Swapzee Privacy Policy

01 Scope of this Policy

This Privacy Policy applies to information collected through:

• The Swapzee mobile application on Android, iOS, and any future supported platforms.
• Our servers, application programming interfaces, AI inference systems, cloud storage, content delivery networks, and queue infrastructure used to operate the application.
• Customer support, abuse-prevention, analytics, crash reporting, monetization, and related operational tools that interact with the application.

This Policy does not extend to third-party websites, app stores, advertising networks, payment processors, or other external services that may interact with Swapzee. Those services operate under their own privacy notices and terms.

02 Information We Collect

Depending on how you use Swapzee, we may collect the following categories of information:

03 Information You Provide Directly

You provide information to us when you:

• Upload media for AI processing.
• Sign in using a supported authentication method.
• Contact support, submit feedback, or report content.
• Participate in surveys, promotions, beta features, or testing programs that we may offer.
• Purchase or restore subscriptions or paid features where available.

You are responsible for ensuring that you have the right to provide every piece of personal information or media you submit through the application, including the likeness of any identifiable person depicted in uploaded images.

04 Information Collected Automatically

When you use Swapzee, certain information may be collected automatically by us or our service providers, including:

• Application events and usage analytics.
• Crash reports and error diagnostics.
• Device identifiers or pseudonymous installation identifiers.
• Performance telemetry such as latency, feature reliability, queue timing, and failure rates.
• Advertisement-related event data where advertising is displayed.
• Security logs needed to detect spam, fraud, abuse, or unauthorized access.

This information helps us operate, secure, troubleshoot, and improve the application.

05 How We Use Information

We use collected information for the following purposes:

• To provide the application and perform AI face swap processing.
• To upload, transmit, temporarily store, process, and return generated output.
• To authenticate users and manage session state.
• To maintain infrastructure, monitor reliability, debug errors, and improve performance.
• To protect the application, users, partners, and systems from abuse, fraud, security threats, or policy violations.
• To understand product usage, improve features, optimize flows, and guide future development.
• To administer subscriptions, entitlements, ads, monetization systems, and app store integrations.
• To comply with legal obligations, enforce our Terms of Service, and respond to lawful requests.
• To communicate with you about support issues, important policy changes, service notices, or operational updates.
• To maintain internal records reasonably necessary for auditing, dispute resolution, abuse prevention, and business continuity.

06 Media Processing & Retention

Swapzee is an AI-powered image processing service. Uploaded and generated media may pass through our cloud infrastructure and trusted service providers in order to complete the processing you request. Our current data handling approach is:

• Uploaded media is used for face detection, alignment, generation, rendering, quality checks, delivery, and related technical processing only.
• Generated output is stored only long enough to be returned to your device, displayed in the application, and made available for you to download or share.
• Photos uploaded by users for processing are permanently deleted from our servers within 24 hours of job completion.
• Generated face swap results are kept only until you download or share them. Once a result is downloaded or shared, the server copy is queued for deletion and removed shortly afterwards. Any generated result that is not downloaded is automatically and permanently deleted within 30 days at the latest.
• Temporary caching, content delivery, secure object storage, and infrastructure-level backups may cause short-lived copies or modest delays in deletion timing in some systems.
• We do not store, license, or resell uploaded or generated media as standalone commercial content.
• We may retain minimal metadata, logs, job records, and abuse-prevention records after the underlying media is deleted to continue to operate and secure the service.

07 AI Models, Facial Feature Data & Safety Screening

To perform a face swap, our AI inference system temporarily analyzes facial geometry from the photos you submit. We want to be explicit about how this works:

• No biometric identification. Swapzee does not match faces against any identity database, does not perform biometric identification, and does not build a persistent biometric profile of any user.
• Transient processing only. Facial landmark data is generated in memory to align, blend, and render the requested image. It is not retained as a standalone biometric record after the job completes and the underlying media is deleted under Section 6.
• No training on your uploads. We do not use the photos you upload to Swapzee to train, fine-tune, or improve general-purpose AI or face recognition models, except for narrowly scoped abuse-detection signals that operate on metadata and moderation outcomes rather than the photo content itself.
• Automated NSFW pre-screening. Before a face swap is performed, every uploaded image is passed through an automated safety classifier that scores the image for nudity, sexual content, and other unsafe material. If the score indicates that the upload is not safe, the request is rejected and the swap is not generated. This screening is automated and applies to all users.
• No sexual or explicit output. Swapzee is designed to refuse to produce sexual deepfakes, nudity, or explicit imagery. Attempting to bypass these controls is a violation of our Terms of Service.
• AI-generated output disclosure. Outputs are generated by an AI system. Every generated image carries a visible “Swapzee · AI” watermark that identifies both the source application and the synthetic origin of the image, and is also tagged with C2PA / SynthID-style provenance metadata embedded inside the exported file. You must not remove, crop out, obscure, alter, or strip either the visible watermark or the embedded provenance metadata in order to misrepresent the output, and you must not present Swapzee output as an authentic, unedited photograph of any real person.

08 Legal Bases & Consent

Depending on your jurisdiction, we may process personal information based on one or more of the following grounds:

• Your consent, including where you choose to upload images or grant device-level permissions.
• Performance of a contract or service request, such as processing the images you submit through the application.
• Legitimate interests, including service security, analytics, fraud prevention, diagnostics, and product improvement.
• Compliance with legal obligations.

Where consent is required by applicable law, you may decline certain processing by not using related features or by adjusting your device or platform permissions, subject to feature availability and technical limitations.

09 When We Share Information

We share information only in limited circumstances:

• With cloud hosting, AI inference, storage, analytics, crash reporting, authentication, advertising, and infrastructure providers that help us operate the application.
• With app store or platform providers to manage subscriptions, purchases, entitlements, fraud prevention, and compliance.
• With professional advisors, auditors, insurers, or acquirers where reasonably necessary for legitimate business purposes.
• With law enforcement, regulators, courts, or other third parties when required by law or when reasonably necessary to investigate illegal activity, protect rights, or enforce our Terms.
• In connection with a merger, financing, acquisition, restructuring, sale of assets, or similar transaction, subject to appropriate confidentiality and legal safeguards.

We do not sell uploaded images or generated output as standalone content to unrelated third parties for their independent use.

10 Third-Party Services

Swapzee is operated with the help of a small number of carefully selected third-party processors, each engaged for a single, limited operational purpose. The principal providers are:

• Google Firebase — including Firebase Authentication for anonymous identifiers, Firebase Crashlytics for crash diagnostics, and Firebase Analytics for usage telemetry.
• Mixpanel — for product analytics and event-level usage measurement.
• Cloudflare — for request routing, content delivery, and secure object storage.
• Modal — for AI inference workloads used to render face swap output.
• Google AdMob and Meta Audience Network — for in-application advertising, where ads are shown.

Each of these providers operates under its own privacy policy. We engage them as service providers acting on our instructions to operate Swapzee, and we do not transfer your data to them for their independent use. Where required, we have data-processing or service-provider terms in place that restrict how they handle information. For security reasons we do not publish internal infrastructure topology, model details, queue configurations, or how these providers are chained together within the Service.

We encourage you to review the privacy practices of the platform providers relevant to you, including Google Play, Apple, and the providers listed above.

11 Advertising & Analytics

Swapzee uses a small set of advertising and analytics tools to keep the application free, secure, and well-maintained. The principal tools are:

• Advertising: Google AdMob and Meta Audience Network.
• Analytics & diagnostics: Firebase Analytics, Firebase Crashlytics, and Mixpanel.

Advertising identifier (AAID / IDFA)

On Android, the application uses the Android Advertising ID (AAID); on iOS, it uses the equivalent advertising identifier (IDFA) where you have granted permission. These are user-resettable pseudonymous identifiers provided by the operating system. We and our advertising partners use them to:

• Limit ad frequency so the same ad is not repeated excessively.
• Measure ad performance and detect invalid or fraudulent ad traffic.
• Where you have not opted out at the operating-system level, deliver more relevant (personalized) advertising.

The advertising identifier is not used for biometric identification, is not used to access your photos, and is not combined with the content you upload or generate.

What advertising and analytics tools may collect

• Event-level usage data, screen views, and feature interactions.
• Device information such as model, operating system version, language, and approximate region.
• Pseudonymous installation identifiers and the advertising identifier described above.
• Ad interaction data such as impressions, clicks, and conversions.
• Crash reports and diagnostic signals.

We do not feed your uploaded photos or generated images into any analytics or advertising pipeline.

How to opt out of personalized advertising or reset your advertising ID

• Android: open Settings → Google → Ads to reset your advertising ID or to opt out of ads personalization.
• iOS: open Settings → Privacy & Security → Tracking and turn off “Allow Apps to Request to Track”, or revoke tracking permission for Swapzee individually.
• You can also manage advertising preferences through the Google Ads Settings page and through Meta’s ad-preference controls in your respective accounts.

Opting out of personalized advertising does not stop ads from being shown; it limits how those ads are selected and how performance is measured.

12 Data Security

We apply reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include transport encryption, access controls, environment segregation, logging, credential protection, and the security controls of our service providers. However, no system is completely secure. We cannot guarantee absolute security of any information transmitted over the internet or stored on connected systems, and you use the application and submit information at your own risk.

13 International Processing

Your information may be processed, stored, or accessed in countries other than the country where you live, depending on where our providers, infrastructure, or support operations are located. Those countries may have data protection laws that differ from those in your jurisdiction. Where required, we may rely on contractual, technical, or organizational safeguards intended to support lawful cross-border processing.

14 Children’s Privacy

Swapzee is not directed to children under the age of 13, or the minimum digital-consent age in the applicable jurisdiction if higher. We do not knowingly solicit or intentionally collect personal information from children in violation of applicable law. If we become aware that we have collected personal information from a child without appropriate authorization, we will take reasonable steps to delete that information. If you believe a child has provided personal information through the application without appropriate authorization, please contact us at info@mwci.in so we can review and act.

15 Your Rights & Choices

Depending on your location and applicable law, you may have rights relating to your personal information, including:

• Information about what categories of data we process and how they are used.
• Correction of inaccurate information you have provided to us.
• Withdrawal of consent where processing is based on consent.
• Objection to or restriction of certain processing in some circumstances.
• Managing device permissions or uninstalling the application at any time.

Automatic deletion. Swapzee is intentionally designed so that there is no persistent user account and no permanent server-side library of your content. Photos you upload are automatically and permanently deleted from our servers within 24 hours of processing, and generated results are automatically removed once you have downloaded or shared them, with any undownloaded result automatically deleted within 30 days at the latest. Because deletion happens automatically on this schedule, the application does not provide a separate “delete my data” control — there is no persistent stored content for the user to manually remove.

If you have a specific rights-related concern under applicable law (for example, a question about analytics, crash-log, or transactional records that may be retained for legitimate operational or legal reasons), you may contact us at info@mwci.in. We may need to verify your identity, request additional details, or decline requests where an exemption or legal basis permits us to do so.

16 Data Retention

We retain information only as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• Provide the application and its features.
• Complete the processing jobs you request.
• Maintain records related to subscriptions, support, security, and abuse prevention.
• Resolve disputes and enforce our Terms of Service.
• Meet legal, tax, accounting, regulatory, or compliance obligations.

Retention periods vary by data type, system design, legal requirement, and legitimate business need. For clarity: user-uploaded photos are permanently deleted within 24 hours of processing, and generated face swap results are kept only until you download or share them, with any result that has not been downloaded automatically deleted within 30 days at the latest.

17 Device Permissions

The application may request access to certain device capabilities, including:

• Photos, media library, or file access so you can choose images.
• Camera access, where in-app capture features are offered.
• Network access to communicate with our infrastructure and service providers.
• Storage or save permissions to download or export generated content.
• Notifications, where you opt in to receive operational or feature-related messages.

If you deny certain permissions, some features may not function correctly or may be unavailable.

18 Reporting AI-Generated Content

We take abuse of AI-generated media seriously. If you encounter content created with Swapzee that you believe is offensive, deceptive, non-consensual, infringing, or otherwise harmful, you can report it from inside the application.

How to submit a report

1. Open Swapzee and go to Settings → Report AI Generated Content.
2. Review the on-screen What you can report and What to include in your email guidance.
3. Tap the Mail us button. Your default email application opens with our address (info@mwci.in) and a pre-filled subject line and message template.
4. Complete the email with the details described in the on-screen guidance and send it.

What you can report

• False or misleading content — content created with Swapzee that misrepresents a person, event, or fact.
• Harmful content created by others — material someone else generated using your likeness, or targeting another person, that is abusive, defamatory, or non-consensual.
• Your own generation that is inaccurate — something you created yourself that turned out wrong or misleading and that you want pulled from our systems.

What to include in your email

• A clear description of the issue.
• A screenshot or the original generated file, if you still have it.
• A link to where the content was shared, if it was posted publicly.

What happens to your report

Reports are delivered to our review team at info@mwci.in and tracked there. We aim to review every report within 24 to 48 hours of receipt. Where appropriate, we take immediate action, including removing output, blocking the underlying input, restricting features, suspending accounts, cooperating with platform operators or law enforcement, and any other protective step described in our Terms of Service.

19 Policy Changes

We may update this Privacy Policy from time to time to reflect changes in the application, legal requirements, service providers, or our data practices. When we do, we will revise the “Last updated” date and, where appropriate, provide notice within the application or through other reasonable means. Your continued use of Swapzee after an updated Privacy Policy becomes effective means that you acknowledge the revised policy, subject to any additional consent requirements imposed by law.

20 Contact Us

If you have questions, concerns, or privacy-related requests, please contact us at:

Email: info@mwci.in

If you contact us, please include enough detail for us to understand your request, including the device platform you are using and the email address or account context associated with your use of the application where relevant.