Privacy Policy隐私政策
Effective: 7 November 2026生效日期：2026 年 11 月 7 日
TweeTok (the "app") is an independently developed third-party media viewer for iOS, tvOS and Android. On Google Play, the app is published by the developer yuanming. This policy explains what information the app collects, why, where it is stored, and how you can control it.
In brief: your X credentials stay on your own device and are not uploaded to us. Usage analytics is sent to PostHog under a random ID generated on your device, and includes the IDs of posts you view or act on and of their authors. Cloud sync is optional and sends data only to a WebDAV server you choose. See section 2.
1. What the app does not do
- It does not store your X password. Sign-in happens on X's own web page.
- It does not operate any server that stores your content or X credentials.
- It does not sell, rent or trade any personal data.
- It contains no advertising SDKs, shows no ads, does not use the advertising ID, and performs no cross-app or cross-site advertising tracking.
- It does not read your contacts, calendar, photo library or health data, and does not use your device's GPS location.
2. What the app collects
2.1 X credentials (device only)
After you sign in through X's official login page inside the app, the app retains the session credentials returned by X (auth_token, ct0, twid) in order to access X on your behalf.
- Where: on iOS, the system Keychain. On Android, the app's private storage, encrypted with Android Keystore and excluded from system backup and device transfer.
- Sent to: X's own servers only, to load content and carry out your actions. They are never sent to us or to our analytics provider.
- Exception (iOS only): if you choose to use "Pair with Apple TV", the credentials are transferred directly between your two devices over your local network.
2.2 Content sent to X
Replies and quotes you write, and actions such as likes, bookmarks, reposts and blocks, are sent directly to X and are governed by X's terms and privacy policy. We do not store this content.
2.3 Usage analytics (sent to PostHog)
The app uses PostHog to analyse feature usage. Data is sent to its servers in the United States (us.i.posthog.com). The app currently has no setting to turn analytics off.
Users are distinguished by an ID generated randomly on your device. The mapping from X account to that ID stays on your device. We do not send your X username or password as analytics data. However, events include post IDs and author IDs. From build 104, the Android app removes your own X ID from events; earlier Android builds and the iOS app may send your own X ID when you view your own posts or profile. Combined with public information on X, these records could in theory be used to infer identity, so we do not describe this data as fully anonymous. What is reported:
| Category | Details | Purpose |
|---|---|---|
| Identifier | A random ID generated on your device | Distinguish usage between users |
| Browsing behaviour | IDs of posts you view, author IDs, the timeline, whether the post has media | Understand how content is browsed and improve the experience |
| Interaction events | Likes, bookmarks, reposts, replies, translations, caching, search (iOS), timeline switches, entering fullscreen and similar actions | Understand feature adoption |
| Purchase events | Opening the purchase screen, starting, completing or failing a purchase, restoring a purchase | Check that purchasing works. No payment details |
| Reports and blocks | Reported post ID, author ID and reason; blocked account ID | So that we receive and can act on reports |
| Outbound links | The domain of any external link you open (never the path or query string) | Diagnose link-opening failures |
| Diagnostics | Reasons for sign-in or sync failures; the type of sync service and whether it is encrypted (not the server address or account) | Troubleshooting |
| Device and app info | Device model, OS version, app version, language, time zone, launch and foreground/background events | Compatibility and stability |
| Approximate location | PostHog may infer an approximate location from the IP address of the request | Understand where the app is used |
Not sent to analytics: your credentials and password, post text, the text of your replies, full URLs of external links, your WebDAV address and password, and payment details.
2.4 Purchases
TweeTok Pro is a one-time purchase. Payment is handled by Google Play or the App Store, and we never receive your card or other payment details. The app only reads the purchase status from the platform to unlock features. Purchases on the two platforms are separate.
2.5 Cloud sync (optional, using your own server)
If you turn on cloud sync, the app sends your library (cached posts and media), read history and related settings to the WebDAV server you enter. We do not operate that server and cannot access this data, which is governed by the terms of that server's provider.
- Your WebDAV address and password are stored only on your device.
- If you enter an unencrypted
httpaddress, others on the same network may be able to see this data. The app warns you about this. - Disconnecting leaves the cloud files in place for you to delete on your own server. You can also choose in the app to delete an item from all devices.
2.6 Local data on your device
The following is stored on your device, and we cannot access it. If you turn on cloud sync, your library, read history and related settings are sent to your server. If you have Android device backup turned on, app data other than sign-in credentials may be included in the backup:
- Posts, images, videos and posters you cache for offline use
- Temporary image and video caches
- Read history, timeline preferences, filter settings, and report and block records
- Your list of signed-in accounts
On iOS these files can be viewed in the Files app under "On My iPhone → TweeTok". On Android they can be exported from the app to the "Download/TweeTok" folder.
2.7 Demo account
The app's "demo account" option is only for app review and demonstrations. When used, the demo credentials you enter are sent to our sign-in service (tweetok-demo.wym572.workers.dev, running on Cloudflare) in exchange for a session. Regular users do not need it.
2.8 Website analytics
This website (tweetok.github.io) uses PostHog in cookieless mode to measure visits. It records which pages are viewed, the site or search engine a visit came from, the page language, and whether an App Store download button was clicked.
- The website sets no cookies and stores no identifier in your browser. PostHog estimates visitor numbers from a processed hash on its servers, and we cannot use it to identify a specific person.
- This data is not linked to the app's analytics data or to your X account.
- PostHog may infer an approximate location from the IP address of the request.
3. System permissions
| Platform | Permission | Purpose |
|---|---|---|
| Android | Network access and network state | Load content and check connectivity |
| Android | Google Play billing | Purchase TweeTok Pro |
| Android | Boot completed, wake lock | Used by the scheduler for background tasks (cloud sync) |
| iOS | Photo Library (add only) | Writes only when you tap Save; never reads your library |
| iOS | Camera | Only to scan the Apple TV pairing QR code; no image is stored or uploaded |
| iOS | Local Network | Transfer your session to a paired Apple TV and reach a WebDAV server on your local network |
4. Third-party services
| Service | Role | Privacy policy |
|---|---|---|
| X (X Corp.) | The source of all content shown in the app. Your relationship with X is governed by X's own terms and privacy policy. | x.com/en/privacy |
| PostHog | Product usage analytics and website analytics (see sections 2.3 and 2.8). A service provider processing data on our behalf. | posthog.com/privacy |
| Google Play / App Store | App distribution and payment processing | Google / Apple |
| Your chosen WebDAV service | Optional cloud sync (see section 2.5) | As set by the provider you choose |
The app integrates no ad networks and no data brokers. Beyond the above, we do not share your data with third parties.
5. International transfer and retention
- Analytics data is stored on PostHog servers in the United States. If you are elsewhere, this constitutes an international transfer.
- Retention of analytics data follows PostHog's default policy.
- Local data is removed when you delete the app. Synced data stays on your own server.
6. Your rights and controls
- Delete credentials: sign out in the app; the credentials on your device are cleared immediately.
- Clear local data: Settings offers "Clear Image Cache" and "Clear Read History"; cached posts can be deleted individually or all at once from the cache list.
- Break the analytics link: signing out clears that account's random analytics ID on your device. Signing in again generates a new ID, and earlier records no longer correspond to the ID on your device.
- About deletion requests: analytics records are stored only under the random ID, which the app does not display, so we currently cannot find and delete specific records based on your identity. You are welcome to write to us with questions.
- About your X account: the app does not create accounts. To delete your X account or data on X, please do so on X.
- The law where you live (such as the GDPR or CCPA) may give you other rights. Contact us to exercise them. We never sell personal information.
7. Children
The app displays user-generated content from X that we do not review in advance. It may include material unsuitable for minors and is not directed at them. On Google Play its target audience is 18 and over; its App Store rating is 17+. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it. See our child safety standards.
8. Relationship with X Corp.
TweeTok is an independently developed third-party viewer. It is not affiliated with, endorsed by, sponsored by or authorised by X Corp. "X" and related marks are trademarks of X Corp. You need your own X account to use the app. All content shown originates from X and remains the property of its respective authors.
9. Changes to this policy
If this policy changes we will update the effective date at the top of this page. Material changes to how data is processed will be announced prominently within the app.
10. Contact
For questions about this policy, contact:
wym572@gmail.com
We respond within 30 days.
TweeTok（下称「本应用」）是一款独立开发的第三方媒体浏览工具，提供 iOS、tvOS 和 Android 版本。在 Google Play 上，本应用由开发者 yuanming 发布。本政策说明本应用收集哪些信息、为什么收集、存放在哪里，以及你如何控制这些信息。
简要说明：你的 X 登录凭据只保存在你自己的设备上，不会上传给我们。使用分析数据以设备生成的随机 ID 发送给 PostHog，其中包含你浏览和操作的帖子 ID，以及作者 ID。云端同步是可选功能，数据只发送到你自己指定的 WebDAV 服务器。详见第 2 节。
1. 本应用不做什么
- 不保存你的 X 账号密码。登录在 X 官方网页中完成。
- 不运营存放你的内容或 X 登录凭据的服务器。
- 不出售、不出租、不交易任何个人数据。
- 不接入广告 SDK，不展示广告，不使用广告 ID，不做跨应用或跨网站的广告追踪。
- 不读取你的通讯录、日历、相册内容或健康数据，也不使用设备的 GPS 定位。
2. 本应用收集什么
2.1 X 登录凭据（仅存于你的设备）
你在应用内的 X 官方登录页完成登录后，本应用会保留 X 返回的会话凭据（auth_token、ct0、twid），用于代表你访问 X。
- 存放位置：iOS 版存于系统 Keychain；Android 版用 Android Keystore 加密后存于应用私有目录，并排除在系统备份和设备迁移之外。
- 发送给谁：只发送给 X 自己的服务器，用于加载内容和执行你的操作。不会发送给我们或分析服务商。
- 例外（仅 iOS）：若你主动使用「连接 Apple TV」，凭据会在同一本地网络内、在你的两台设备之间直接传输。
2.2 发送给 X 的内容
你在应用内发布的回复和引用文字、点赞、收藏、转发、拉黑等操作会直接发送给 X，并受 X 的条款和隐私政策约束。我们不保存这些内容。
2.3 使用分析数据（发送给 PostHog）
本应用使用 PostHog 分析功能使用情况，数据发送至其位于美国的服务器（us.i.posthog.com）。目前应用内没有关闭分析的开关。
用于区分用户的标识是一个在你设备上随机生成的 ID。「X 账号 → 随机 ID」的对应关系只保存在你的设备上。我们不会把你的 X 用户名或密码作为分析数据发送。不过，事件中含有帖子 ID 和作者 ID。Android 版从 build 104 起会把你本人的 X ID 从事件中去掉；更早的 Android 版本和 iOS 版在你浏览自己的帖子或主页时，可能发送你本人的 X ID。结合 X 上的公开信息，这些记录理论上可能被用于推断身份，所以我们不把这些数据称为完全匿名。上报内容包括：
| 类别 | 具体内容 | 用途 |
|---|---|---|
| 标识 | 设备本地随机生成的 ID | 区分不同用户的使用情况 |
| 浏览行为 | 你查看的帖子 ID、作者 ID、所在时间线、是否含媒体 | 了解内容浏览方式，优化体验 |
| 操作事件 | 点赞、收藏、转发、回复、翻译、缓存、搜索（iOS）、切换时间线、进入全屏等动作 | 了解功能使用率 |
| 购买事件 | 打开购买页、开始购买、购买完成或失败、恢复购买 | 了解购买流程是否正常。不含支付信息 |
| 举报和拉黑 | 被举报的帖子 ID、作者 ID、举报原因；被拉黑的账号 ID | 让我们收到举报并处理 |
| 外链点击 | 你点开的外部链接的域名（不含路径与查询参数） | 诊断链接打开失败 |
| 诊断信息 | 登录或同步失败的原因；所用的同步服务类型、是否加密（不含服务器地址和账号） | 排查故障 |
| 设备与应用信息 | 设备型号、系统版本、应用版本、语言、时区、启动与前后台切换事件 | 兼容性与稳定性排查 |
| 大致位置 | PostHog 可能根据网络请求的 IP 地址推断大致位置 | 了解使用地区 |
不发送给分析服务的内容：你的登录凭据和密码、帖子正文、你写的回复内容、外部链接的完整地址、WebDAV 地址和密码、支付信息。
2.4 购买
TweeTok Pro 是一次性购买，由 Google Play 或 App Store 处理付款。我们收不到你的银行卡等支付信息。本应用只从平台读取购买状态，用于解锁功能。两个平台的购买相互独立。
2.5 云端同步（可选，使用你自己的服务器）
如果你开启云端同步，本应用会把资料库（离线缓存的帖子和媒体）、已读记录和相关设置发送到你自己填写的 WebDAV 服务器。我们不运营该服务器，也无法访问这些数据，它们受该服务器提供方的条款约束。
- WebDAV 的地址和密码只保存在你的设备上。
- 如果你填写的是未加密的
http地址，同一网络中的其他人可能看到这些内容，应用会提示你。 - 断开同步后，云端文件会保留，由你在自己的服务器上删除；你也可以在应用内选择从所有设备删除某条内容。
2.6 保存在你设备上的本地数据
以下数据保存在你的设备上，我们无法访问。开启云端同步后，其中的资料库、已读记录和相关设置会发送到你的服务器。如果你开启了 Android 设备备份，除登录凭据外的应用数据可能包含在备份中：
- 你主动离线缓存的帖子、图片、视频和封面
- 图片与视频的临时缓存
- 已读记录、时间线偏好、筛选设置、举报和拉黑记录等本地设置
- 多账号列表
iOS 版可在「文件」App 的「我的 iPhone → TweeTok」中查看这些文件。Android 版可在应用内导出到「下载/TweeTok」文件夹。
2.7 演示账号
应用的「演示账号」入口仅供审核和功能演示使用。使用时，你输入的演示账号信息会发送到我们的登录服务（tweetok-demo.wym572.workers.dev，运行在 Cloudflare 上）以换取会话。普通用户不需要使用。
2.8 官网访问统计
本网站（tweetok.github.io）使用 PostHog 的无 Cookie 模式统计访问情况，记录的内容包括：访问了哪些页面、从哪个网站或搜索引擎进入、页面语言，以及是否点击了 App Store 下载按钮。
- 网站不设置 Cookie，也不在浏览器中存储任何标识。PostHog 在其服务器上用经过处理的哈希值估算访客数量，我们无法据此识别具体的人。
- 这些数据不会与应用内的分析数据或你的 X 账号关联。
- PostHog 可能根据访问请求的 IP 地址推断大致位置。
3. 系统权限
| 平台 | 权限 | 用途 |
|---|---|---|
| Android | 网络访问和网络状态 | 加载内容、判断网络是否可用 |
| Android | Google Play 结算 | 购买 TweeTok Pro |
| Android | 开机广播、唤醒锁定 | 后台任务（云端同步）的调度组件使用 |
| iOS | 相册（仅添加） | 仅在你点击保存图片或视频时写入，不读取相册内容 |
| iOS | 相机 | 仅用于扫描 Apple TV 上的配对二维码，不保存也不上传影像 |
| iOS | 本地网络 | 向已配对的 Apple TV 传输账号会话，以及连接局域网内的 WebDAV 服务器 |
4. 第三方服务
| 服务 | 作用 | 隐私政策 |
|---|---|---|
| X（X Corp.） | 本应用展示的全部内容的来源。你与 X 的关系受 X 自己的条款与隐私政策约束。 | x.com/en/privacy |
| PostHog | 产品使用分析与官网访问统计（见第 2.3、2.8 节）。代我们处理数据的服务提供方。 | posthog.com/privacy |
| Google Play / App Store | 应用分发和付款处理 | Google / Apple |
| 你选择的 WebDAV 服务 | 可选的云端同步（见第 2.5 节） | 以你选择的服务提供方为准 |
本应用不接入广告网络和数据经纪服务。除上述情况外，我们不与第三方分享你的数据。
5. 数据跨境传输与保留
- 分析数据存放在 PostHog 位于美国的服务器上。若你身处其他地区，这构成一次跨境传输。
- 分析数据的保留期遵循 PostHog 的默认策略。
- 本地数据在你卸载应用时随之删除。云端同步的数据保留在你自己的服务器上。
6. 你的权利与控制方式
- 删除登录凭据：在应用内退出登录，设备上的对应凭据会被立即清除。
- 清除本地数据：设置页提供「清除图片缓存」与「清除已读记录」；离线缓存可在缓存列表中单条或全部删除。
- 断开分析关联：退出登录会清除该账号在设备上的随机分析 ID；再次登录会生成新的 ID，此前的记录不再与设备上的 ID 对应。
- 关于删除请求：分析记录只按随机 ID 存放，应用不显示这个 ID，所以我们目前无法按你的身份找到并删除特定记录。如有疑问，欢迎来信。
- 关于你的 X 账号：本应用不创建账号。要删除 X 账号或 X 上的数据，请在 X 上操作。
- 你所在地区的法律（如 GDPR、CCPA）可能赋予你其他权利。如需行使，请联系我们。我们从不出售个人信息。
7. 儿童
本应用展示的是 X 上未经我们预先审查的用户生成内容，其中可能包含不适宜未成年人的内容，不面向未成年人。在 Google Play 上，目标受众为 18 岁及以上；App Store 分级为 17+。我们不会有意收集儿童的个人信息。如果你认为一名儿童向我们提供了个人信息，请联系我们，我们会予以删除。我们的儿童安全标准见此页。
8. 与 X Corp. 的关系
TweeTok 是独立开发的第三方浏览工具，与 X Corp. 无任何关联，未获其认可、赞助或授权。「X」及相关标识是 X Corp. 的商标。使用本应用需要你自己的 X 账号，应用内展示的所有内容均来自 X 平台，版权归各自原作者所有。
9. 政策变更
本政策如有变更，我们会更新本页顶部的生效日期。涉及数据处理方式的重大变更，会在应用内以显著方式告知。
10. 联系我们
关于本政策的任何疑问，请联系：
wym572@gmail.com
我们会在 30 天内回复。
© 2026 TweeTok · Last updated 7 November 2026© 2026 TweeTok · 本页最后更新于 2026 年 11 月 7 日