Privacy Policy
This policy explains what information the TikGrow app for Android and the service behind it, operated by BW Collective Ltd (“TikGrow”, “we”, “us”), collect, how it is used and shared, how long it is kept, and the choices you have. It describes how the app and our servers work today.
In short
- We never ask for your TikTok password — you only enter your public TikTok username.
- Payments are handled by Google Play. We never receive your payment card details.
- You can delete your account at any time, in the app or by asking us — see Delete Account.
1. Who we are
The TikGrow app for Android and the service behind it are operated by BW Collective Ltd, United Kingdom. For any question about this policy or your information, contact us at support@tikgrow.app.
2. Information we collect
| What | Details | Why |
|---|---|---|
| Account and sign-in | If you continue as a guest: a random account ID, and a sign-in credential created on your device — our servers keep only a one-way hash of it. If you sign in with Google: your Google account ID, email address and name. | To create your account and sign you in. |
| TikTok username | The public TikTok username you enter, and that account’s public TikTok user ID. | It identifies the TikTok account your orders and community tasks are for. |
| Coins, rewards and orders | Your coin balances (purchased and earned coins), coin transactions, the rewards you claim, your daily streak, the orders you place (type, quantity, the TikTok profile or video link, and progress) and the community tasks you complete. | To run the coin system, deliver your orders and verify tasks. |
| Purchases | For purchases made through Google Play: the Google Play order ID, the product, the purchase token and its status. | To verify and deliver purchases and to process refunds. |
| Sessions and notifications | The IP address and device user agent recorded with each sign-in session; your push-notification token (Firebase Cloud Messaging) and app language. | To keep your account secure and to send you notifications. |
| Advertising | If you choose to watch a rewarded video, Google AdMob collects device information, including your device’s advertising ID. In the EEA and the UK the app asks for your consent with Google’s consent form before any ad is requested. | To show rewarded videos, which earn you coins. |
| App analytics and crash reports | Firebase Analytics records how the app is used — for example screens viewed, sign-in method, and purchases or rewards started and completed. Firebase Crashlytics collects crash reports with device and operating-system details. We don’t attach your TikTok username, links or email address to either. | To understand how the app is used and to fix crashes. |
Information the app handles on your device
- To show profiles and videos, verify community tasks and download videos, the app requests public data directly from TikTok and, when TikTok doesn’t answer, from the third-party service tikwm.com, sending the TikTok username or video link involved.
- The app downloads hashtag lists from our content host (Cloudflare) and checks your internet connection with Google and Cloudflare.
- Because these requests come from your device, those services see your IP address.
- Videos you download, and your download history, are stored only on your device. Sign-in tokens are kept in encrypted storage on your device.
3. How we use information
- To create, operate and secure your account.
- To deliver your orders and verify community tasks.
- To process purchases, restores and refunds.
- To send notifications about your account and orders (you can turn them off).
- To show rewarded videos.
- To prevent fraud and abuse of rewards, purchases and refunds.
- To answer your support requests.
- To fix crashes and understand how the app is used.
4. How we share information
- Other TikGrow members. When an order of yours is fulfilled by the community, your public TikTok username and the profile or video involved are shown to other members as a task.
- Order fulfilment providers. Some orders — including orders paid with purchased coins — are fulfilled by third-party service providers. They receive only the TikTok link and the quantity needed to fulfil the order.
- Google. Firebase (Cloud Messaging, Analytics and Crashlytics), Google Sign-In, Google Play (billing, purchase verification and refund notifications) and Google AdMob (rewarded videos and the consent form). See Google’s privacy policy.
- Hosting. Our servers are located in Germany.
- Legal reasons. When required by law, or to protect our users and the service.
We do not sell your personal information.
5. How long we keep information
- While your account exists, we keep the information above for as long as it is needed to provide the service.
- A sign-in session lasts up to 30 days. Session records, including their IP address and user agent, are deleted 30 days after the session expires.
- A push-notification token is deleted when you delete your account, and automatically when it hasn’t been seen for 90 days.
- Server log files are kept for up to 14 days (error logs for up to 30 days).
- Daily database backups are kept for 14 days.
- When you delete your account, some records are kept for accounting, refunds and fraud prevention. Delete Account lists exactly what is deleted and what is kept.
6. Your choices and rights
- Delete your account in the app, or ask us to — see Delete Account.
- Notifications: turn them on or off in the app’s Settings, or in your device settings.
- Advertising consent (EEA and UK): change your choice at any time in Settings → Manage privacy choices.
- Access or correction: email support@tikgrow.app.
- Depending on where you live, data-protection law (for example the GDPR) may give you further rights. Contact us to exercise them.
7. Security
Traffic between the app and our servers is encrypted (HTTPS). Sign-in tokens are kept in encrypted storage on your device, and guest sign-in credentials are stored on our servers only as one-way hashes. No system is perfectly secure, but we work to protect your information and limit access to it.
8. Children
TikGrow is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.
9. International transfers
Our servers are in Germany. Google’s services may process information in other countries, including the United States.
10. Changes to this policy
We may update this policy. The updated version is posted on this page with a new “Last updated” date.
11. Contact
BW Collective Ltd — TikGrow. Email support@tikgrow.app, or see Contact Support.