significant coverage focused on the ownership question. Less attention landed on the substantive changes to how the platform collects, uses, and licences personal content — including the photos and videos its users upload.
If you use TikTok, or have used it, the updated policy is worth reading carefully. Here’s what actually changed and what it means for personal visual content.
The Content Licence: What TikTok Can Do With Your Uploads
When you post a video on TikTok, you grant the platform a content licence. This is standard practice across social media platforms — without some form of licence, a platform couldn’t legally display or distribute content you post.
The question is how broad that licence is.
TikTok’s updated US terms include a worldwide, royalty-free licence to the content you upload. This licence covers content you’ve posted publicly as well as content shared only with a restricted audience. It persists after you delete content in certain circumstances.
That last point deserves attention. The updated policy explicitly notes that deleting content “does not necessarily undo rights if the content has already been processed or analysed.” This language matters practically: if TikTok’s systems have processed a video you later deleted — generating metadata, thumbnails, extracted audio, analytical classifications — those derived outputs may not be deleted even when the original video is.
What “Processed or Analysed” Can Mean
Modern video platforms don’t passively store uploaded video. Content is actively analysed: facial features detected, objects classified, audio transcribed, emotion and activity inferred. These processes generate derived data that is distinct from the original video file.
When you delete your video, the platform may delete the video file. The metadata derived from that video — the analytical outputs generated by processing it — may be retained under different policies with different retention periods.
The practical implication: for content that matters to you, deletion is not equivalent to removal from the platform’s data systems.
Precise Location Tracking: A Significant Expansion
One of the clearest changes in the January 2026 policy update is the expansion of location data collection.
Previously, TikTok collected approximate location data — a city-level or regional estimate derived from IP address or coarse device signals. The updated policy introduces collection of precise geolocation for users who permit it, and explicitly notes that photographs and videos uploaded to the platform may carry metadata including precise GPS coordinates.
This matters for two reasons.
EXIF Metadata in Uploaded Photos and Videos
Digital photos taken on smartphones typically contain EXIF metadata: the date, time, and GPS coordinates where the photo was taken, along with device information. This metadata is embedded in the image file itself.
When you upload a photo to TikTok without first stripping EXIF data, you’re uploading that location information along with the image. TikTok’s updated terms explicitly reference this: precise geolocation data is provided in “the metadata of photographs and videos unless it is disabled or removed.”
A photo taken at your home, your workplace, a medical facility, a place of worship, or any sensitive location carries that location information embedded invisibly in the file. You may not intend to share your home address. But if EXIF metadata is present and the platform collects it, you have.
The Persistent Nature of Location Data
Location data collected over time builds a profile that reveals patterns of daily life: where you live, where you work, where you go for medical appointments, who you associate with, and when. This profile is significantly more revealing than any single location data point.
Under TikTok’s updated policy, precise location from uploaded content — photos and videos taken on location — becomes part of the data the platform can collect and retain. How that data is used, how long it’s kept, and whether it can be shared with third parties under certain conditions are governed by the updated policy’s language around data processing.
AI Training and Your Uploaded Content
The January 2026 policy update explicitly addresses AI training in ways the previous version did not.
The updated text states that prompts, uploaded files, and generated responses from TikTok’s AI tools may be collected and used “to train and improve its systems.” This covers content uploaded to AI-powered features within TikTok — photo editing tools, video enhancement, AI filters, and similar features.
When you use an AI feature within TikTok and upload personal content — a photo, a video, a voice recording — that content and the AI’s processing of it can become training data under the current policy terms.
This has a specific practical implication for personal photos: using TikTok’s AI photo editing or enhancement features means uploading your photo to a system that explicitly reserves the right to use that upload as training material.
The Opt-Out Question
Some platforms provide opt-outs from AI training uses of personal content. These are frequently buried in settings, inconsistently applied, and of uncertain effectiveness for data already collected.
TikTok’s updated policy acknowledges user controls exist but doesn’t make them prominent. If you’re concerned about AI training uses of content you’ve already uploaded, locating and enabling any available opt-outs is worthwhile — while understanding that they are unlikely to affect data already processed.
The “Personal Information” Scope Is Broader Than Expected
TikTok’s updated policy uses a broad definition of personal information that covers categories users typically don’t consider.
Beyond the obvious categories (name, email, phone number), the updated policy includes:
- Content you create: videos, comments, images, audio, livestreams
- Behavioural data: what you watch, how long you watch, when you pause, when you rewind, what you skip
- Device information: hardware identifiers, operating system, browser, battery level, audio settings, connected devices
- Network information: IP address, mobile carrier, connection type, signal strength
- Inferred information: interests, preferences, and characteristics inferred from your behaviour
The behavioural and inferred data points are significant. A platform that tracks not just what you post but how you engage with content — including content you watch but don’t interact with — builds a behavioural profile that can reveal preferences, affiliations, health interests, and patterns of daily life that go well beyond what users explicitly share.
What Carrying a Content Licence Means for Photos You Post
Every photo or video you’ve posted publicly on TikTok is subject to the worldwide content licence in the updated terms. This licence allows TikTok to:
- Store and reproduce the content
- Distribute it to other users
- Adapt, transform, and create derivative works
- Use it in connection with commercial purposes as permitted under the terms
The phrase “create derivative works” is the broadest element. A photo you post can be cropped, used as a thumbnail, stylistically filtered, or incorporated into promotional material — all under the existing content licence.
This doesn’t mean TikTok will do any of these things with your specific photo. It means they can. The licence is a grant of rights, not a description of intent.
Why This Differs From Personal Storage
The contrast with private personal storage is structural, not just a matter of degree.
When you store a photo in a private archive — one with clear terms that you own your content, that the provider doesn’t claim a content licence, and that your files are never shared with third parties — none of the above applies. You store the photo. Only you (and the provider’s infrastructure, under their data security obligations) has access. The provider doesn’t gain rights to display, distribute, or create derivatives.
This is what “private storage” actually means: the absence of a content licence, the absence of broad data use rights, and the absence of derived data uses including AI training. The contrast with social media platforms — which require content licences as a condition of use — is a structural difference in the legal relationship between you and the platform.
The Deletion Illusion
Many users manage their exposure to TikTok’s data practices by deleting old content they no longer want the platform to have. The updated policy’s language on this point deserves careful reading.
As noted earlier, deleting a video “does not necessarily undo rights if the content has already been processed or analysed.” Beyond the derived data question, the policy also contains standard language about backup retention — content may persist in backup systems for some period after deletion.
TikTok is not unusual in this respect. Most major platforms have similar language about backup retention periods. But the specificity of the “processed or analysed” carve-out in TikTok’s updated terms is worth noting, particularly for content uploaded to AI features.
Practically: if you care about removal, don’t assume deletion achieves it in full.
Practical Guidance
Strip EXIF Metadata Before Uploading
If you’re posting photos taken in sensitive or private locations, strip EXIF metadata before uploading. Both iOS and Android have built-in options to disable location sharing in photos (Settings → Privacy → Location Services → Camera → Never). Third-party apps can strip metadata from existing photos before upload.
This doesn’t address other data collection described above, but it prevents the most direct exposure of location information.
Review AI Features Before Using Them
If TikTok offers an AI photo enhancement, AI filter, or similar feature, read what the feature does with your upload before using it. The January 2026 policy update explicitly covers AI feature inputs as potential training data.
Audit Your Public Content
Go through your publicly posted photos and videos and consider which ones you’re comfortable remaining permanently associated with your public profile. Content you’ve posted publicly is subject to the content licence regardless of what you do later — but reducing ongoing exposure has value.
Separate Private Archives From Public Sharing
The most straightforward structural approach: use separate systems for public social media content and private personal archives. What you share on TikTok and what you store privately are governed by different terms, different legal relationships, and different practical risks.
Personal photos and videos you care about — family moments, intimate content, anything you’d be uncomfortable having subject to a worldwide content licence — belong in a private archive, not a public social platform.
The Bigger Picture
TikTok’s January 2026 policy overhaul is a significant update to the terms governing an enormous amount of personal video content. The expansion of location data collection, the explicit AI training provisions, and the clarification around deletion permanence are all meaningful changes.
But TikTok is not uniquely aggressive on these dimensions. Most major social media platforms have broad content licences, significant data collection practices, and limited transparency about AI training uses of user content.
What the TikTok update does is make some of these practices more explicit than they’ve previously been — which at least allows informed decision-making. The question for anyone who shares personal photos and videos online is whether the exposure is proportionate to what they’re getting from sharing.
For content that matters — photos of your family, video of private moments, images from locations you’d prefer to keep private — the answer may be to keep it off platforms with content licences entirely.