FaceApp processes user-selected photos via encrypted uploads to cloud servers (Google Cloud and AWS), retaining them for up to 48 hours to enhance performance.
The company asserts it doesn't access entire photo libraries or store images beyond this period, and encryption keys remain on users' devices.
However, FaceApp collects metadata like device information and IP addresses, which may be shared with third parties for analytics and marketing.
While it claims not to sell user data, concerns persist about its broad data collection practices.
Given FaceApp's Russian origins, apprehensions about data access by foreign entities have been raised, leading to calls for investigations by U.S. officials.
Additionally, users have reported difficulties with subscription cancellations and data deletion requests, highlighting potential transparency issues.
If you have more to say about this topic, feel free to share.