Privacy Policy

This policy explains what data AI Face Swap ("the app", "we", "us") collects, how it is used, who it is disclosed to, how long it is kept, and how it can be deleted. Face data is covered in Sections 1 to 6 in particular detail, because face data is sensitive and we want you to be able to see exactly what happens to it.

1. Face Data We Collect

AI Face Swap collects photographs that you choose to provide — either taken with the camera or selected from your photo library — for the sole purpose of generating a face swap image that you have requested.

On-device face detection

When you select a photo, the app runs Apple's on-device Vision framework to check that the photo contains exactly one clearly visible face, and to produce a face-focused thumbnail for the selection slot. This detection returns only the rectangular position of the face within the photo. It does not create a faceprint, a biometric template, or any other identifier capable of recognising you. It runs entirely on your device, its result is held in memory only, and it is never written to storage or transmitted anywhere.

What is transmitted

To generate the swap itself, the app uploads the photograph you selected — resized and JPEG-compressed — together with the identifier of the template you chose. The photograph is the only face-related data that leaves your device.

What we do not collect

• We do not create, store, or compare faceprints, face templates, or face embeddings, and we operate no database of faces.
• We do not use face data to identify, authenticate, or verify any person.
• We do not infer or record emotions, age, gender, ethnicity, health, or any other characteristic from your face.
• We do not match your face across sessions, across users, or against any external source.

2. All Intended Uses of Face Data

Your photograph is used for exactly one purpose: to produce the face swap image you asked for, in the feature you invoked — Face Swap, Image Swap, Age Changer, Gender Changer, or Cartoonize. There is no secondary use of any kind.

Face data is never used for advertising, marketing, profiling, analytics, personalisation, model training, research, or any purpose beyond generating your requested result. We do not sell face data, we do not rent or trade it, and we do not disclose it to data brokers.

3. Disclosure and Sharing of Face Data

We do not operate our own image-processing servers. To generate your result, your photograph is disclosed to a single service provider, which processes it on our behalf and under our instructions:

While generating the result, the model derives a temporary mathematical representation of the face in working memory in order to align and blend it onto the template. This representation is never returned to the app, never written to persistent storage, never used for recognition, and ceases to exist when the processing job is torn down.

Replicate, Inc. is the only third party that receives your photograph. No other party receives it, and we disclose face data to no one else for any reason, except where we are compelled to by valid legal process.

Equal protection by third parties

Any third party with whom we share face data is required to provide the same or equal protection of that face data as is stated in this privacy policy. We share face data only with service providers that are bound to: use the face data solely to perform the processing we have requested and for no other purpose; not retain it beyond the period stated in Section 4; not sell, share, or otherwise disclose it to any further party; not use it to identify any individual; not use it for advertising, marketing, profiling, or model training; and apply appropriate technical and organisational security measures to protect it. Replicate, Inc. is bound by these requirements, and its published terms of service, privacy policy, and data-retention policy provide protection of face data equal to that described in this policy. If a provider cannot meet these requirements, we do not share face data with them.

4. Face Data Retention

At our service provider

For predictions created through Replicate's API — which is how this app operates — Replicate automatically deletes all input parameters, input files, output values, output files, and logs within one hour. We retain no copy of your photograph on any server of ours, because we operate no such server. The uploaded photograph therefore has a maximum off-device lifetime of one hour, after which it is permanently removed. In practice a generation completes in a few seconds.

On your device

The photograph you selected is never saved by the app. It exists in memory for the duration of the request only.

The generated result image is saved locally, inside the app's private sandbox on your device, so that it appears in "My Projects" and remains available to you. It is not uploaded anywhere by us, and it remains under your control for as long as you keep it.

We hold no user accounts and no server-side profile, so there is no retained face data associated with you anywhere in our systems.

5. Face Data Deletion, and Withdrawing Your Consent

How you give consent

Consent to process your face data is given by you on each occasion you use it: you choose a specific photograph, you choose a template, and you tap the button that generates the result. Nothing is uploaded unless and until you take that action, and no photograph is ever accessed or uploaded in the background.

How you withdraw consent

You may withdraw your consent to our collection and use of face data at any time, by any of the following means, and no explanation is required:

• Stop using the face swap features. Because consent is given per use, declining to generate a swap withdraws it prospectively at once — no further face data will be collected or processed.
• Revoke the app's Camera and Photos permissions in iOS Settings → Privacy & Security → Camera / Photos, or in Settings → AI Face Swap. Once revoked, the app cannot access or upload any photograph.
• Delete the app, which ends all collection and simultaneously erases everything stored on your device.
• Contact us at [email protected] to record your withdrawal of consent, and we will confirm it in writing.

How you delete your face data

• Photographs you uploaded: there is nothing for you to delete, because we never store them. Your copy at our service provider is deleted automatically within one hour, as described in Section 4, and we hold no copy at any time.
• Generated results stored on your device: open My Projects, and delete any result individually. Deletion is immediate and permanent.
• Everything at once: delete the app from your device. This permanently erases all locally stored results and all app data.
• Copies you exported: results you chose to save to your Photos library or share to another app are under your own control, and can be deleted there.
• By request: write to [email protected] and we will action any deletion request and confirm completion. Because we operate no user accounts and store no photographs on our servers, there is generally no server-side face data for us to erase.

6. Storage and Security of Face Data

Photographs are transmitted only over encrypted TLS connections, and are stored by our service provider in the United States for no longer than the period stated in Section 4. Generated results stored on your device are held in the app's private sandbox, protected by iOS file-level encryption and your device passcode, and are accessible only to this app.

7. Advertising and Analytics — No Face Data Is Involved

The app is supported by advertising and uses the following third-party SDKs: Google AdMob, Unity Ads (as an AdMob mediation source), and Google Firebase (Remote Config and related services). These SDKs are used to serve and measure advertising and to deliver app configuration.

These partners never receive your photographs, your generated images, or any face data of any kind. They receive only standard advertising and app-usage signals such as advertising identifiers, device and operating system information, coarse location as determined by the ad networks, and in-app events. On iOS, personalised advertising and access to the advertising identifier are requested through Apple's App Tracking Transparency prompt and, where applicable, a consent management prompt; you may decline, and declining does not affect face swap functionality.

8. Other Data We Collect

Beyond the above, the app stores your language preference and your saved projects locally on your device. We do not require registration, and we do not collect your name, email address, phone number, or contacts.

9. Children

AI Face Swap is not directed to children under 13, and we do not knowingly collect face data or any other personal data from children under 13. If you believe a child has provided us with such data, contact us and we will act on it.

10. Changes to This Policy

We may revise this policy to reflect changes in the app or in applicable law. Material changes to how face data is collected, used, shared, retained, or deleted will be reflected here, with an updated "Last Updated" date.

11. Contact

Questions, deletion requests, or withdrawal of consent: [email protected]