Privacy Policy
Last updated 23 October 2026
The short version
These are the same lines you see in the app, and they are the whole idea:
- You log in on TikTok. We never see your password.
- Your data stays on your device.
- We never store or share your TikTok account.
- Your cleanup history is stored only on this phone.
- We collect anonymous usage events only. Never your TikTok username, videos or captions.
- Your TikTok handle is hashed on your phone before it is sent, to check invites and verify a post you submit.
The rest of this page says exactly what that means.
1. Who we are
Uncooked: Repost Remover ("Uncooked", "the app") is published by ANYKA LLC, a limited liability company organised under the laws of the State of Wyoming, United States, whose registered agent address is 30 North Gould Street, Ste R, Sheridan, WY 82801 ("we", "us"). We are the data controller for the personal data described here. You can reach us at support@uncked.com.
Our representative in the European Union under Article 27 of the GDPR: [EU representative name and address].
2. What the app does
Uncooked removes reposts from your own TikTok profile, in bulk, while you watch. You sign in to TikTok on TikTok's own website, inside a web view embedded in the app. The app then opens your Reposts tab, counts the reposts, lets you choose which ones to remove, and taps "Remove repost" on each one, visibly, at a human pace, while the app is open. Every action on TikTok is performed by your phone, inside your own TikTok session. Uncooked does not use a TikTok API, never posts on your behalf, and never acts on anyone else's account.
3. What stays on your phone and never reaches us
- Your TikTok password. You type it on tiktok.com, inside the web view. The app has no access to it and never stores it.
- Your TikTok session (cookies and tokens). Stored by the web view on your device and used only for requests your phone makes directly to TikTok. Deleted when you disconnect the account in the app or uninstall it.
- Your TikTok username. The app reads it on your phone to show which account is connected. Before anything is sent to us, the app turns it into a one-way hash (see 4.8); the username itself never reaches our servers.
- Your reposts. The list found during a scan, the videos, thumbnails, captions and creator names. Kept in the app's memory and local database on your phone.
- Your selection and filters.
- Your cleanup history. What was removed and when, stored in a local database on your phone and never sent to us. You can export it (CSV or JSON) or erase it from the app at any time. It is deleted when you uninstall the app.
- Other people's data. The app does not collect data about other TikTok users.
The web view only loads tiktok.com domains. We do not inject tracking into TikTok's pages, and nothing displayed in the web view is sent to our servers.
4. What we collect, why, and on what legal basis
| # | Data | Why | Legal basis (GDPR) | Kept for |
|---|---|---|---|---|
| 4.1 | Device identifier: a random identifier generated by the app on first launch and stored in your phone's secure storage. It is not your advertising id, not a hardware serial number, and nobody else can link it to you. | Give every install a guest profile, apply the daily removal limit, keep your bonuses | Contract (providing the service) | While the guest profile or account exists. A guest profile merged into an account is kept 30 days, then deleted. |
| 4.2 | Platform, OS version, app version, language | Serve the right configuration and language, keep the app compatible | Contract | Same as 4.1 |
| 4.3 | Usage counters: number of removals per day, start and end of a cleanup | Enforce the daily limit, detect abuse | Contract; legitimate interest (fraud prevention) | Daily counters 90 days; anonymous aggregated totals indefinitely |
| 4.4 | Account data (only if you sign in): the identifier issued by Apple or Google, your e-mail address (or Apple's private relay address), and your name if you share it | Keep your plan and bonuses across phones, generate your invite code, write to you about your account | Contract | Until you delete your account |
| 4.5 | Purchases: entitlement status (Pro, Power, Lifetime), product identifier, purchase and expiry dates, the store used (App Store or Google Play) and its storefront country, through RevenueCat. We never receive your card number or billing address. | Unlock what you paid for, restore purchases, handle billing issues and refunds | Contract | Until you delete your account; RevenueCat notifications 90 days |
| 4.6 | Anonymous usage events: ten allow-listed events (app opened, TikTok connected with the method used, scan completed with count and duration, cleanup started and completed with counts and how it ended, throttling suspected, page element not found, paywall shown, purchase, code redeemed), with rounded numbers. Never your TikTok username, cookies, video content, your repost list, IP address, location or advertising id. | Know whether the app still works when TikTok changes its site, see what breaks, improve the product | Consent (toggle "Share anonymous usage stats" in Settings) | Raw events 90 days; daily aggregated counts indefinitely |
| 4.7 | Crash reports (Sentry): device model, OS version, app version, the stack trace and a short technical log of app events before the crash, scrubbed of personal data. No TikTok data. | Fix bugs | Legitimate interest (keeping the app working). On by default; you can turn crash reports off in Settings at any time, which is how you object to this processing. Declared in the store privacy labels. | 90 days |
| 4.8 | TikTok username, hashed: when you connect a TikTok account, the app computes a one-way hash of your username on your phone (SHA-256 with an app salt) and sends only that hash. Our servers never receive the username from the app, and do not store it. | Apply the invite rules (one invite per TikTok account, no self-referral) and check that a post you submit for the Post-on-TikTok bonus was published by your connected account | Legitimate interest (fraud prevention); contract (bonus) | Until you disconnect the account or delete your Uncooked account; a separate anti-abuse record is then kept (4.13) |
| 4.9 | Invites and codes: your invite code, each redemption (which account, when, status), promo-code redemptions, the bonuses you hold | Credit bonuses to both sides and enforce the rules (one invite redemption per person and per TikTok account, no self-referral) | Contract | Until you delete your account; records flagged for fraud review 12 months |
| 4.10 | Post-on-TikTok bonus: the public link of the post you submit and the public information about that post used to check it (author, caption, view and like counts). The author's handle is only compared with your hash (4.8); it is not stored. | Check the post and grant the bonus | Contract | The result is kept until you delete your account |
| 4.11 | Feedback: rating, category, your message, an optional e-mail address, and optional diagnostics (app version, device, recent error codes; no TikTok data) | Answer you and improve the app | Consent | 24 months |
| 4.12 | Connection data: IP addresses are used for a few seconds to rate-limit abusive traffic on sign-in and code redemption. They are not stored: the rate-limit counters use a hashed form of the IP that rotates every 24 hours. We do not derive or store your country or location. | Security | Legitimate interest | 24 hours |
| 4.13 | Anti-abuse record: when a TikTok account redeems an invite code or receives the Post-on-TikTok bonus, we record the salted SHA-256 hash of its username (4.8) and which offer it used. This record is kept after you delete your account, unlinked from any user, device or e-mail. | Fraud prevention: stop the same TikTok account from redeeming an invite or getting the Post-on-TikTok bonus twice, for example by deleting and recreating an Uncooked account | Legitimate interest (fraud prevention) | As long as the offer (invites or the Post-on-TikTok bonus) exists |
We do not sell personal data, use it for advertising, track you across other apps or websites, build marketing profiles, or collect your location, contacts, photos or advertising identifiers. We collect no payment or payout details: referrals give bonus removals only, never money.
5. Who processes data for us
| Processor | What for | Where |
|---|---|---|
| Cloudflare, Inc. | Hosting of our API, database and configuration | United States, with EU data centres; our database is set to a European location where the service allows it |
| RevenueCat, Inc. | Validation of in-app purchases and entitlements | United States |
| Sentry (Functional Software, Inc.) | Crash reports | United States / EU region |
| Apple Inc. and Google LLC | Sign in with Apple / Google; App Store and Google Play payments. For payments, Apple and Google act as independent controllers under their own terms. | Worldwide |
Each processor is bound by a data processing agreement. We share personal data with no one else, unless the law requires it.
6. International transfers
We are established in the United States, and some processors handle data there. For data of users in the European Economic Area, the United Kingdom and Switzerland, transfers rely on the EU–US Data Privacy Framework where the recipient is certified, and otherwise on the European Commission's Standard Contractual Clauses.
7. Your rights
Under the GDPR you can ask to access, correct, erase, restrict or receive (portability) your personal data, object to processing based on legitimate interest, and withdraw consent at any time without affecting what was done before. You can also complain to the data protection authority of the country where you live or work (in France, the CNIL, www.cnil.fr).
Most of this is self-service in the app:
- Delete account (Settings → Account): deletes your account, devices, bonuses, redemptions, purchase records on our side and your RevenueCat customer record. We keep anonymous aggregated counters, and the anti-abuse record of 4.13: the salted hash of your TikTok username and which offer it used, unlinked from you, so the same TikTok account cannot redeem an invite or the Post-on-TikTok bonus twice. Deleting your Uncooked account does not change anything on TikTok and does not restore reposts.
- Erase history and Export (CSV, JSON) in Cleanup history. The history exists only on your phone.
- Share anonymous usage stats and crash reports toggles in Settings.
- If you uninstalled the app, use the deletion form at https://uncked.com/delete or write to support@uncked.com.
We answer within one month. We may ask you to confirm the request from the e-mail address linked to your account.
California residents. We do not sell or share personal information as defined by the CCPA/CPRA. You have the rights to know, delete and correct your information, and we will not treat you differently for exercising them.
8. Security
All traffic between the app and our servers uses TLS. Our own tokens are kept in your phone's secure storage, are short-lived and rotate. Refresh tokens are stored only as salted hashes, and your TikTok username is hashed on your phone before it is sent. We keep as little data as the service needs. No system is perfectly secure; if a breach affects your personal data we will notify the competent supervisory authority within 72 hours and inform you as the law requires.
9. Children
Uncooked is not intended for anyone under 13, which is also TikTok's minimum age. We do not knowingly collect personal data from children under 13; if we learn that we have, we delete it. The app is rated 13+ on both stores.
10. Changes
When we change this policy, the new version and its "Last updated" date are published in the app and on the website. For material changes we show a notice in the app before they take effect.
11. Contact
ANYKA LLC · 30 North Gould Street, Ste R, Sheridan, WY 82801, United States · support@uncked.com · https://uncked.com