Is CapCut Safe? Privacy, Data and Kids (2026)

CapCut is developed by ByteDance, the company behind TikTok. Outside the US, the contracting company is Bytedance Pte. Ltd. in Singapore, and that is also the seller name on the App Store and Google Play listings as of September 2026.

In the US, CapCut has been operated since January 22, 2026 by TikTok USDS Joint Venture LLC. ByteDance keeps 19.9% of that company, and Oracle, Silver Lake and MGX hold 15% each. TikTok's announcement says the joint venture's safeguards "will also cover CapCut, and Lemon8", and CapCut's US legal documents name the joint venture as operator.

US data under the joint venture is said to run in Oracle's US cloud. We have not been able to verify how fully US data is separated, and critics say the deal leaves open questions.

This is the clause most people worry about. It is in the User-Generated Content section of CapCut's global Terms of Service, last updated April 15, 2026. It reads, in part:

"We don't own your User Content. If you are the owner of the intellectual property rights in the content you create or share on the Platform, nothing in these Terms changes that. By submitting User Content via the Services, you grant to the Company and its affiliates a non-exclusive, royalty-free, transferable, sub-licensable, perpetual and worldwide license to use your User Content. This license to your User Content allows us to modify, adapt, reproduce, make derivative works of, display, publish, transmit, distribute and/or store your User Content for the purposes of operating, developing and providing the Services, subject to your Platform settings."

The same section also gives CapCut and its partners a licence to use your username, image and likeness to identify you as the source of your content, including in sponsored content.

A terms update that took effect on June 12, 2025 drew wide criticism over this licence. CapCut said that update "did not include any changes to the 'User-generated Content' section". Claims online that CapCut can use your biometric data for any commercial purpose come from commentary, not from the terms text. US users are governed by separate CapCut US Terms of Service, which we could not verify.

In 2023, security researchers at Cyble found cloned CapCut websites, promoted through search results, ads and social media, that installed information-stealing malware. That was impersonation by third parties, not a breach of CapCut. It is the most practical risk for most users.

• Download CapCut only from the App Store, Google Play, the Mac App Store or capcut.com.
• Do not install CapCut files from other websites, even if they rank high in search results.
• Never enter your CapCut login on a site or in a message that is not capcut.com or the app itself.
• Check which permissions CapCut has in your phone settings and turn off the ones you do not need.
• Avoid uploading footage that shows private documents, addresses or other people who have not agreed.
• Use a unique password on your CapCut account, or sign in with an account that has two-step verification.

If CapCut's terms are the reason you are looking elsewhere, read the terms of any alternative the same way. For short-form marketing videos, Hooked (hooked.so) is one option: it makes short-form videos with AI, including UGC ads, captions and slideshows.