Privacy Policy
Last updated ·
This Privacy Policy explains what data the CapWorld iOS app (the "App") handles, why, and the choices you have. The provider responsible for this processing is named at the end of this page. If you have any question, write to support@capworld.app.
CapWorld does not require you to register an account; when the App first contacts our servers, it automatically creates an random service identifier (see below). Your collection lives on your device, and the App does not contain advertising or third-party analytics software.
Camera and photos
The App uses the camera to take photos and lets you choose photos from your library through the system photo picker. Live camera frames are processed only on your device and are not sent anywhere. When you take or choose a photo, the App isolates the subject on your device.
The photos you take and the isolated subjects are stored in the App's own storage on your device, together with the generated descriptions, categories, collection names, dates and, if you allow location access, where each was found.
You can export a backup file from the App containing your items, collections, subject images and their locations. The backup file is not encrypted; you keep and share it yourself, and we do not receive it. You can also create share images to save to your photo library or send to other apps; an item's share image shows its title, date and location. To save share images to your library, the App asks for add-only photo access, which does not let it read your library.
iCloud
Plus users can enable iCloud sync in Settings. Items, collections, images and saved locations then sync through Apple using the current iCloud account’s private CloudKit database, without passing through CapWorld servers. After onboarding, the App may check for existing iCloud items to offer recovery; it does not upload local items or download images before activation. Turning sync off or letting Plus expire pauses sync and retains data. Resuming merges intervening edits and deletions. Deleted local images are removed; cloud deletions complete when sync is available. Uninstalling removes local data, not cloud copies. Unsynced data without a backup cannot be recovered through iCloud. Different accounts use separate libraries; unsent content remains locally with the original account. Apple’s terms, privacy policy and storage limits apply.
Location
If you allow location access, the App obtains your device's location while the camera is open, saves the coordinates and place name with each item on your device, and writes them into the item image's metadata. To turn coordinates into a place name, the coordinates are sent to Apple's geocoding service, which is subject to Apple's privacy policy. Photos sent to us for analysis do not contain location information, and our servers do not receive your device's coordinates. You can turn off location access at any time in the iOS Settings; items you capture afterward will not have a location.
Analysis of your photos
To generate a description, the App sends the photo you took or chose to CapWorld servers over an encrypted connection, together with your collection names (to suggest a matching collection) and the App's current language. If a subject is identified wrongly, you can enter the correct name to have it identified again; that name is used with the previously uploaded photo to generate a new description. Our servers forward the image and this information to DeepSeek, a third-party AI service, which returns a title, category, description and suggested collection. Before the first photo is sent, the App asks for your permission. The image may also be placed in cloud storage operated by an infrastructure provider on our behalf.
Photos may show people, places or objects that reveal something about you. Only take or choose a photo when you are comfortable with it being analysed. Descriptions are generated automatically and may be inaccurate; see the Terms of Service.
Service and technical data
When the App first contacts our servers, the servers create an service record with a random identifier and issue the App an access token. This record is identified by a random service identifier and does not include your name, email address or Apple ID. The App keeps the access token on your device and keeps a random device identifier it generates in your device's keychain; our servers store the service record, the device identifier and a digest of the access token, not the token itself.
When the App contacts our servers it sends the information needed to answer and protect the request: the access token, the device identifier, the App version and platform, the request time, a one-time request signature, and network information such as your IP address. Our servers keep technical logs containing this data, including request IDs, response codes and errors, to operate the Service, prevent abuse and diagnose problems.
These identifiers are not your name, Apple ID or advertising identifier, and they are not used for advertising. They are used to identify and sign requests, to apply usage limits and to link a subscription to your service record. Deleting the App deletes the access token; reinstalling creates a new service record, although the device identifier in the keychain may be reused.
Purchases
Plus subscriptions are sold and billed by Apple. We do not receive your name, payment card or billing address. To verify whether a subscription is active, the App, our servers and a subscription management provider acting on our behalf process the App Store transaction identifiers, product identifiers, purchase and expiry dates, and your service identifier. Apple's own privacy policy applies to the App Store and to payment.
Why we process data
We process the data described above to:
- provide the App's features, in particular generating descriptions of your photos and suggesting collections;
- verify subscriptions and apply the limits of the free version;
- keep the Service secure, prevent abuse and fraud, and enforce usage limits;
- diagnose errors and improve reliability;
- respond to your requests and comply with legal obligations.
Where the law requires a legal basis, we rely on the performance of our agreement with you for providing the App and its purchases, on our legitimate interest in keeping the Service secure and reliable, and on your consent where you choose to submit a photo for analysis or allow location access. We do not sell your data and do not use it for advertising or profiling.
Who receives data
Data is shared only with providers who process it on our behalf to run the Service:
- DeepSeek, the AI service that generates descriptions from the images we forward;
- cloud infrastructure and storage providers that host our servers and store uploaded images;
- the subscription management provider that verifies App Store purchases;
- Apple, which operates the App Store, processes payments and provides geocoding.
These providers act under contracts that limit their use of the data to providing their service to us, except for Apple, which acts as an independent provider under its own terms. We may also disclose data where the law requires it or to protect the rights and safety of users or others.
How long we keep data
Uploaded images are deleted from our cloud storage automatically 24 hours after upload. The results of analysis are kept only as long as needed to complete the analysis, to operate and secure the Service and to resolve disputes about abuse, after which they are deleted or anonymised. Service records are kept while you use the Service. Technical logs are kept for a limited period for security and troubleshooting and are then deleted. Purchase verification records are kept while the subscription is relevant and for as long as accounting and consumer rules require. Support emails are kept as long as needed to handle your request.
Data on your device is under your control and is removed when you delete items or the App. Backup files you export and share images you save or send are managed by you.
International transfers
Our servers and providers may be located in countries other than the one you live in, and data may be transferred to and processed in those countries. Where such transfers are subject to data protection law, we rely on the safeguards that law provides, such as contractual clauses with our providers.
Your choices and rights
- You can deny or withdraw camera access in the iOS Settings; the App can still use photos you choose from your library.
- You can deny or withdraw location and add-only photo access in the iOS Settings; the App's other features keep working.
- You decide which photos are analysed by taking or choosing them. You can withdraw your permission to send photos to DeepSeek by turning off AI Photo Recognition under Privacy in the App's Settings.
- You can delete items or the whole collection on your device, or export a backup, at any time.
- You can manage or cancel the Plus subscription in your Apple ID settings.
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict processing, to withdraw consent, and to complain to a supervisory authority. To exercise these rights, write to support@capworld.app. Because the App has no registered accounts, we may not be able to link server-side data to you; we may ask for information, such as the approximate time of a request, to locate the data, and we will respond within the time the law requires.
Children
The App is not directed at children under 13 years of age, or the higher age required where you live, and we do not knowingly collect data from them. If you believe a child has provided data to us, contact us and we will delete it.
This website
This website does not use cookies, analytics or tracking scripts. The hosting provider that delivers the pages may keep technical access logs, such as IP addresses and request times, for security. Email links open your own mail app.
Changes to this policy
We may update this Privacy Policy when the App, our providers or the law change. The date at the top of this page shows when it was last updated. Material changes are announced in the App or on this page before they take effect.