Douyin

Is Douyin safe?

Douyin is about as safe as other big Chinese social apps, and no safer: it gives users more control than many, but it collects a lot, keeps it in China, and has a regulator record. We score it 43/100, a little above TikTok (41), its international sibling, and a point above Kwai (42). The main catches are broad data collection linked to your identity, storage under Chinese law, and a feed built around live tipping and shopping. Its best side is the set of switches that let you turn the algorithm down or off.

Both Douyin and TikTok belong to ByteDance, but Douyin is run by Beijing Douyin Technology for mainland China, has about 52.1 million ratings on China's App Store, and is not the same service: accounts, content and rules are separate.

What Douyin collects and where it goes

The label on China's App Store is one of the broadest we have read. A device ID is used to track you across other companies' apps. Linked to your identity are precise and coarse location, contacts, browsing and search history, purchase history, payment information, your name, phone number and address, photos, videos, audio and customer support messages.

The privacy policy, updated on 11 September 2026, explains how this is used. Personalised recommendations draw on device identifiers, sensor data, GPS, Wi-Fi and cell-tower location and everything you search, watch, like and buy, and the same profile serves ads and product suggestions. If you allow it, your contacts are uploaded in encrypted form to suggest friends, and people who uploaded your number may be shown your account. Data collected in mainland China is stored there.

That last point matters more than it would for a European app. Data held in China is open to requests from Chinese authorities, and what you can post and see follows Chinese content rules. Users outside China rarely need Douyin, and those who install it should assume Chinese law applies to everything they post.

Regulators have acted on it

In May 2021 the Cyberspace Administration of China (CAC) put Douyin first in a notice on 105 apps that collected personal information illegally. It found that Douyin version 15.7.0 broke the "necessity principle" by collecting information unrelated to its service, and gave operators 15 working days to fix the problems. In February 2023 the CAC reported that during 2022 it had summoned, ordered fixes from, or fined Douyin, Kuaishou, Bilibili and others over sexual content, abuse and pushing users to tip streamers, without saying which platform got which penalty.

The largest penalty came in April 2026. China's State Administration for Market Regulation fined seven platforms, including Douyin, a combined 3.597 billion yuan in its "ghost takeaway" cases. According to Sina Finance, Douyin's share was 56.89 million yuan (about US$8 million): 45.4 million for failing to check sellers' food licences, 2 million for ignoring "one-click order transfers" to unlicensed kitchens without telling buyers, and 9.49 million in confiscated income. The regulator found 454 cake sellers on Douyin without valid licences, 17 of them with forged ones, and suspended new cake shops for six months. Douyin said it accepted the penalty.

Controls worth using

Douyin's policy offers more switches than many Western apps. You can turn off personalised recommendations under Settings, then Personal information management, which removes the Recommended feed. A "basic function mode" collects only what Chinese law requires and limits you to browsing and search for a set time. You can download your data, see and log out signed-in devices, and delete the account in the app.

For families, the minors mode is strict. Real-name-verified children under 14 are put in it automatically, and it limits when and how long the app can be used; parents can add a daily time lock with a password.

On security, we found no reported breach of Douyin user data. The policy cites ISO 27001 and ISO 27701 certification and China's level-3 information security assessment, and ByteDance's security response centre pays researchers for bug reports. The policy does not describe end-to-end encryptionEnd-to-end encryptionEncryption in which only the sender and the recipient can read a message. The company running the service cannot see its content.More in the glossary for messages.

How to use Douyin more safely

1. Leave contacts and location access off; friend suggestions and "people nearby" both rely on them.
2. Switch off personalised recommendations if you want a calmer feed, or use the content preference tool to cut categories.
3. Turn on minors mode and the time lock on a child's account.
4. Buy only from shops showing a business licence, and be wary of live-stream deals that move payment outside the app.
5. Decide on a spending limit before watching live streams, where gifts to streamers are paid with real money.

How we scored it

Transparency and control (60) is Douyin's strongest factor, thanks to the recommendation switch, basic mode, data download and in-app deletion. Privacy (25) is the weakest: the label links location, contacts and browsing history to you and data stays in China. Security sits at 50 with no known breach but no end-to-end encryptionEnd-to-end encryptionEncryption in which only the sender and the recipient can read a message. The company running the service cannot see its content.More in the glossary. The regulatory record (50) combines the 2021 CAC order and the 2026 fine, and scams and harmful content (42) reflect the 2022 penalties and unlicensed sellers.