TweeTok

隐私政策Privacy Policy · 生效日期：2026 年 9 月 7 日Effective: 7 September 2026

TweeTok（下称「本应用」）是一款独立开发的第三方媒体浏览工具。本政策说明本应用收集哪些信息、为什么收集、存放在哪里，以及你如何控制这些信息。

一句话概括：你的 X 登录凭据只保存在你自己的设备上，我们看不到，也永远不会上传。使用分析数据以一个与你的 X 账号无关的随机 ID 上报，我们无法把任何记录关联回你的真实身份。详见第 2 节。

1. 本应用不做什么

不收集、不接触、不传输你的 X 账号密码。登录全程在 X 官方网页中完成。
不运营任何存放你内容或凭据的服务器。
不出售、不出租、不交易任何个人数据。
不做跨应用或跨网站的广告追踪，不使用 App Tracking Transparency 追踪权限，不接入任何广告 SDK。
不收集你的位置、通讯录、日历、健康或财务数据。

2. 本应用收集什么

2.1 X 登录凭据（仅存于你的设备）

你在应用内的 X 官方登录页完成登录后，本应用会保留 X 返回的会话凭据（auth_token、ct0、twid），用于代表你请求你自己的时间线内容。

存放位置：你设备上的 iOS Keychain，由系统加密。
是否上传：否。这些凭据不会发送给我们或任何第三方，唯一的去向是 X 自己的服务器。
例外：若你主动使用「连接 Apple TV」功能，凭据会在你的本地网络内、在你的两台设备之间直接传输，不经过互联网。

2.2 使用分析数据（发送给 PostHog）

本应用使用 PostHog 分析功能使用情况，数据发送至其位于美国的服务器（us.i.posthog.com）。

这些数据以匿名方式上报。用于区分用户的标识符是一个在你设备上随机生成的 UUID，与你的 X 账号没有任何数学或逻辑关联；「X 账号 → 随机 ID」的对应关系只保存在你设备的 Keychain 中，永不离开设备。因此分析服务上不存在、也无法推导出你的 X 身份。上报内容包括：

类别	具体内容	用途
匿名标识	设备本地随机生成的 UUID	区分不同用户的使用情况
浏览行为	你查看的推文 ID、该推文作者的 ID、所在时间线、是否含媒体	了解内容消费方式，优化浏览体验
操作事件	点赞、收藏、转发、评论、翻译、缓存、搜索、切换时间线、进入全屏等动作	了解功能使用率
外链点击	你点开的外部链接的域名（不含路径与查询参数）	诊断链接打开失败
设备与应用信息	设备型号、系统版本、应用版本、语言、启动与前后台切换事件	兼容性与稳定性排查

不上报的内容：你的 X 用户 ID、X 用户名（handle）、你所浏览作者的用户名、外部链接的完整地址，均不会发送给分析服务。你的登录凭据在任何情况下都不会离开设备。本应用未接入广告 SDK，不做跨应用或跨网站追踪，不请求 App Tracking Transparency 权限。

2.3 保存在你设备上的本地数据

以下数据只存在于你的设备，不会离开设备：

你主动离线缓存的推文正文、图片与媒体封面（存于应用的 Documents 目录）
图片与视频的临时缓存
已读记录、时间线偏好、筛选设置等本地偏好
多账号列表

这些离线缓存文件可以通过 iOS「文件」App，在「我的 iPhone → TweeTok」中直接查看、导出或删除，无需经过我们。

3. 系统权限

权限	何时使用	是否读取你的数据
相册（仅添加）	仅在你点击保存图片或视频时	否，只写入，不读取相册内容
相机	仅用于扫描 Apple TV 上显示的配对二维码	否，不保存也不上传任何影像
本地网络	仅用于向同一网络内已配对的 Apple TV 传输账号会话	否，不扫描网络中的其他设备

4. 第三方服务

服务	作用	隐私政策
X（X Corp.）	本应用展示的全部内容的来源。你与 X 的关系受 X 自己的条款与隐私政策约束。	x.com/en/privacy
PostHog	产品使用分析（见第 2.2 节）	posthog.com/privacy

本应用不接入广告网络、崩溃归因 SDK 或任何数据经纪服务。

5. 数据跨境传输与保留

分析数据存放在 PostHog 位于美国的服务器上。若你身处欧洲经济区、英国或其他地区，这构成一次跨境传输。
分析数据的保留期遵循 PostHog 的默认策略。由于数据已匿名化，其中不含可用于定位到你个人的字段。
本地数据在你卸载应用时随之删除。

6. 你的权利与控制方式

删除登录凭据：在应用内退出登录，Keychain 中的对应凭据会被立即清除。
清除本地缓存：设置页提供「清除图片缓存」与「清除已读记录」；离线缓存的推文可在缓存列表中单条或全部删除。
重置分析标识：退出登录会同时清除设备上的随机分析 ID；再次登录会生成一个全新的 ID，此前的记录无法与新 ID 关联。这是你可以自行完成的、最彻底的「断开关联」操作。
关于删除请求：由于分析数据不含任何可识别你身份的信息，我们无法在收到请求时定位属于你的记录，因此无法执行针对个人的删除或导出。这是匿名化处理的必然结果，也意味着这些数据在 GDPR 意义上不构成个人数据。若你希望核实这一点，欢迎来信询问。
如你位于欧洲经济区或英国，你另享有 GDPR 下的反对处理、限制处理与数据可携权；如你位于加利福尼亚州，你享有 CCPA 下的知情与删除权（我们从不出售个人信息）。

7. 儿童

本应用不面向 13 岁以下儿童，也不会有意收集其个人信息。本应用展示的是 X 上未经审查的用户生成内容，其中可能包含不适宜未成年人的内容，App Store 分级为 17+。若你认为一名儿童向我们提供了个人信息，请联系我们，我们会予以删除。

8. 与 X Corp. 的关系

TweeTok 是独立开发的第三方浏览工具，与 X Corp. 无任何关联，未获其认可、赞助或授权。「X」及相关标识是 X Corp. 的商标。使用本应用需要你自己的 X 账号，应用内展示的所有内容均来自 X 平台，版权归各自原作者所有。本应用不托管、不生成、不分发任何内容。

9. 政策变更

本政策如有变更，我们会更新本页顶部的生效日期。涉及数据处理方式的重大变更，会在应用内以显著方式告知。

10. 联系我们

关于本政策的任何疑问、数据访问或删除请求，请联系：
wym572@gmail.com

我们会在 30 天内回复。

TweeTok (the "app") is an independently developed third-party media viewer. This policy explains what information the app collects, why, where it is stored, and how you can control it.

In one sentence: your X credentials stay on your own device and are never uploaded to us. Usage analytics is reported under a random identifier unrelated to your X account, so no record can be traced back to your real identity. See section 2.

1. What the app does not do

It does not collect, handle or transmit your X password. Sign-in happens entirely on X's own web page.
It does not operate any server that stores your content or credentials.
It does not sell, rent or trade any personal data.
It does not perform cross-app or cross-site advertising tracking, does not request App Tracking Transparency permission, and contains no advertising SDKs.
It does not collect your location, contacts, calendar, health or financial data.

2. What the app collects

2.1 X credentials (device only)

After you sign in through X's official login page inside the app, the app retains the session credentials returned by X (auth_token, ct0, twid) in order to request your own timeline on your behalf.

Where: the iOS Keychain on your device, encrypted by the system.
Uploaded? No. These credentials are never sent to us or to any third party; the only destination is X's own servers.
Exception: if you choose to use "Pair with Apple TV", the credentials are transferred directly between your two devices over your local network. They do not traverse the internet.

2.2 Usage analytics (sent to PostHog)

The app uses PostHog to analyse feature usage. Data is sent to its servers in the United States (us.i.posthog.com).

This data is reported anonymously. The identifier used to distinguish users is a UUID generated randomly on your device, with no mathematical or logical relationship to your X account. The mapping from X account to that random ID is held only in your device's Keychain and never leaves it. Your X identity therefore does not exist on, and cannot be derived from, the analytics service. What is reported:

Category	Details	Purpose
Anonymous identifier	A UUID generated randomly on your device	Distinguish usage between users
Browsing behaviour	IDs of posts you view, the ID of each post's author, which timeline it came from, whether it contains media	Understand content consumption, improve the browsing experience
Interaction events	Likes, bookmarks, retweets, replies, translations, caching, search, timeline switches, entering fullscreen, and similar actions	Understand feature adoption
Outbound links	The domain of any external link you open (never the path or query string)	Diagnose link-opening failures
Device and app info	Device model, OS version, app version, language, launch and foreground/background events	Compatibility and stability

What is never reported: your X user ID, your X username (handle), the usernames of authors you view, and the full URLs of external links are not sent to the analytics service. Your credentials never leave the device under any circumstances. The app contains no advertising SDKs, performs no cross-app or cross-site tracking, and does not request App Tracking Transparency permission.

2.3 Local data on your device

The following never leaves your device:

Posts, images and media posters you explicitly cache for offline use (stored in the app's Documents directory)
Temporary image and video caches
Read history, timeline preferences and filter settings
Your list of signed-in accounts

These offline files are browsable directly in the iOS Files app under "On My iPhone → TweeTok", where you can inspect, export or delete them yourself without going through us.

3. System permissions

Permission	When it is used	Does it read your data?
Photo Library (add only)	Only when you tap Save on an image or video	No — write only; the app never reads your library
Camera	Only to scan the pairing QR code shown by the Apple TV app	No image is stored or uploaded
Local Network	Only to transfer your session to a paired Apple TV on the same network	No — the app does not scan for other devices

4. Third-party services

Service	Role	Privacy policy
X (X Corp.)	The source of all content shown in the app. Your relationship with X is governed by X's own terms and privacy policy.	x.com/en/privacy
PostHog	Product usage analytics (see section 2.2)	posthog.com/privacy

The app integrates no ad networks, no crash-attribution SDKs and no data brokers.

5. International transfer and retention

Analytics data is stored on PostHog servers in the United States. If you are in the EEA, the UK or elsewhere, this constitutes an international transfer.
Retention follows PostHog's default policy. As the data is anonymised, it contains no field that could be used to locate you.
Local data is removed when you delete the app.

6. Your rights and controls

Delete credentials: sign out in the app; the corresponding Keychain entries are cleared immediately.
Clear local data: Settings offers "Clear image cache" and "Clear read history"; cached posts can be deleted individually or all at once from the cache list.
Reset your analytics identifier: signing out also clears the random analytics ID stored on your device. Signing in again generates a fresh one, and earlier records cannot be associated with it. This is the most complete way to break the association, and you can do it yourself.
About deletion requests: because the analytics data contains nothing that identifies you, we cannot locate records belonging to you and therefore cannot perform individual deletion or export. This is an unavoidable consequence of anonymisation, and it also means the data does not constitute personal data under the GDPR. You are welcome to write to us if you would like to verify this.
If you are in the EEA or UK you additionally have GDPR rights to object to and restrict processing and to data portability. If you are a California resident you have CCPA rights to know and to delete. We never sell personal information.

7. Children

The app is not directed at children under 13 and does not knowingly collect their personal information. It displays unmoderated user-generated content from X, which may include material unsuitable for minors; its App Store rating is 17+. If you believe a child has provided us with personal information, please contact us and we will delete it.

8. Relationship with X Corp.

TweeTok is an independently developed third-party viewer. It is not affiliated with, endorsed by, sponsored by or authorised by X Corp. "X" and related marks are trademarks of X Corp. You need your own X account to use the app. All content shown originates from X and remains the property of its respective authors. The app hosts, generates and distributes no content of its own.

9. Changes to this policy

If this policy changes we will update the effective date at the top of this page. Material changes to how data is processed will be announced prominently within the app.

10. Contact

For questions about this policy, or to request access to or deletion of your data:
wym572@gmail.com

We respond within 30 days.