It is a video app. Couldn't you embed the embargoed data into the media content using steganography. All the receiver of the data would need to do is download a modified version of the client, then collect the data. From the server side it would just look like a normal TikTok app watching videos.