Hypic

Is Hypic safe?

Hypic is safe in the way that matters most to parents: it is a photo editor, so strangers cannot message your child and there is no feed of harmful posts. The weak point is what happens to your photos. Hypic belongs to ByteDance, the company behind TikTok and CapCut, and its privacy policy lets it collect pictures while you edit them, even ones you never save, and use your data to train machine learning models. We score it 57/100, a little ahead of CapCut (53) because its terms do not claim a licence to your photos.

What the store labels do not show

Hypic's store labels are among the lightest we have seen. Apple's label lists identifiers as used to track you across other companies' apps, links only identifiers to you, and lists photos and other content as collected but not linked to your identity. Google Play says Hypic shares no data with other companies and collects only an approximate location and user IDs.

The privacy policy, updated on 8 October 2026, describes much more. It says Hypic collects the photos you create, import or upload, with their metadata, and the prompts and results from its AI tools. It may do this "through pre-uploading at the time of creation, import, or upload, regardless of whether you choose to save or publish" the content. It can read your clipboard when you copy and paste. Among the uses it lists are training and improving "machine learning models and algorithms" and advertising through third-party platforms. When the labels and the policy disagree this much, we score the policy.

Face data

Most of Hypic's tools work on faces: retouching, reshaping, makeup and AI portraits. The policy says Hypic detects faces and body features to apply these effects, does not use them to identify you or anyone else, does not share them, and deletes the information once the effect is applied. That is a clear promise, and the same one CapCut makes. CapCut faces a proposed class action in Illinois, filed in 2023 and still open, alleging that it collected face scans without proper consent; ByteDance disputes it. We found no such case against Hypic.

Who holds your data

Bytedance Pte. Ltd. in Singapore is the data controller. The policy says data is stored on servers in the US, Malaysia and Singapore, and that it may be shared with companies in the ByteDance group. It does not mention China. For TikTok, Ireland's regulator found in May 2025 that staff in China could remotely access European users' data without adequate safeguards, and fined it €530 million. There is no finding of that kind about Hypic.

In the US, Apple pulled Hypic from the App Store on 19 January 2025, together with TikTok, CapCut and Lemon8, under the law requiring ByteDance to sell its US apps. Hypic is back, and in October 2026 the US listing still named Bytedance Pte. Ltd. as the seller. The global policy points US users to a separate US privacy policy, but its link led back to the global version when we checked.

Subscriptions

Hypic Pro costs $10.99 a month or $69.99 a year in the US App Store, with a weekly option at $8.99. The terms offer a full refund within 14 days, but only if you have used none of the paid features, which few people manage. In-app subscriptions are billed and refunded through Apple or Google, so cancel there before the renewal date.

How to use Hypic more safely

1. Give Hypic access to selected photos, not your whole library, so it cannot pre-upload pictures you never meant to edit.
2. Deny the tracking request on an iPhone.
3. Edit sensitive photos, such as IDs, documents or pictures of young children, in your phone's built-in editor instead.
4. Avoid copying private text while Hypic is open, since the policy allows it to read the clipboard.
5. Use the privacy request form on hypic.com to delete your data when you stop using the app.

How we scored it

Regulatory record (86) and scams and harmful content (75) are Hypic's strongest factors: no fines and no social features. Privacy (42) is the weakest, because the policy allows pre-uploading and AI training that the store labels leave out. Security (55) reflects a clean record but little public detail and a bug bounty that does not cover the app. For a non-ByteDance editor with stronger security paperwork, compare Picsart.