CapCut

Is CapCut safe?

CapCut is safe in the sense most parents mean: it is a video editor, not a social network, so strangers cannot message your child and there is no feed of harmful clips. Where it falls short is what happens to your footage. ByteDance, which also owns TikTok, collects your clips while you edit, can use them to train its technology, and takes a perpetual licence to anything you upload. A class action over face and voice data has been running in Illinois since 2023. We score it 53/100.

What CapCut does with your footage

The privacy policy, last updated on 15 April 2026, says CapCut may collect your photos, videos and audio "through pre-uploading at the time of creation, import, or upload, regardless of whether you choose to save or publish" them, to suggest music, generate captions and run other features. The same policy lists training "machine learning models and algorithms" among the uses of your information.

The terms of service are broader still. By uploading, you give Bytedance Pte. Ltd. and its affiliates a "non-exclusive, royalty-free, transferable, sub-licensable, perpetual and worldwide license" to modify, reproduce, distribute and store your content to operate and develop the service. You also license your username, image and likeness to identify you as the source of content, "including for use in sponsored content". You still own your videos. In practice, though, deleting a clip does not end the licence.

Apple's privacy label is lighter than TikTok's. Only the device ID is listed as used to track you across other companies' apps. Photos and videos, audio, other user content, contact info, identifiers, usage and diagnostics are linked to you.

Face scans and the Illinois lawsuit

Many CapCut effects work on faces and bodies. The privacy policy says this information is used only to apply the effect, not to identify you, and is deleted once the effect is applied.

A proposed class action filed on 28 July 2023 in federal court in Illinois alleges otherwise. It claims CapCut collected face scans and voiceprints without the informed written consent required by Illinois' Biometric Information Privacy Act, and that one plaintiff used the app as a seventh-grader without parental consent. ByteDance argues its privacy policy disclosed its practices. In March 2025 the court let the biometric and some California privacy claims go ahead while dismissing others. The case, Rodriguez v. ByteDance, was still in discovery in July 2026, with no settlement or trial date announced. These are allegations; no court has found against CapCut.

Who controls the data

CapCut is run by Bytedance Pte. Ltd. in Singapore. The worry many users have is the same as with TikTok: whether staff in China can reach their data. For TikTok's European users, Ireland's regulator found in 2025 that they could, and fined TikTok €530 million. There is no equivalent finding for CapCut.

In the US, CapCut went dark alongside TikTok on 19 January 2025 under the law forcing ByteDance to sell its US apps, and came back weeks later. Reports say the US business moved to the TikTok USDS Joint Venture when that deal closed in January 2026, with US data held by Oracle. The US App Store listing still names Bytedance Pte. Ltd. as the seller, so treat that change as reported rather than confirmed. India has blocked CapCut since 2020.

Who should be careful

Content creators who post finished videos publicly lose little to the licence. Others should think twice:

• Parents editing videos of young children, since every clip and voice recording goes to ByteDance's servers.
• Businesses and freelancers editing client or unreleased material, where a perpetual sublicensable licence may breach a contract.
• Anyone using face or voice effects who would rather their biometric data never left the phone.

How to use it more safely

1. Edit sensitive footage in an editor that works on the device, such as the one built into your phone's photo app.
2. Deny the app's request to track you across other apps.
3. Give CapCut access only to selected photos, not your whole library.
4. Avoid face and voice effects on footage of children.
5. Delete projects you no longer need from CapCut's cloud space, and delete the account if you stop using it.

How we scored it

Scams and harmful content (75) is CapCut's strongest factor because there is no social feed or open messaging. Privacy (40) is the weakest because of pre-upload collection, training use and a perpetual content licence, and transparency and control (50) suffers from the same terms. Compared with YouTube or Instagram, CapCut is less of a child-safety risk and more of a data-rights one.