FaceApp
FaceApp Technology · Image and video · CY · www.faceapp.com
Last verified 2026-09-16
Entry
services/faceapp.yamlTraining on your data (default tier)
Not stated beyond operating and improving the apps; photos are encrypted with a device-held key during cloud processing
Retention
Photos and videos deleted from Google Cloud and AWS within 24 to 48 hours of the last edit
Data residency
Processed on Google Cloud and AWS; region not named; international transfers possible
Vendor data-handling terms
Training on your data (default tier)
Not stated beyond operating and improving the apps; photos are encrypted with a device-held key during cloud processing
The policy does not say whether photos are used to train the editing models.
“To operate and improve the Apps and the Site. / Photographs or videos are temporarily cached on the cloud servers during the editing process and encrypted using a key stored locally on your mobile device.”
Retention
Photos and videos deleted from Google Cloud and AWS within 24 to 48 hours of the last edit
“We configure Google Cloud Platform and Amazon Web Services to delete photographs and videos, and the information associated with those photographs and videos, within 24 to 48 hours after the photograph or video was last edited using the Apps.”
Data residency
Processed on Google Cloud and AWS; region not named; international transfers possible
“If we transfer your personal information internationally, these countries may not provide the same protections as the data protection laws where you are based.”
Domains and endpoints
observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.
| Host | Role | Source |
|---|---|---|
| api.faceapp.com | api | observed |
| faceapp.com | app | observed |
Assessment
Mobile app: medium
Reasoning: A face-editing app. Photos are encrypted with a device key and deleted within two days, which addresses the concerns raised about it in the past; training use and region are still not stated. Consumer app on personal devices.
Flags: Training-use of photos not stated · Region not stated · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.
Changelog
- 2026-09-16Documented. Use, retention and transfer terms verified against the FaceApp privacy policy.
- 2026-09-15Listed from the Unseen catalogue with observed domains.
Corrections
Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.