1. Introduction
CharSwap ("we", "our", or "the app") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our mobile application on iOS and Android.
By using CharSwap, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not use our application.
2. Information We Collect
2.1 Account Information
- Name and email address (when you sign in with Google, Apple, or email)
- Unique user ID generated by Firebase
- Basic profile information
2.2 User Content
- Photos and videos you upload for processing (for example, a face photo, a reference video, or a selfie for a viral experience)
- AI-generated images and videos created from your content
- Processing history and preferences
2.3 Technical Information
- Device information (model, operating system, version)
- IP address and approximate location information
- Application usage and error logs
- Language preferences and settings
2.4 Face Data
CharSwap processes face-related content that you choose to upload. This includes face photos, selfies, and facial regions extracted from reference videos solely to generate face swap and motion copy results.
- What we collect: Face photos/selfies you select, facial features visible in uploaded videos, and AI-generated output videos that include your face.
- What we do not collect: We do not create persistent biometric templates, perform identity recognition, or use face data to identify you outside the requested generation.
- How we use it: Only to process the video generation you request, show your history in the app, and provide support if needed.
- Sharing: Face-related content is sent temporarily to our AI service providers listed in Section 4.1 only to deliver the requested result. We do not sell face data.
- Storage: Face-related media is stored in Firebase Storage (Google Cloud) under your account until you delete the video from your history or delete your account.
- Retention: Stored until you delete the related video or account, or for up to 30 days after processing if not deleted sooner (see Section 6).
You can review third-party AI processing and the data sent in the app under Settings → AI & Data Sharing.
Important: We do not collect or store payment card information directly. In-app purchases on Android are processed by the Google Play Store; on iOS they are processed by Apple's App Store. In some regions where in-app billing may be unavailable, payments may be processed through our secure payment website and its payment provider.
3. How We Use Your Information
3.1 Service Provision
- Process your videos using artificial intelligence
- Store and manage your processing history
- Provide technical support and customer service
3.2 Service Improvement
- Analyze usage patterns to improve functionality
- Develop new features and capabilities
- Optimize application performance
3.3 Communication
- Send push notifications about processing status (with your permission)
- Inform about important application updates
- Respond to your support requests
4. Information Sharing
We do not sell, rent, or share your personal information with third parties, except in the following circumstances:
4.1 Service Providers
To generate your videos and run the app, the photos and videos you upload may be sent to the AI providers that power each feature:
- Firebase (Google): Data storage, authentication, cloud functions, push notifications, analytics, and crash reporting
- Apple: Sign in with Apple and App Store in-app purchase processing (Apple handles payment details; we receive purchase metadata only)
- AIML API: AI processing for face swap and motion copy
- Alibaba Wan 2.2: AI face swap technology
- Kling (Kuaishou): AI motion copy and video generation technology
- Replicate: Hosting and running AI models used by some experiences
- OpenAI: AI image generation used by some viral experiences
- Analytics Providers: Usage analysis and performance monitoring
These providers process your content only to deliver the requested result. We do not sell your content, and your media is not used to identify you to third parties.
4.2 Legal Requirements
- When required by law or legal process
- To protect our legal rights
- To protect the safety of our users
4.3 Consent
We may share information with your explicit consent or when you choose to share content publicly.
5. Data Security
We implement robust security measures to protect your information:
- Encryption: All data is encrypted in transit and at rest
- Secure Authentication: We use Firebase Auth with Google Sign-In, Sign in with Apple, and email sign-in
- Limited Access: Only authorized personnel have access to data
- Monitoring: We continuously monitor for suspicious activities
- Secure Backup: Data is stored with redundancy and regular backups
6. Data Retention
We retain your information for as long as necessary to provide our services:
- Account Data: Until you delete your account
- Processed Videos: For 30 days after processing (you can download before)
- Technical Logs: For up to 90 days for analysis and debugging purposes
- Usage Data: Aggregated and anonymized for up to 2 years
7. Your Rights
You have the following rights regarding your personal data:
- Access: Request a copy of the data we have about you
- Correction: Correct inaccurate or incomplete information
- Deletion: Delete individual videos from the app, or permanently delete your entire account under Settings → Delete Account
- Portability: Receive your data in a structured format and export generated videos before deletion
- Objection: Object to the processing of your data
- Restriction: Limit how we process your data
8. Cookies and Similar Technologies
Our application may use cookie-like technologies to:
- Remember your preferences and settings
- Analyze application usage
- Improve performance and functionality
You can manage these preferences in your device settings.
9. International Data Transfers
Your data may be transferred and processed in countries outside your jurisdiction, including the United States and China, where our service providers (including Google, OpenAI, Replicate, Alibaba, and Kling/Kuaishou) are located. We ensure that these transfers are made with adequate protections in accordance with applicable laws.
10. Children Under 13
Our application is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will take steps to delete such information immediately.
11. Changes to this Policy
We may update this Privacy Policy periodically. We will notify you of significant changes through the application or by email. We recommend that you review this policy regularly.
12. Legal Compliance
This policy complies with:
- General Data Protection Regulation (GDPR) - European Union
- Children's Online Privacy Protection Act (COPPA) - United States
- California Consumer Privacy Act (CCPA) - California, USA
- Lei Geral de Proteção de Dados (LGPD) - Brazil