Is CapCut safe with your data?
CapCut
ByteDance
Poor disclosure · high confidence
CapCut earns an F (17/100) because it discloses little about its data practices.
#207
of 211 apps ranked
17
score · Image & video avg 46
-29
vs category average
CapCut trains models with no disclosed opt-out, grants itself perpetual sublicensable rights to user content, and lacks global transparency on data rights and security controls.
What CapCut's privacy policy and terms of service say about your data
D1.1 & D1.2: Fabricated opt-out quotes
The ledger cited "unless you opt out of training through your account settings" for both D1.1 and D1.2, but this phrase does not exist anywhere in CapCut's privacy policy. The policy discloses training but no opt-out mechanism.
D1.4: Perpetual sublicensable content licence
"you grant to the Company and its affiliates a non-exclusive, royalty-free, transferable, sub-licensable, perpetual and worldwide licence to use your User Content" , adverse clause; user outputs are not owned/controlled by user.
D2.4: Canada-only correction right
The right to "rectify and correct inaccuracies" is disclosed only in the Canada regional section, not in the global policy. Global assessment must score ZERO.
D7.1: No named security controls
Policy states "technical, administrative, and organisational measures" but names no TLS, AES, RBAC, or ISO certifications , only vague boilerplate.
What the policy is silent or vague on
- Not stated: keeping user inputs out of model training
- Not stated: a way to opt out of training
- Not stated: whether training use differs by plan
- Not stated: your ownership of generated outputs
CapCut privacy rating
Details
- Category
- Image & video
- Modalities
- image, video
- Processes biometrics
- No
- Policy last updated
- 2026-04-15
- Region scored
- Global / US-default
- Last assessed
- 2026-07-08
Documents examined
Other image & video apps
Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.