Privacy Policy

1. Introduction

CharSwap ("we", "our", or "the app") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our mobile application on iOS and Android.

By using CharSwap, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not use our application.

2. Information We Collect

2.1 Account Information

• Name and email address (when you sign in with Google, Apple, or email)
• Unique user ID generated by Firebase
• Basic profile information

2.2 User Content

• Photos and videos you upload for processing (for example, a face photo, a reference video, or a selfie for a viral experience)
• AI-generated images and videos created from your content
• Processing history and preferences

2.3 Technical Information

• Device information (model, operating system, version)
• IP address and approximate location information
• Application usage and error logs
• Language preferences and settings

2.4 Face Data

CharSwap processes face-related content that you choose to upload. This includes face photos, selfies, and facial regions extracted from reference videos solely to generate face swap and motion copy results.

• What we collect: Face photos/selfies you select, facial features visible in uploaded videos, and AI-generated output videos that include your face.
• What we do not collect: We do not create persistent biometric templates, perform identity recognition, or use face data to identify you outside the requested generation.
• How we use it: Only to process the video generation you request, show your history in the app, and provide support if needed.
• Sharing: Face-related content is sent temporarily to our AI service providers listed in Section 4.1 only to deliver the requested result. We do not sell face data.
• Storage: Face-related media is stored in Firebase Storage (Google Cloud) under your account until you delete the video from your history or delete your account.
• Retention (CharSwap): Stored until you delete the related video or account.
• Retention (third-party AI providers): Face-related content sent for processing is retained by each provider only as described in Section 6. We do not control their retention beyond their published policies.

You can review third-party AI processing and the data sent in the app under Settings → AI & Data Sharing.

3. How We Use Your Information

3.1 Service Provision

• Process your videos using artificial intelligence
• Store and manage your processing history
• Provide technical support and customer service

3.2 Service Improvement

• Analyze usage patterns to improve functionality
• Develop new features and capabilities
• Optimize application performance

3.3 Communication

• Send push notifications about processing status (with your permission)
• Inform about important application updates
• Respond to your support requests

4. Information Sharing

We do not sell, rent, or share your personal information with third parties, except in the following circumstances:

4.1 Service Providers

To generate your videos and run the app, the photos and videos you upload may be sent to the AI providers that power each feature:

• Firebase (Google): Data storage, authentication, cloud functions, push notifications, analytics, and crash reporting
• Apple: Sign in with Apple and App Store in-app purchase processing (Apple handles payment details; we receive purchase metadata only)
• AIML API: Primary AI processing for face swap and motion copy (uses Alibaba Wan 2.2 and Kling models through this service)
• Replicate: Alternative AI hosting for face swap, motion copy, and some dynamic/viral experiences
• OpenAI: Automated content moderation of uploads and image generation for some viral experiences
• Analytics Providers: Usage analysis and performance monitoring

We do not call Alibaba DashScope or Kling/Kuaishou APIs directly; those models are accessed through AIML API or Replicate when applicable.

These providers process your content only to deliver the requested result. We do not sell your content, and your media is not used to identify you to third parties.

4.2 Legal Requirements

• When required by law or legal process
• To protect our legal rights
• To protect the safety of our users

4.3 Consent

We may share information with your explicit consent or when you choose to share content publicly.

5. Data Security

We implement robust security measures to protect your information:

• Encryption: All data is encrypted in transit and at rest
• Secure Authentication: We use Firebase Auth with Google Sign-In, Sign in with Apple, and email sign-in
• Limited Access: Only authorized personnel have access to data
• Monitoring: We continuously monitor for suspicious activities
• Secure Backup: Data is stored with redundancy and regular backups

6. Data Retention

We retain your information for as long as necessary to provide our services:

• Account Data: Until you delete your account
• Uploaded and Generated Videos (CharSwap): Until you delete them from My Videos or delete your account
• Technical Logs: For up to 90 days for analysis and debugging purposes (logs do not contain face images or videos)
• Usage Data: Aggregated and anonymized for up to 2 years

6.1 Third-Party AI Provider Retention (Face-Related Content)

When you request a generation, face-related content may be sent to one of the providers listed in Section 4.1. Retention at those providers depends on which service processed your request:

• AIML API: No fixed public retention period; data is retained only as long as necessary to provide the service and comply with legal obligations.
• Replicate (when used): Inputs, outputs, and files are automatically deleted approximately 1 hour after prediction completes.
• OpenAI (when used for moderation or image generation): API inputs and outputs may be retained for up to 30 days for abuse monitoring.

We do not call Alibaba DashScope or Kling/Kuaishou APIs directly; Wan and Kling models are accessed through AIML API or Replicate, and their retention follows the policy of the provider that processed the request.

7. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the data we have about you
• Correction: Correct inaccurate or incomplete information
• Deletion: Delete individual videos from the app, or permanently delete your entire account under Settings → Delete Account
• Portability: Receive your data in a structured format and export generated videos before deletion
• Objection: Object to the processing of your data
• Restriction: Limit how we process your data

8. Cookies and Similar Technologies

Our application may use cookie-like technologies to:

• Remember your preferences and settings
• Analyze application usage
• Improve performance and functionality

You can manage these preferences in your device settings.

9. International Data Transfers

Your data may be transferred and processed in countries outside your jurisdiction, including the United States and other regions where our service providers (including Google/Firebase, AIML API, OpenAI, and Replicate) are located. We ensure that these transfers are made with adequate protections in accordance with applicable laws.

10. Children Under 13

Our application is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will take steps to delete such information immediately.

11. Changes to this Policy

We may update this Privacy Policy periodically. We will notify you of significant changes through the application or by email. We recommend that you review this policy regularly.

12. Legal Compliance

This policy complies with:

• General Data Protection Regulation (GDPR) - European Union
• Children's Online Privacy Protection Act (COPPA) - United States
• California Consumer Privacy Act (CCPA) - California, USA
• Lei Geral de Proteção de Dados (LGPD) - Brazil