FaceApp: Perfect Face Editor

"We may collect this information directly or through our use of third-party software development kits ("SDKs"). SDKs may enable third parties to collect information directly from the App. ... We may share information we collect from you with our subsidiaries and affiliates, for purposes consistent with this Privacy Policy. Service providers. We may share your information with service providers that perform services on our behalf or help us operate the Apps (such as customer support, hosting, analytics, email delivery, marketing, and database management services)."

Third-party SDKs can collect data directly from users' devices, and FaceApp shares non-photo personal information with affiliates, subsidiaries, and a broad range of service providers including marketing and analytics companies.

"Device data, such as your computer and mobile device operating system type and version number, manufacturer and model, push tokens, browser type, screen resolution, IP address (and the associated city/country in which you are located). ... Please note that while we do not require or request any metadata attached to the photographs or videos you select for editing, metadata (including, for example, geotags) may be associated with your photographs or videos by default."

FaceApp collects IP addresses and derives city/country-level location from them. Photos may also carry geotag metadata, and while they say they delete it, they acknowledge receiving it.

"We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the Apps and Site. ... In all cases, your continued use of our services after the posting of any modified Privacy Policy indicates your acceptance of the terms of the modified Privacy Policy."

FaceApp can change the privacy policy at any time, and continued use of the app is treated as acceptance of the new terms, with no requirement for explicit user consent.

"With respect to non-photograph and non-video information that we may collect, we will retain such information only for as long as necessary to fulfill the purposes we have set out in this Privacy Policy unless a different retention period is permitted or required by applicable law."

While photos are deleted within 24-48 hours, all other personal data (device data, usage info, IP addresses) has no specific deletion timeline — just a vague 'as long as necessary' standard, which effectively means indefinite retention.

"Device data, such as your computer and mobile device operating system type and version number, manufacturer and model, push tokens, browser type, screen resolution, IP address (and the associated city/country in which you are located), and the website you visited before visiting our Site. ... We may collect this information directly or through our use of third-party software development kits ("SDKs"). SDKs may enable third parties to collect information directly from the App."

FaceApp collects detailed device fingerprinting data (OS version, model, screen resolution, browser type, referral sites) and uses third-party SDKs that can collect data directly, enabling cross-service tracking and profiling.

"Photographs or videos you select when you use the Apps, via your camera or camera roll (if you have granted the Apps the permission to access your camera or camera roll), or via the in-App internet search functionality. ... Device data, such as your computer and mobile device operating system type and version number, manufacturer and model, push tokens, browser type, screen resolution, IP address."

FaceApp accesses the camera and camera roll, and collects extensive device data including OS details, device model, push tokens, and screen resolution — some of which goes beyond what a photo editor strictly requires.