Privacy
Why we don't train AI on your family photos
A shoebox of family photos isn't generic training data. It's grandparents who never agreed to anything, kids who can't consent, and moments that are personal precisely because they're yours. That's the reasoning behind every privacy decision in CapCrop — here's how it actually works.
Old photos are a different kind of sensitive
Most photo software treats your library like any other upload. But the photos people bring to CapCrop are usually decades old, often the only copy that exists, and full of people — relatives, neighbors, kids at a birthday party — who have no idea their faces could end up anywhere near a model's training set. There's no version of "we improved our AI using your family's photos" that we're comfortable with, so we built the product to make that structurally impossible rather than promise we won't.
AI doesn't touch your library by default
Cutting a photo out of a scan, straightening it, labeling it, and sorting it into folders all happen entirely without AI. None of that ever leaves CapCrop, let alone reaches a model. AI only enters the picture — literally one picture at a time — the moment you tap Auto-tag or Restore on a specific photo. Until then, your library sits untouched by any AI partner.
What happens when you do ask for AI help
- Only the one photo you picked. Tagging and restoration send just that photo, plus an anonymous account number we attach so a partner can watch for abuse — never your name, your email, or the rest of your library.
- No training, by contract. Every AI partner we use is contractually barred from using your content to train or improve their models. We never sell your photos to anyone, for any purpose.
- Short-lived, then deleted. A partner may keep a brief copy to guard against abuse of their service, then deletes it. They don't train on it either before or after that window.
- The result comes straight back. A tagged or restored photo returns to your library — it doesn't sit anywhere else afterward.
You're not locked in, either way. Export your photos as a tidy zip whenever you like, or delete them — individually or your whole library — and they're removed from CapCrop. CapCrop is a workspace for cropping, labeling, and exporting, not long-term storage, so we may need to remove uploaded original scans after around 30 days; export anything you want to keep for certain.
The short version
Crop, straighten, and organize never go near AI. Tagging and restoration touch only the photo you choose, and never train any model. That's not a policy we're promising to uphold — it's how the product is wired.
Digitize your shoebox without handing it to an AI.
CapCrop batch-crops, straightens, labels, and exports your photos — with AI only ever a deliberate, photo-by-photo choice. Opening a private beta soon.
No spam — one note when the beta opens, nothing more unless you tick the box.