ViralSwap: Face Swap Video Privacy Policy
This privacy policy applies to the ViralSwap: Face Swap Video app (hereby referred to as "Application") for mobile devices that was created by KILONA SP. Z O.O. (hereby referred to as "Service Provider") as a Commercial service. This service is intended for use "AS IS".
This privacy policy is effective as of 2026-02-14
Information Collection and Use
The Application collects information when you download and use it. This information may include:
- Your device's Internet Protocol address (e.g. IP address)
- The pages of the Application that you visit, the time and date of your visit, the time spent on those pages
- The time spent on the Application
- The operating system you use on your mobile device
The Application does not gather precise information about the location of your mobile device. The Application does not collect, store, or transmit any geolocation data.
For a better experience, while using the Application, the Service Provider may require you to provide certain personally identifiable information, including but not limited to facial images and video recordings. The information that the Service Provider requests will be retained and used as described in this privacy policy.
Third-Party Services
The Application utilizes third-party services that have their own Privacy Policies about handling data. Below are the third-party service providers used by the Application:
- Google Gemini API (operated by Google LLC) — AI face swap image processing. Privacy Policy: https://policies.google.com/privacy
- Kling AI (operated by Kuaishou Technology) — AI video generation. Privacy Policy: https://klingai.com/privacy
- Google Firebase Storage (operated by Google LLC) — secure cloud storage for user videos and images. Privacy Policy: https://firebase.google.com/support/privacy
- RevenueCat — subscription and purchase management. Privacy Policy: https://www.revenuecat.com/privacy
- Sentry — error tracking and crash reporting. Privacy Policy: https://sentry.io/privacy/
- Expo — application framework and update delivery. Privacy Policy: https://expo.dev/privacy
The Service Provider may disclose User Provided and Automatically Collected Information:
- As required by law, such as to comply with a subpoena, or similar legal process;
- When they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
- With their trusted service providers who work on their behalf, do not have an independent use of the information disclosed to them, and have agreed to adhere to the rules set forth in this privacy statement.
Use of Artificial Intelligence
The Application uses Artificial Intelligence (AI) technologies to provide its core functionality: generating AI-modified face swap videos. The following AI services process user data:
- Google Gemini API (operated by Google LLC) — receives and processes the user's facial image (extracted from the uploaded video) and an avatar reference image to perform the AI face swap. Data is transmitted as image data to Google's servers at generativelanguage.googleapis.com.
- Kling AI (operated by Kuaishou Technology) — receives the user's motion video and the face-swapped character image to generate the final AI-modified video. Data is transmitted to Kling AI's servers at api.klingai.com.
Both services act as data processors on behalf of the Service Provider. All AI processing is performed in accordance with this privacy policy and applicable laws.
Face Data and Video Processing
The Application allows users to upload short video recordings containing their face for the purpose of generating AI-modified video content requested by the user.
What data is collected:
- Short video recordings uploaded by the user (up to 9 seconds)
- A facial image extracted from the first frame of the uploaded video
- An avatar reference image selected or uploaded by the user
How the data is collected:
- The user voluntarily uploads a video through the Application's create screen
- The Application extracts a thumbnail image from the first frame of the video
- The user selects or uploads an avatar image
How the data is used:
- The facial image and avatar image are sent to Google Gemini API for AI face swap processing
- The user's motion video and the face-swapped image are sent to Kling AI for final video generation
- All uploaded and generated files are stored in Google Firebase Storage for the user to access and download
The Application does not collect, extract, analyze, or store biometric identifiers. Specifically, the Application does not collect or create:
- Facial recognition templates
- Facial geometry data
- Biometric identifiers
- Faceprints
- Identity recognition profiles
The Application does not perform facial recognition, identity verification, biometric authentication, or user identification.
Face data is used solely to generate the AI-modified video requested by the user and is not used for any unrelated purpose.
Third-Party AI Processing
To generate AI-modified videos, user data is securely transmitted to the following third-party AI infrastructure providers, which act as data processors on behalf of the Service Provider:
1. Google Gemini API (Google LLC)
- Data sent: User's facial image (base64-encoded), video frame thumbnail (base64-encoded), avatar reference image (base64-encoded)
- Purpose: Performing AI face swap — replacing the face in the video frame with the selected avatar face
- Processing location: Google's cloud infrastructure
- Privacy Policy: https://policies.google.com/privacy
- Terms of Service: https://policies.google.com/terms
2. Kling AI (Kuaishou Technology)
- Data sent: User's motion video (via URL), face-swapped character image (via URL)
- Purpose: Generating the final AI-modified video with the swapped face applied to the user's motion
- Processing location: Kling AI's cloud infrastructure
- Privacy Policy: https://klingai.com/privacy
These providers process the data solely for the purpose of generating the requested video output and do not use the data for:
- Advertising
- Profiling
- Tracking
- Identity recognition
- Training independent models unrelated to the service
The Service Provider does not sell, rent, or share user face data for advertising or marketing purposes.
All third-party processors are required to handle user data securely and in accordance with applicable privacy laws.
Cloud Storage and Data Retention (Firebase Storage)
User-uploaded videos and generated videos are securely stored using Google Firebase Storage, a cloud storage service operated by Google LLC.
- Privacy Policy: https://firebase.google.com/support/privacy
- Terms of Service: https://firebase.google.com/terms
This storage is used solely to:
- Provide access to generated videos
- Allow users to preview and download their content
- Maintain application functionality
User videos are not used for biometric identification or facial recognition purposes.
User data is retained only as long as necessary to provide the service. Users may request deletion of their data by contacting contact@kilona.io.
Upon deletion request, the Service Provider will remove the associated data within a reasonable timeframe.
Purpose Limitation
Face data and video data are processed exclusively to provide the core functionality of the Application, which is generating AI-modified video content requested by the user.
Face data is not used for:
- Identity recognition
- Surveillance
- Biometric identification
- Advertising targeting
- Profiling
- Behavioral tracking
The Application does not attempt to identify users or link face data to real-world identities.
Data Security and Access Controls
The Service Provider implements reasonable technical and organizational safeguards to protect user video data, including:
- Secure transmission (HTTPS/TLS) for all data transfers to third-party services
- Controlled access to cloud storage systems
- Authentication and authorization controls on all API endpoints
Only authorized systems and infrastructure required to provide the Application functionality are permitted to access user video data.
Third-party service providers are contractually required to use the data only to provide services to the Application.
User Consent for AI Data Processing
Before your face data and video data are sent to third-party AI services for the first time, the Application will present a consent dialog that:
- Clearly identifies the third-party AI services (Google Gemini and Kling AI)
- Describes what data will be sent (facial images, video recordings)
- Requires your explicit agreement before proceeding
You may decline this consent, in which case the Application will not process your data through third-party AI services and the face swap feature will not be available.
Opt-Out Rights
You can stop all collection of information by the Application easily by uninstalling it. You may use the standard uninstall processes as may be available as part of your mobile device or via the mobile application marketplace or network.
To request deletion of your data, contact the Service Provider at contact@kilona.io.
Data Retention Policy
The Service Provider will retain User Provided data for as long as you use the Application and for a reasonable time thereafter. If you'd like them to delete User Provided Data that you have provided via the Application, please contact them at contact@kilona.io and they will respond in a reasonable time.
Children
The Application does not address anyone under the age of 13. The Service Provider does not knowingly collect personally identifiable information from children under 13 years of age. In the case the Service Provider discovers that a child under 13 has provided personal information, the Service Provider will immediately delete this from their servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact the Service Provider (contact@kilona.io) so that they will be able to take the necessary actions.
Security
The Service Provider is concerned about safeguarding the confidentiality of your information. The Service Provider provides physical, electronic, and procedural safeguards to protect information the Service Provider processes and maintains.
Changes
This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any changes to the Privacy Policy by updating this page with the new Privacy Policy. You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed approval of all changes.
Your Consent
By using the Application, you are consenting to the processing of your information as set forth in this Privacy Policy now and as amended by us.
Contact Us
If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at contact@kilona.io.