Privacy Policy — Cap & Caption

Cap & Caption ("we", "us", "our") is a product of Clear Media Design, based in Texas, USA. This policy explains what we collect when you use capandcaption.com, why, how long we keep it, and how you can delete it.

Who this product is for

Cap & Caption is designed for adult parents and guardians (18 or older) documenting the senior year of a child in their care. It is not directed to children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a minor has created an account, contact hello@capandcaption.com and we will delete it.

What we collect

Account info — email address, hashed password, or Google account identifier when you sign in with Google.
Book content you create — student's name, nickname, school, graduation year, dedication, weekly prompt text, story text, entry dates, cover design choices.
Photos you upload — stored in a private storage bucket, accessible only to your account.
Notification preferences — the phone number and/or email address you provide for weekly reminders, plus your chosen day and time.
Print orders — shipping name, address, order total, and payment reference IDs. We do not receive or store your full card number.
Diagnostic data — basic server logs (IP address, request path, timestamp) kept for security and debugging.

How we use it

To operate the service — save your book, send the weekly prompts you asked for, print and ship the book you order.
To personalize prompts using AI (see "Subprocessors" below).
To email you transactional messages (weekly prompts you opted into, receipts, shipping updates, password resets).
To secure the service and prevent abuse.

We do not sell your data. We do not use your photos, story text, or names for advertising or model training.

Subprocessors

We rely on the following vendors to run Cap & Caption:

Supabase — database, authentication, and private photo storage (US region).
Lovable Cloud — application hosting.
Lulu — print-on-demand and worldwide shipping. Lulu receives your shipping address and the book PDF when you place a print order.
Stripe — payment processing. Stripe receives your payment card details directly; we never see them.
Twilio — sending SMS weekly reminders if you opt in to text prompts.
Resend — sending transactional emails.
Google AI — generating alternate prompt suggestions on request. Only your senior's first name and prior prompt themes are shared; photos and story text are never sent.

How your photos are protected

Photos are stored in a private Supabase Storage bucket, not on any public URL.
The app generates short-lived signed URLs (1-hour expiry) so only your browser, while signed in, can render them.
Row-level security is enforced on every database read and write, scoped to your user ID.
Preview book pages you choose to share use unguessable, revocable tokens.

Data retention

Unless you delete your account, we keep your book content so you can return to it. Our defaults:

Photos, entries, scrapbook, cover design — retained for 5 years after your last sign-in, then purged.
Print orders (shipping address, order totals, tax records) — retained for 7 years to comply with US tax and consumer-protection law.
Email delivery logs — 30 days.
SMS/email suppression list — kept indefinitely so we honor your opt-outs.
Diagnostic server logs — 30 days.

Your rights

Regardless of where you live, you can:

Access and export your data — Settings → "Download my data" produces a JSON export of your scrapbook, entries, and preferences.
Delete your account — Settings → "Delete account" permanently removes your account, photos, entries, and scrapbook. Print-order records are retained per the schedule above but detached from your account.
Correct or update any information from the dashboard.
Opt out of weekly reminders from Settings, from any prompt email footer, or by replying STOP to a text.

California, Colorado, Connecticut, Texas, Virginia, and similar-state residents have additional rights under state privacy laws. Email hello@capandcaption.com to exercise them. We will not discriminate against you for doing so.

Cookies

We use only strictly-necessary cookies and browser storage for signing you in and remembering your session. We do not use advertising cookies, tracking pixels, or third-party analytics that identify you.

International use

Data is stored on servers in the United States. By using Cap & Caption you consent to the transfer and processing of your data in the US.

Changes to this policy

If we make material changes we'll email account holders at least 14 days before they take effect.

Contact

Clear Media Design
Texas, USA
hello@capandcaption.com