Is FaceApp safe with your data?

FaceApp

58/100

Partial disclosure · grade C is 48–59 · high confidence

Scored 58 ± 5 (range 53–63)

That range crosses the B/C cut, so read this app as B or C rather than firmly either. How we grade

FaceApp earns a C (58/100) because it discloses its data practices only in part.

Dealbreaker flag

D1.4: You grant FaceApp a nonexclusive, sublicensable, royalty-free, worldwide, fully paid license to use, reproduce, temporarily cache, modify, adapt, create derivative works from, distribute, perform, and display your User Content

#42

of 216 apps ranked

score · Image & video avg 47

+11

vs category average

Grade scaleA · 70–100B · 60–69C · 48–59D · 35–47F · 0–34

FaceApp commits in writing that it does not use the photos and videos you edit for anything other than the editing itself and that cloud copies are deleted within 24 to 48 hours, but its terms take a sublicensable licence over user content, its data rights are offered only where your jurisdiction grants them, and it says nothing about notifying users of a breach.

What FaceApp's privacy policy and terms of service say about your data

Editing only, by its own words

The policy states the photos and videos you submit are not used for any reason other than providing the editing functionality, and that cloud copies are configured for deletion within 24 to 48 hours of your last edit. It also commits to processing only the specific files you choose, not your albums.

The terms take a sublicensable licence

The Terms of Use have you grant FaceApp a sublicensable, worldwide, royalty-free licence to use, reproduce, modify, adapt, create derivative works from, distribute and display your content. The licence is framed as lasting the term of the agreement and limited to providing the service, but the right to sublicense is granted outright.

Data rights depend on where you live

Access, correction, deletion and portability are offered "depending on your jurisdiction", and the deletion right is written as covering personal information FaceApp "no longer need[s]" rather than information you ask it to erase. Requests go to a named address, privacy@faceapp.com, and a Data Protection Officer is named at dpo@faceapp.com.

Security is an adjective, and breaches go unmentioned

The security section promises only "commercially reasonable security practices" with no named control, and the policy never says whether or how quickly users would be told about a data breach. Photos are encrypted with a key held on your own device, which the policy says prevents even FaceApp from viewing them.

What the policy is silent or vague on

Not stated: a way to opt out of training
Not stated: whether training use differs by plan
Not stated: your ownership of generated outputs
Not stated: shorter retention for AI conversation logs

FaceApp privacy rating

Training-data use1 of 4 disclosed

Keeps user inputs out of model training, or makes training opt-inDisclosed

Names a way to opt out of or into trainingSilent

Says whether training use differs by plan or tierSilent

Lets the user keep ownership of generated outputsSilent

Data-subject rights1 of 5 disclosed

Grants a right to access your dataPartial

Grants a right to delete your dataPartial

Offers data portability in a usable formatPartial

Grants a right to correct your dataPartial

Grants a way to object to or opt out of processingDisclosed

Retention and deletion2 of 4 disclosed

States a retention period for your dataDisclosed

States a deletion timeline after closure or requestPartial

Sets a shorter retention for AI conversation logsSilent

Commits to collecting only the data it needsDisclosed

Third-party sharing2 of 5 disclosed

Lists the categories of third parties it shares withDisclosed

References a sub-processor list or data processing agreementPartial

Does not sell or share data for advertising, or offers opt-outDisclosed

Names a safeguard for international data transfersSilent

States a standard for government and law-enforcement accessPartial

Transparency3 of 5 disclosed

Discloses that you are interacting with AIPartial

Marks AI-generated or synthetic outputPartial

Enumerates the categories of data it collectsDisclosed

Maps processing purposes to legal basesDisclosed

Is versioned and dated, with change noticeDisclosed

Sensitive data and children1 of 4 disclosed

Discloses automated decisions and a human-review pathSilent

Limits the use of special-category dataPartial

Governs biometric data specificallyPartial

States protections for children's dataDisclosed

Security and accountability1 of 3 disclosed

Describes its security safeguardsPartial

Commits to breach notificationSilent

Names a certification or a privacy contactDisclosed

DisclosedPartialSilentAdverseNot applicable

Details

Category: Image & video
Modalities: image
Processes biometrics: Yes
Policy last updated: 2024-11-04
Region scored: Global / US-default
Last assessed: 2026-10-13

Documents examined

Other image & video apps

Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.