Privacy Policy
Last updated: 1 Nov 2026
This Privacy Policy explains how Time Unlocked Studio (operated by the owner of the Time Unlocked Studio brand; "we", "us") handles information on this website and in the Time Unlocked Studio application.
1. What this policy covers
The Time Unlocked Studio application is a private video production tool. It runs on our own computer and connects only to Time Unlocked Studio's own TikTok, YouTube and Instagram accounts, to publish our own videos. It is not offered to the public: nobody else can sign up, sign in or connect their accounts to it.
This policy covers this website and the information the application handles when it connects to those platforms.
2. This website
- This website is informational. It has no accounts, sign-up forms or comment features.
- We don't add analytics, advertising, tracking pixels, third-party fonts or third-party scripts. This website doesn't set cookies itself.
- The website is hosted by Cloudflare. To deliver and protect the website, Cloudflare processes technical connection information, such as IP addresses, and may use strictly necessary security cookies, as described in Cloudflare's Privacy Policy.
- If you email us, we use your email address and message only to reply to you.
3. Information the application handles
| Type | Examples | Source |
|---|---|---|
| Platform sign-in tokens | Access and refresh tokens issued by TikTok, Google and Meta after we approve access | The platform's official sign-in (OAuth) |
| Account identifiers | Our own account's ID, display name or username, used to confirm the right account is connected | The platform |
| Publishing records | Video IDs, post links, upload and publishing status, error messages | The platform, after we publish |
| Our content | Our videos, titles, captions, hashtags, research notes and sources | Created by us |
| Performance figures | Views, likes and comments counts for our own videos | Entered by us from each platform's own statistics |
The application doesn't collect information about viewers or followers. It doesn't read direct messages, comments or other people's content, even where a platform's standard setup lists a related permission.
4. How information is used
- To upload and publish videos that a person at Time Unlocked Studio has approved.
- To confirm which account is connected, and to show the result and link of each upload.
- To apply each platform's AI-content disclosure setting where AI was used.
We don't sell information, use it for advertising or profiling, or use platform data to train AI models.
5. TikTok
The application uses TikTok Login Kit and the TikTok Content Posting API.
- Permissions requested:
user.info.basic(our account's basic profile, used to confirm the connected account),video.upload(send a video to our TikTok inbox as a draft) andvideo.publish(post a video directly). - Information received: our account's open ID and display name, the creator information TikTok provides for posting (such as the account nickname and whether comments, Duet and Stitch are available), and the status of each upload.
- Approval: sign-in takes place on TikTok, and a person approves the requested permissions there. Before each post, a person chooses how the video is shared (there is no default), and TikTok's Music Usage Confirmation is shown. AI-generated content is labelled using TikTok's AI-generated content setting.
- Disconnecting: see section 11.
TikTok's own handling of information is described in the TikTok Privacy Policy.
6. YouTube and Google
The application uses YouTube API Services. By using the YouTube features of this application, you agree to be bound by the YouTube Terms of Service. The Google Privacy Policy describes how Google handles information.
- Permissions requested:
youtube.upload(upload our videos) andyoutube.readonly(read our channel's name to confirm the right channel is connected, and check the status of our uploads). - Information received: our channel's name and handle, and the ID, status and link of each video we upload.
- Approval: sign-in takes place on Google's website, and a person approves the requested permissions there. Altered or synthetic content is disclosed using YouTube's setting.
- Revoking access: Google account access can be removed at any time from Google's security settings (third-party access).
7. Instagram and Meta
The application uses Meta's Instagram API with Unified Login (Facebook Login for Business).
- Permissions requested:
instagram_basic(find and read our Instagram professional account) andinstagram_content_publish(publish our Reels). - Information received: our Instagram account's ID and username, which permissions were granted, when access expires, and the ID, status and link of each Reel we publish.
- Approval: sign-in takes place on Meta's website. A person chooses the business portfolio and the Instagram account to share and approves the permissions there. Publishing stays off until Meta confirms the publishing permission. AI-generated content is labelled.
- Revoking access: in Meta Business Settings, under Integrations > Connected apps, remove the app.
Meta's handling of information is described in the Meta Privacy Policy.
8. Sharing and service providers
- Platforms: a video and its title, caption and settings are sent to the platform it is published on, only after a person approves it.
- Production services: we may use third-party AI, voice, research or stock media services to help produce videos. They receive only story material, such as research text, scripts or narration text. They never receive platform sign-in tokens or account data.
- Legal reasons: we may disclose information if the law requires it.
We don't share information with anyone else.
9. Storage and security
- The application has no central server or cloud database. Its information is stored on our own computer.
- Platform sign-in tokens are stored only on that computer. On Windows, they are encrypted with Windows' built-in data protection, so only our Windows user account can read them.
- Application keys are kept in a local settings file that isn't shared or published.
- Account passwords are never seen or stored by the application. Sign-in always happens on the platform's own website.
No method of storage is completely secure, but we take reasonable steps to protect this information.
10. Keeping and deleting information
- Sign-in tokens are kept until we disconnect the account, the platform withdraws access, or the token expires.
- Publishing records and our content are kept for as long as we need them to run Time Unlocked Studio's channels, and are deleted when no longer needed.
- The application keeps a small number of local backups, which are replaced over time.
11. Disconnecting an account
Any connected account can be disconnected at any time, in two ways:
- On the platform:
- TikTok: remove the app's access in your TikTok account's settings (security and permissions area).
- Google/YouTube: use Google's security settings.
- Instagram: remove the app in Meta Business Settings under Integrations > Connected apps.
- In the application: we delete the saved sign-in for that platform from the application's secure folder. Nothing more is sent to or received from that platform.
Because the application only ever connects Time Unlocked Studio's own accounts, nobody else's account can be connected to it.
12. Your choices and requests
You can contact us to ask what information we hold about you (for example, if you emailed us), to correct it or to ask us to delete it. We will respond within a reasonable time. If you're not satisfied with our response, you may be able to complain to the privacy regulator where you live.
13. Children
This website and the application are not directed at children, and we don't knowingly collect information from children.
14. Changes to this policy
We may update this policy, for example when the application changes or a platform's requirements change. The "Last updated" date at the top shows when it last changed.