Privacy Policy

Last updated: July 11, 2026

This Privacy Policy explains how gmdan ("we", "us", "our") collects, uses, and protects your information when you use the gmdan mobile application and website (the "Service").

1. Information We Collect

  • TikTok account data (with your consent): when you sign in with TikTok we receive your open ID, display name, username, avatar, and — if you grant the corresponding permissions — your follower/following counts, likes, your video list with engagement statistics, and comments on your own videos when you run the Comment Picker. We never receive your TikTok password.
  • In-app activity: competitions you join, draws you host, timer-challenge answers, votes, badges, and win history.
  • Device & technical data: device model, OS version, app version, language, push notification token, IP address, and crash/diagnostic logs.
  • Anti-fraud signals: device fingerprints and usage velocity, used solely to keep rankings and draws fair.

2. How We Use Your Information

  • to authenticate you and operate your account;
  • to compute Creator Scores and leaderboards for creators who opted in;
  • to run verifiable winner draws and competitions and publish results;
  • to send push notifications you have enabled;
  • to detect and prevent fraud, abuse, and security incidents;
  • to improve the Service through aggregated analytics.

We do not sell your personal data, and we do not use it for third-party targeted advertising.

3. Legal Bases (GDPR)

Where the GDPR applies, we process your data on the basis of: your consent (TikTok login and data scopes, notifications), performance of a contract (providing the Service), and legitimate interests (fraud prevention, security, service improvement).

4. How We Store & Protect Data

  • All traffic is encrypted in transit with TLS 1.2+.
  • TikTok access tokens are stored server-side only, encrypted at rest with AES-256; the mobile app never holds your TikTok tokens.
  • Comment data is fetched on demand for a draw you start, cached briefly, and stored only inside the draw record you created.
  • Access to personal data is restricted to authorized staff and is audit-logged.

5. Sharing of Information

We share data only with:

  • Service providers (cloud hosting, push notification delivery, crash reporting) bound by data-processing agreements;
  • Other users, to the extent you appear on public leaderboards, competition results, or draw results (you can hide your profile from leaderboards in Settings);
  • Authorities, where required by applicable law.

6. Data Retention

  • Account data is kept while your account is active.
  • Raw engagement metrics are retained for up to 13 months, then reduced to aggregates.
  • In-app notifications are retained for 90 days.
  • When you delete your account, personal data is erased within 30 days; draw records are anonymized so verification codes remain valid without identifying you.

7. Your Rights

Depending on your location, you have the right to access, correct, export, restrict, object to the processing of, or delete your personal data, and to withdraw consent at any time. You can delete your account directly in the app (Settings → Delete account) or contact us. You may also revoke gmdan's access from your TikTok settings — we detect revocation and freeze the associated data within 24 hours.

8. Children

The Service is not directed to children under 13 (or the applicable minimum age of digital consent). We do not knowingly collect data from children; if you believe a child has provided us data, contact us and we will delete it.

9. International Transfers

Your data may be processed in countries other than your own. Where required, we use appropriate safeguards such as standard contractual clauses.

10. Third-Party Services

The Service integrates TikTok's APIs under TikTok's developer terms; your use of TikTok itself is governed by TikTok's own privacy policy. gmdan is not affiliated with, endorsed, or sponsored by TikTok.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced in the app before they take effect. The "Last updated" date at the top reflects the latest revision.

12. Contact

For privacy questions or to exercise your rights, contact us at privacy@gmdan.app.