FaceApp's privacy policy on photos uploaded is not sitting well with users, Twitter reacts

The viral face changing app called FaceApp, which has been becoming viral for the past few days, is not exactly the most privacy-driven product. The app is made by a Russian company that sends photos from your device to its servers and also has the rights to retain the image for as long as it deems necessary.[caption id="attachment_7011811" align="alignnone" width="1280"]

FaceApp.[/caption]Many Twitter users have thrown caution in the wind regarding the way FaceApp handles user data. Elliot Alderson, who has earlier given details on a possible data breach of the Aadhaar database, says that FaceApp heavily uses Firebase, Facebook SDK and AccountKit which he says are tools that can be used to track users' online.

(Also Read: FaceApp does have privacy issues, but they're not much worse than Snapchat's)The privacy policy of the app also mentions that  FaceApp "may use information" they receive to "provide personalized content & information to you and others, which could include online ads or other forms of marketing.” FaceApp’s terms of service explicitly states “a perpetual, irrevocable, nonexclusive, royalty-free, worldwide, fully-paid, transferable sub-licensable license to use, reproduce, modify, adapt, publish, translate, create derivative works from, distribute, publicly perform and display your User Content and any name, username or likeness provided in connection with your User Content in all media formats and channels now known or later developed, without compensation to you.”Many users had said that FaceApp collects your entire camera roll and uploads them to its cloud servers but security researcher Jane Manchun Wong has said that only the photo which is clicked for the purpose of using a filter is uploaded to the cloud. There is, however, no method for users to delete this photo although the company claims that it itself deletes the photos within 48 hours of uploading.While the app is certainly Russian based, the servers are located in the US on Amazon's cloud service called AWS. "People give photos to lots of different apps. I think this is probably getting attention because it's Russian developers," said Christine Bannan, consumer protection counsel at the nonprofit Electronic Privacy Information Center