Privacy Policy

Last updated: 2026-02-10

Introduction

Welcome to Head Swap App (the "App", "Site" and "Services"). We provide AI-powered head swap and image-to-video editing features through our mobile application. We are committed to protecting and respecting your privacy in full compliance with Apple App Store requirements and applicable privacy laws.

1. Data Collection and Use - What We Collect and Why

1.1 Core Functionality Data

Photos and Images: We collect images you upload to provide head swap and image-to-video services. This data is:

1.2 Account Information (Optional)

Basic Contact Information:

1.3 Usage Analytics (Anonymous)

App Performance Data:

2. Data Minimization and Permissions

2.1 Face Data Notice

This section answers frequently asked questions about face data in connection with our features such as image‑to‑video generation, face enhancement, and reenactment.

What face data does the app collect?

When you upload photos or videos for face‑related features, we process the pixels to detect faces and create short‑lived detection metadata (e.g., bounding boxes and landmarks). We may derive non‑reversible numerical representations ("face embeddings") to operate the requested feature. We do not collect government‑issued identifiers or store facial geometry templates designed to identify you across services.

Planned uses of the collected face data

Which third parties we share face data with

Face data may be processed by our cloud provider (Amazon Web Services, Inc.) that supply compute, storage, and moderation. We do not sell face data. Processing occurs on secure servers in the United States and/or the European Union. Access is restricted and logged.

Whether or not the third parties we share face data with also store face data

Face data will be stored by our cloud provider (Amazon Web Services, Inc.) for up to 24 hours to complete the requested AI processing. AWS stores this data temporarily on their secure servers to:

The 24-hour retention period is necessary because:

We automatically deletes all face data from AWS servers after this 24-hour period as part of our data processing agreement. AWS does not use, analyze, or retain copies of your face data for their own purposes.

Retention period

Uploads remain in your account until you delete them or close your account. Transient artifacts (including detection metadata and embeddings) are retained only as long as necessary to complete processing and for up to 30 days for troubleshooting and abuse prevention; backups may persist for up to 35 additional days. If you opt‑in to model improvement, we retain only minimal data until consent is withdrawn.

Where in the privacy policy is this explained?

Quoted text from our Privacy Policy

Face Data and Biometric Information — What we collect. When you upload photos or videos to use face-related features, we process those files to detect and align faces. During processing, we may generate short‑lived face detection metadata (for example, bounding boxes and landmarks) and non‑reversible numerical feature representations ("face embeddings") derived from the pixels.

How we use it. We use face data solely to provide and improve features you request, such as image‑to‑video generation, face enhancement, reenactment, style transfer, and safety checks. We do not use face data for advertising or for user profiling unrelated to the requested feature.

Sharing and storage. Face data and derived features may be processed by our cloud infrastructure and trusted subprocessors that provide compute, storage, and content moderation. We do not sell face data. Processing and storage occur on secure servers located in the United States and/or the European Union.

Retention. Uploaded media are retained in your account until you delete them or your account is closed. Transient processing artifacts (including face detection metadata and embeddings) are kept only for the duration necessary to complete the task and for up to 30 days for troubleshooting, abuse prevention, and to honor deletion requests; backups may persist for up to 35 additional days.

For additional details and your rights, see the Face Data and ASR & NR Privacy (Apple 5.1) sections of the Privacy Policy.

2.2 Photo Library Access

We request photo library access only to allow you to select images for head swap processing. This permission is:

2.3 Camera Access

Camera access is requested only when you choose to take a new photo. This is completely optional and only used for capturing images for head swap processing.

2.4 No Unnecessary Data Collection

We do NOT collect:

3. Third-Party AI Service Data Sharing, Consent, and Protection

3.1 What Data Is Shared with Third-Party AI Services

To provide our core AI-powered features (head swap, face enhancement, image-to-video generation, and face reenactment), we transmit the following personal data to third-party AI processing services:

Face detection metadata (bounding boxes, landmarks) and face embeddings are generated and used solely on our own servers during processing. They are not shared with any third party.

We do not send your email address, username, device identifiers, or any other account information to third-party AI services. Only the minimum data required to fulfill your specific request is transmitted.

3.2 Who Receives Your Data

Your uploaded images are sent to the following identified third parties solely for the purpose of providing the AI features you request. Face detection metadata and face embeddings are generated and remain on our own servers and are not shared.

We do not sell, rent, or share your personal data with advertisers, data brokers, or any other third parties beyond those listed above.

3.3 Your Permission — Consent Before Data Is Shared

We obtain your explicit permission before any personal data is transmitted to third-party AI services:

3.4 How We Collect and Use Your Data — Summary

The following table summarizes the data we collect, how we collect it, all uses of that data, and the third parties involved:

Data Type How Collected Purpose / Use Third Party Recipient
Photos & images Uploaded by you from your device Head swap, face enhancement, image-to-video generation Amazon Web Services, Inc.
Face detection metadata (bounding boxes, landmarks) Automatically derived from your uploaded images during processing Face alignment and feature processing Not shared — processed on our own servers only
Face embeddings (non-reversible numerical representations) Automatically generated from your facial features during processing AI model inference for requested features Not shared — processed on our own servers only
Email & username (optional) Provided by you during registration or Apple Sign-In Account management, sync, service updates Not shared with third parties
Anonymous usage analytics Automatically collected (crash reports, feature usage) App stability and performance improvement Analytics provider (anonymized, no personal data)

3.5 Third-Party Protection Standards

All third parties we share your data with are contractually required to provide the same or equal level of protection for your personal data as described in this Privacy Policy. Specifically, each third party must:

3.6 Service Providers Summary

We work with the following third parties:

4. Data Retention and Deletion

4.1 Automatic Deletion

4.2 User-Controlled Deletion

You can delete your data at any time:

5. Your Rights and Consent Management

5.1 Consent Withdrawal

You can withdraw consent for data collection at any time:

5.2 Data Access and Control

You have the right to:

6. No Account Required for Core Features

Our app is designed with privacy in mind:

7. Children's Privacy (Under 18)

Our app is not intended for children under 18 years of age:

8. Data Security

We implement industry-standard security measures:

9. International Data Transfers

If data is transferred internationally, we ensure:

10. European Privacy Rights (GDPR)

If you are in the EEA/UK, you have additional rights including:

11. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or applicable laws. We will:

12. Zero-Tolerance Policy for Child Sexual Abuse Material (CSAM)

We have a zero-tolerance policy regarding the upload, generation, or distribution of Child Sexual Abuse Material (CSAM). To protect children and comply with global safety standards:

13. Contact Us

For questions about this Privacy Policy or to exercise your rights, contact us:

Response Time: We will respond to your privacy requests within 30 days or as required by applicable law.