CAPTD
← Back

Privacy Policy

Last updated: August 2026

1. Who We Are

CAPTD is operated as a sole trader business based in Ireland. We are the data controller for personal data collected through this platform. For any privacy-related questions contact us at captionflow.app@gmail.com.

2. What Data We Collect

CAPTD does not require signup, login, or an email address to use the Free Beta. An anonymous session is created automatically in your browser to let the service work — no personal identity is attached to it unless you separately contact us. We collect the following:

  • An anonymous session identifier (no email or password required)
  • Images and videos you upload for content generation
  • Text descriptions and voice transcripts you provide
  • Photo EXIF metadata (camera make/model, lens, focal length, aperture, ISO, shutter speed and date taken, if present in the file) is read directly in your browser when you upload a photo. This technical data is not sent to our servers or stored — it stays in your browser session. If a photo's EXIF contains GPS coordinates, we show you that before generating and let you exclude it; if you don't exclude it, those coordinates alone are sent to our AI provider for that one generation only, to help tailor your content, and are never written to our database. You can also type a location yourself in the optional "Where was this taken?" field, used the same way — sent for that generation only, never stored.
  • If you use the Marketing workspace, the business details you enter in the marketing profile fields (target audience, product or service, campaign goal, key message, call to action, offer, and brand tone) — used only to shape the wording of that generation
  • If you use the AI Photography Assistant's Composition Analysis, Scene Recognition or Editing Suggestions tools, the photo you upload for that analysis — deleted from our storage as soon as the result is generated, and never kept in your generation history — plus a record that you gave consent before that photo was processed (your account identifier, which of the three tools, and a timestamp; not the photo itself, and never updated or deleted, so it stands as proof consent was given). The Assistant's other four tools (Sharpness, Exposure and Colour analysis, and the Lens & Settings Recommender) run entirely in your browser — no photo is ever sent to us for those, and no consent record is created since no AI service is involved.
  • Voiceover recordings you make to preview a generated caption, used to help tailor future caption suggestions to your natural speaking style — recordings made in the Marketing workspace are excluded from this and are not used to build that profile
  • Generation history and usage statistics, tied to your anonymous session
  • Name and email address if you submit our contact form (see Third Party Services below)
  • Payment information, if and when paid plans launch, processed securely by our future payment provider — we will never see or store your card details
  • Device and browser information for security and analytics
  • IP address for fraud prevention and service delivery

3. Content Pack History (Optional)

CAPTD offers an optional History feature that lets you save and revisit your previously generated Content Packs across devices. This feature requires creating an account — email and password, or signing in with Google, Facebook or Apple — it is entirely optional and is not required to use CAPTD's core generation features. When you sign in with Google, Facebook or Apple, that provider shares your name, email address and a unique account identifier with us so we can create and recognize your CAPTD account — we never see or store your password with that provider.

If you choose to sign up, any Content Packs you generate — including any generated before you signed up, using your anonymous session — become linked to your account and are saved to your History.

What we store: the Content Pack itself (caption, description, hashtags, and other generated fields), the workspace and platform it was generated for, and the date of generation. We do not store additional data beyond what's needed for this feature to work.

How long we keep it: your History is retained until you delete individual entries yourself, or until you delete your account, whichever comes first. We do not set an automatic expiry on History data beyond that.

Your control: you can delete any individual History entry at any time. Deleting your account removes your entire History along with it. This is in addition to the data rights already described in Section 9 (Your Rights Under GDPR) of this policy, including your right to access, export, or request erasure of your data at any time.

Access: your History is private to your account — only you can view it. We apply technical access controls (row-level security) to ensure no other user, including other CAPTD users, can access your History data.

4. How We Use Your Data

  • To provide and improve the CAPTD service
  • To respond to messages sent through our contact form
  • To track usage and enforce plan limits fairly
  • To detect and prevent fraud or abuse
  • To analyse how the app is used and improve features (only if you accept analytics cookies — see Cookies below)

We do not sell your personal data to third parties. We do not use your uploaded content to train AI models.

5. Legal Basis for Processing

We process your data under the following legal bases as defined by the EU General Data Protection Regulation (GDPR):

  • Contract: processing necessary to provide the service you signed up for
  • Legitimate interests: fraud prevention, security, and service improvement
  • Legal obligation: compliance with Irish and EU law including tax obligations
  • Consent: for optional analytics and marketing communications

6. Data Retention

Uploaded photos and videos are automatically deleted no more than 90 days after upload — this runs automatically in the background and does not require you to do anything. Generated text (captions, descriptions, hashtags and the rest of your generation history) is kept for as long as your anonymous session or account is active, since it has no comparable storage-size or sensitivity concern and you may want to refer back to it. Composition Analysis, Scene Recognition and Editing Suggestions in the AI Photography Assistant go further still: those photos are deleted immediately once the analysis result is generated, not kept for 90 days like other uploads.

GPS coordinates read from a photo's EXIF data, and any location you type in yourself, are used only for that single generation and are never written to our database — see What Data We Collect above.

You can delete all of your data immediately and permanently at any time yourself — see "Erasure" under Your Rights Under GDPR below — rather than waiting on a manual request. If you'd still prefer to reach us directly, contact us at captionflow.app@gmail.com and we will remove it within 30 days, except where retention is required by law such as for tax records.

7. Third Party Services

We use the following third party services to operate CAPTD:

  • Lovable / Supabase: database, authentication, and file storage
  • Google Gemini: AI content generation, and — only if you choose to use Composition Analysis, Scene Recognition or Editing Suggestions in the AI Photography Assistant — photo analysis for those three tools specifically (your content is not used for training)
  • Resend: delivers messages submitted through our contact form to our support inbox, and sends the automatic confirmation reply back to you — your name, email address, and message are sent to this provider for that sole purpose
  • PostHog: product analytics (page views and feature usage). Only active if you accept analytics cookies — see Cookies below
  • Google, Facebook and Apple Sign-In: only if you choose to sign in with one of these to use the optional History feature (see Content Pack History above) — distinct from Google Gemini above, which is unrelated to sign-in

When paid plans launch we will add a payment processor to this list before it goes live, and update this policy accordingly. All third party providers are GDPR compliant and process data under appropriate data processing agreements.

8. International Transfers

Some of our third party providers may process data outside the European Economic Area. Where this occurs we ensure appropriate safeguards are in place including standard contractual clauses approved by the European Commission.

9. Your Rights Under GDPR

As an EU resident you have the following rights:

  • Access: request a copy of all personal data we hold about you
  • Rectification: ask us to correct inaccurate data
  • Erasure: delete your personal data immediately yourself, right now, with the button below — or request deletion by contacting us instead, if you'd rather
  • Portability: receive your data in a machine-readable format
  • Objection: object to processing based on legitimate interests
  • Restriction: ask us to limit how we use your data

To exercise any of the other rights above contact us at captionflow.app@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with the Data Protection Commission of Ireland at dataprotection.ie.

10. Cookies

CAPTD uses two categories of storage technology (cookies and similar browser storage such as localStorage):

  • Essential: required to keep your anonymous session working and to remember your cookie choice. These cannot be switched off and do not require consent under applicable law.
  • Analytics (PostHog): off by default. When you accept analytics cookies via the banner shown on your first visit, PostHog sets its own cookies and/or local storage to recognise your browser across visits and measure feature usage. You can withdraw your choice at any time with the button below — just as easily as you gave it — which clears it immediately and shows the banner again.

We do not use advertising cookies or third party ad-tracking cookies.

11. Data Breach Notification

If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Data Protection Commission of Ireland without undue delay and, where feasible, within 72 hours of becoming aware of it. Where a breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly, without undue delay, by email or via an in-app notice, describing the nature of the breach and the steps we're taking in response.

12. Children

CAPTD is not intended for users under the age of 18. We do not knowingly collect personal data from children. If you believe a child has used CAPTD please contact us immediately at captionflow.app@gmail.com and we will delete their data promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via an in-app notice at least 14 days before the changes take effect. Continued use of the service after that date constitutes acceptance of the updated policy.

14. Contact

For any privacy-related questions or to exercise your rights please contact us at captionflow.app@gmail.com