Is ArtCraft Safe? Local-First Software, Cloud AI Risks

As of October 17, 2026, ArtCraft at getartcraft.com appears to be a real, active public-code creative-software project rather than an obvious scam, but it is not independently proven secure or risk-free. Its normal desktop workflow is local-first, while hosted AI features may involve outside providers, so you should not upload sensitive photos until you have checked the current terms. The core apps are reported as free; optional generative-AI plans start at $10 per month when billed yearly, and a guaranteed free AI allowance is not confirmed.

Which ArtCraft service does this guide cover?

This guide covers the AI image and video creation project at getartcraft.com, not unrelated businesses called ArtCraft that sell furniture, education, or household products.

Because several companies use the name, open only these ArtCraft AI addresses directly:

Treat lookalike domains, advertising-driven “download” pages, and unofficial mirrors as unverified.

How can you tell whether ArtCraft is legitimate?

Download only from the official site or GitHub. Avoid installers offered through SEO article pages, file-locker sites, Discord messages from strangers, or third-party download portals.
Check the repository and releases. An active repository, release notes, and visible commit history are stronger legitimacy signals than polished promotional claims alone. Read the repository’s actual LICENSE file before using ArtCraft commercially.
Verify installers when possible. A third-party review by Popular AI says PhotoCraft documents signed packaging and publishes SHA-256 checksums. Compare the downloaded file with the checksum published in the corresponding official release.
Keep the app updated. The apps handle complex images, videos, fonts, and project files, which are common vulnerability targets. Install updates promptly and test unfamiliar formats on copies.
Use a standard user account. Avoid unnecessary administrator privileges, and scan an installer with your operating system’s security tools before opening it.

Open public code is a positive transparency signal, but it is not automatically a security audit. Likewise, a lack of malware reports does not prove that every current build is secure.

There is also a reliability consideration: PhotographyTalk reported that two ArtCraft apps were in early alpha and five were still in development. Early testers reported lag, frozen tools, and broken controls. That does not mean the software is malicious, but it is a reason to keep backups and avoid making it the only editor for paid client work.

Is ArtCraft safe for uploading personal photos?

It is reasonable to test ArtCraft with ordinary, non-sensitive images. You should not begin with identification photos, medical images, children’s pictures, confidential client artwork, or anything covered by a nondisclosure agreement.

ArtCraft’s ordinary local editing does not inherently require every document to be uploaded. In one independent test, the apps reportedly triggered no Netlimiter network alerts. That supports the local-first design, but it does not establish that every feature or future update behaves the same way.

The risk changes when you use a hosted image or video model. Current project descriptions mention integrations with services such as Grok, Midjourney, Sora, and World Labs. A cloud-generation request may therefore be processed outside ArtCraft’s local environment and subject to the selected provider’s retention and training policies.

For a safer test:

Upload a public-domain image or one you created yourself.
Create a flattened copy and remove location or device metadata.
Crop out faces, signatures, addresses, and client identifiers.
Review the selected model provider before submitting it.
Disable cloud history or project synchronization if those controls are available.

Does ArtCraft collect data or train on uploaded images?

The reviewed sources do not provide a clear, dependable answer confirming that ArtCraft either trains on every upload or never retains uploaded material. You should therefore avoid assuming either outcome.

Before using a particular generation feature, look for answers to these questions in ArtCraft’s current privacy policy and terms:

Is the file sent to ArtCraft, a model provider, or both?
How long are prompts, uploads, and outputs retained?
Are they used to train or improve any model?
Can server-side deletion be requested?
Are private generations shared with other users?

If those answers are missing, use only synthetic test material. Also review the commercial and output terms of the selected AI provider; generated-image rights are not determined by the fact that ArtCraft itself is downloadable.

Is ArtCraft free to use?

The desktop applications are reported as free downloads. PhotographyTalk says all seven apps are free and described their code as being under MIT and Apache 2.0 licenses. A browser workspace is also available, which lets you test the service without installing a desktop app.

However, source reports disagree about licensing. Another October 2026 project review described the repository as using a work-in-progress “fair source” license that was not yet a formal legal document. This may reflect different components or a later license change. Check the current LICENSE file for each application before relying on it for commercial work.

Free downloads also do not necessarily mean unlimited free AI generation. PhotographyTalk reports optional AI credit plans starting at $10 per month at list price when billed annually. No dependable evidence confirms a permanent free plan or a specific amount of free credits, so check the live checkout before generating more than a small test batch.

A low-cost ArtCraft safety test

Open app.getartcraft.com by typing the address rather than following an ad.
Create an account with a unique password; use a separate email address if you do not want project email connected to your primary identity.
Upload a harmless image with no faces, location data, or ownership restrictions.
Run one inexpensive generation and review the privacy, provider, and commercial-use terms shown at that point.
If you need the desktop app, download it from the official page and compare its release checksum.
Before paying, verify the annual total, renewal date, credit expiration, cancellation process, and refund policy. A virtual credit card can limit the impact of an unfamiliar merchant.

PhotoCraft also exposes CLI, JSON, and MCP automation. Its control documentation reportedly uses bearer-token access without fine-grained per-tool permissions. Keep that control service local, give it access only to an isolated working folder, and never expose it directly to the public internet.

FAQ

Is ArtCraft safe for personal photos?

It is safer to test with non-sensitive copies first. Local editing reduces cloud exposure, but hosted generation may involve an outside provider whose retention and training terms are not fully covered by ArtCraft’s policies.

Does ArtCraft train on uploaded images?

The available research does not conclusively confirm that it does or does not. Check the current privacy policy and the terms of every cloud model provider before uploading valuable or private material.

Is ArtCraft malware or a scam?

There is no clear evidence in the reviewed sources that ArtCraft is malware or a scam. It has an official website, public repository, releases, and independent coverage, but it has not been shown here to have undergone a complete third-party security audit.

Is ArtCraft free?

The core desktop apps are reported as free downloads, and a browser workspace is available. Optional AI credit plans reportedly start at $10 per month with annual billing; the existence or amount of free generation credits is not consistently confirmed.

Can I use ArtCraft for client work?

Use it only after checking the current software license and the selected model provider’s commercial terms. Test on copies, retain backups, and avoid confidential files until you have verified both privacy and usage rights.