ToonApp AI+ Viral Photo Maker

"To provide AI-powered image and video enhancement features, the App uses trusted third-party AI service providers including Google, OpenAI, Replicate, fal.ai, Higgsfield, Bytedance and Kling AI, which process user-provided content solely to generate the requested AI outputs."

User photos and videos are sent to at least seven different third-party AI providers, each with their own retention policies and privacy practices, significantly expanding the attack surface for sensitive biometric and personal media.

"Our service providers and certain third parties (e.g., online advertising networks and their clients) also may collect this type of information over time and across third-party websites and mobile applications. This information may be collected on our Site using cookies, browser web storage (also known as locally stored objects, or "LSOs"), web beacons, and similar technologies. We may collect this information directly or through our use of third-party software development kits ("SDKs")."

Third-party advertising networks and SDKs embedded in the app track user activity across multiple websites and apps over time, building cross-context behavioral profiles.

"Device data, such as your computer and mobile device operating system type and version number, manufacturer and model, device ID, push tokens, Google Advertising ID, Apple ID for Advertising, browser type, screen resolution, IP address (and the associated country in which you are located), the website you visited before visiting our Site; and other information about the device you are using to visit the App."

The app collects extensive device identifiers including advertising IDs, device IDs, and push tokens, which go well beyond what is needed for a photo/video editing app's core functionality.

"We collect the following categories of personal information about California consumers... personal and online identifiers (i.e., username, email address, IP address, or unique online identifiers), internet or other electronic network activity information (i.e., advertisement interaction), and geolocation information, as well as other information about California consumers that is linked to these categories of personal information."

The app collects geolocation information and IP-based location data, which is shared with advertising partners and third parties for targeting purposes.

"OpenAI may retain API inputs and outputs for up to 30 days for abuse prevention and service integrity purposes... Higgsfield states in its Cloud API documentation that generated output files may be retained for up to seven (7) days... ByteDance processes user-provided data in accordance with its privacy policy and retains such data only as necessary to provide services."

Despite claiming immediate deletion, user content sent to third-party AI providers like OpenAI (30 days), Higgsfield (7 days), and ByteDance (unspecified) is retained according to each provider's own policies, meaning user photos and face data persist across multiple third-party systems.

"We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the App... In all cases, your continued use of the App after the posting of any modified Privacy Policy indicates your acceptance of the terms of the modified Privacy Policy."

The company can change the privacy policy at any time and treats continued use of the app as acceptance, with no requirement for affirmative consent to material changes.

"Important Note: Simply uninstalling the App from your device does not automatically delete your account or any associated AI Photos. Delete Your App Account: If you delete your entire account, we will also delete all generated photos and videos in the App. This process is typically completed within about four (4) days."

Users may reasonably expect uninstalling the app deletes their data, but it does not. Account deletion takes up to 4 days, and the policy does not clearly describe whether non-image personal data is also fully purged upon account deletion.