Skip to content
Captiod

Privacy Policy

Plain language about what Captiod collects, what it does with it, and how you stay in control.

Last updated

The short version

  • Captiod needs an account with a verified email address. No account is created until you enter the code we email you. We do not ask for your contacts, location, or Instagram or TikTok password.
  • What you share to Captiod is sent to our servers and to an AI model provider so it can be analyzed. That is the core of the app. It happens only after you allow AI processing in the app, and only when you share, add or ask something.
  • Payments are handled by Whop. We never see or store your card details.
  • We do not sell your data, show ads, or track you across other apps and websites.
  • You can export everything we hold for you, and delete any save, conversation or your whole account, from the app.

Who we are

This policy covers the Captiod iOS app, its share extension, and captiod.com. Captiod is operated by Captiod. Contact us about privacy at privacy@captiod.com.

What we collect and why

Your account

Your email address (to sign you in and send security codes), a display name (shown in the app), a securely hashed password, whether your email is verified, and when the account was created. While you are signing up, and before you enter the emailed code, we hold your name, the hashed password and a hashed copy of the code for up to 10 minutes; if the code is never entered, that record is deleted and no account exists. Better Auth runs on our own servers to manage accounts.

Sessions and security

Session records include an expiry date, IP address and device type, to keep you signed in and to spot misuse. The iOS app keeps its session in the system Keychain. We keep an audit trail of security and billing actions (for example: account created, signed in, password changed, subscription started or canceled, account deleted). It holds your account ID, the action and its time, and payment provider reference IDs. It does not hold your email address, IP address, passwords or saved content.

What you save

  • Links you share to Captiod, such as an Instagram Reel, post or TikTok link.
  • Text you add, such as a caption you paste when a post can’t be read.
  • The analysis of each save: title, summary, steps, facts, copyable text, the things the post mentions, links, category and tags, plus the post’s cover image.
  • Your changes: favorites, archived saves, edited titles or categories, and steps you check off.
  • Plan and Ask: the tasks on your plans, and the questions you ask with the answers Captiod gives.

Subscription and usage

How many of your free breakdowns and free Ask answers you have used. If you subscribe, whether it came from the App Store or Whop, its status, the product or plan, and the date it renews or ends. Apple or Whop collects your payment details directly under its own privacy policy; we never receive your card number.

Technical information

When the app talks to our servers, we record basic request information (the time, the address requested, the result and how long it took) to keep the service running and to stop abuse. Our hosting providers also process network information such as IP addresses to deliver the service.

The website

captiod.com does not use advertising or analytics cookies and does not load third-party tracking scripts. See the Cookie Policy. If that ever changes, this policy will be updated first and we will ask for consent where the law requires it.

How we use it

  • To analyze what you share and show you the results.
  • To keep your library, plans and conversations in sync and available after you reinstall.
  • To answer your questions in Ask and build your Plan from your own saves.
  • To run your subscription and your free allowance.
  • To keep Captiod secure, prevent abuse, and fix problems.

We do not use your saves to build an advertising profile, and we do not sell or rent your data.

AI processing and other services

Captiod relies on a small number of service providers. They receive only what they need to do their job for us.

  • AI model providers, through OpenRouter. To analyze a save, Captiod sends the post’s video or images, its caption and any text you added. For Ask and Plan, it sends your question together with short digests of the relevant saves. OpenRouter passes each request to one AI model from a list we choose; if that model is unavailable, the request goes to the next one on the list. We ask OpenRouter to use only providers that do not store requests for training. Captiod asks for your permission in the app before sending anything, and you can withdraw it at any time in Settings. While it is off, nothing new is sent.
  • Search provider. To find real links, Captiod may send the names of products, places, tools or books found in a post to Tavily, a web search service.
  • Payments. In the iOS app, Apple processes Captiod Pro purchases; RevenueCat receives the purchase receipt and your Captiod account ID so we can confirm the subscription. We do not receive your Apple ID or card. For web checkout, Whop runs checkout, billing, receipts and refunds and receives the payment details you give it, plus your Captiod account ID so the purchase can be matched.
  • Hosting, database and storage. Our website, API and database run on Vercel and Neon; background processing runs on a cloud container host. Cover images are kept in a private Vercel Blob store and served only through an API that checks your session.
  • Email delivery. Resend receives your email address and the message needed to deliver sign-up, verification and password-reset codes.
  • Sign in with Apple and Google. If you choose Apple or Google to sign in, that provider confirms your identity and shares your email address (or an Apple private relay address) and, if you allow it, your name.

We require these providers to protect your data at least as well as this policy describes and to use it only to provide their service to us.

Reading public posts

To understand a post, Captiod’s servers request that post from Instagram or TikTok as any visitor would. We never log in to your accounts. Video files are stored only temporarily while a post is analyzed and are deleted when the analysis ends. We keep the post’s cover image so your library looks like what you saved.

How long we keep it

  • Saves, plans, conversations and your account are kept until you delete them.
  • Unfinished sign-ups and expired codes are deleted within a day. Codes expire after 10 minutes.
  • Sessions expire after 30 days unless renewed. Signing out revokes the current session; a password reset revokes all of them.
  • Temporary video files are deleted as soon as analysis finishes.
  • Subscription records are kept while your account exists. Whop keeps its own payment records as the law requires.
  • The security and billing audit trail is kept for about 13 months, including after an account is deleted, so fraud, refunds and disputes can be traced.
  • Request counters used to limit abuse are removed within about a day. Deleted covers are removed by a background job, usually within a few hours.
  • Database backups and hosting logs follow the retention settings of the relevant provider.

Your choices and rights

  • Export everything we hold for your account as a file: Settings, then Export my data.
  • Correct your name in Settings, and edit any save’s title, category and tags.
  • Delete a save or conversation at any time in the app. Deleting a save removes it, its analysis and its cover from our servers.
  • Erase everything in Settings, or by following Delete your data. An active subscription is canceled first so you are not charged again.
  • Stop AI processing at any time in Settings.
  • Depending on where you live, you may have further rights, such as to object to processing or to complain to a data protection authority. Email privacy@captiod.com and we will respond within the time the law requires.

Security

Connections are encrypted in transit. Passwords are stored only as salted hashes. Access to your library requires a verified account session. Keep your device and credentials protected, and never share verification or reset codes. Report a security problem to security@captiod.com.

Age

Captiod is not directed to children under 13, and you must be at least 13 to create an account. If you are under 18, a parent or guardian must agree to these terms and make any purchase. If you believe a child under 13 has used Captiod, contact us and we will delete the data.

International transfers

Our providers may process data in countries other than yours, including the United States. Where required, we rely on appropriate safeguards for these transfers.

Changes

If we change this policy, we will update the date above. If a change is significant, we will tell you in the app before it takes effect.