FaceApp
FaceApp Technology · Image and video · CY · www.faceapp.com
services/faceapp.yamlVendor data-handling terms
The policy does not say whether photos are used to train the editing models.
“To operate and improve the Apps and the Site. / Photographs or videos are temporarily cached on the cloud servers during the editing process and encrypted using a key stored locally on your mobile device.”
“We configure Google Cloud Platform and Amazon Web Services to delete photographs and videos, and the information associated with those photographs and videos, within 24 to 48 hours after the photograph or video was last edited using the Apps.”
“If we transfer your personal information internationally, these countries may not provide the same protections as the data protection laws where you are based.”
Domains and endpoints
observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.
| Host | Role | Source |
|---|---|---|
| api.faceapp.com | api | observed |
| faceapp.com | app | observed |
Assessment
Reasoning: A face-editing app. Photos are encrypted with a device key and deleted within two days, which addresses the concerns raised about it in the past; training use and region are still not stated. Consumer app on personal devices.
Flags: Training-use of photos not stated · Region not stated · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.
Changelog
- 2026-09-16Documented. Use, retention and transfer terms verified against the FaceApp privacy policy.
- 2026-09-15Listed from the Unseen catalogue with observed domains.
Corrections
Spotted something wrong or out of date? Send it with the source. Changes are checked and recorded in the changelog.