Privacy Policy

This Privacy Policy applies to the GIFSwap iOS app, its iMessage extension, the GIFSwap API, and this website (together, the “Service”). In this policy, “GIFSwap,” “we,” “us,” and “our” refer to the provider of the Service.

GIFSwap lets you browse GIFs, save favourites, and—when available to your account—create a new GIF using a face photo you select. The app uses an anonymous installation identity; it does not require you to create a profile with a name or email address.

Photos and generated content

• A face photo you choose, along with its file type and technical dimensions, when you request a face swap.
• The GIF identifier and source needed to create the requested result.
• The generated GIF and processing status.
• Faces and GIFs you save locally remain on your device or in the app’s shared iOS app group until you remove them or delete the app.

Device and service information

• An anonymous app user ID, Apple DeviceCheck information, session credentials, app version, platform, and security or abuse-prevention signals.
• A push-notification token if you allow notifications, used to tell you when a swap is ready.
• Request identifiers, timestamps, job status, error information, and limited server logs used to operate and secure the Service.

Purchases, analytics, and attribution

• Subscription product, entitlement, purchase status, trial status, and renewal events from Apple and RevenueCat. We do not receive your complete payment-card details.
• Product events such as app opens, screens viewed, GIF actions, swap completion, paywall interactions, and purchase-flow outcomes.
• Device or advertising identifiers, attribution IDs, campaign information, IP address, and general device information when analytics or advertising attribution is enabled and permitted by your device settings.
• Rewarded-ad delivery and verification information if that optional feature is enabled.

Website information

The public website does not currently set its own advertising or analytics cookies. Cloudflare and ordinary internet infrastructure may process IP address, browser type, request time, and security logs to deliver and protect the site.

We use information to:

• authenticate installations and protect the Service from fraud or abuse;
• find GIFs, moderate submitted photos, create swaps, and deliver results;
• provide subscriptions, restore purchases, and enforce usage entitlements;
• send a swap-ready notification when you have allowed notifications;
• measure product reliability, understand feature use, and improve GIFSwap;
• measure campaign performance and optimize advertising where permitted; and
• comply with law and enforce our Terms of Use.

Where a law requires a legal basis, we process information as needed to provide the Service you request, for our legitimate interests in operating and securing GIFSwap, with consent where required, and to meet legal obligations.

We disclose information only as needed to run the Service, measure it, meet legal obligations, or complete a business transaction. Key providers include:

• OpenAI for image moderation and generation.
• KLIPY for GIF discovery and trusted GIF sources.
• Railway and Cloudflare for application, storage, and website infrastructure.
• Apple for DeviceCheck, notifications, the App Store, and in-app purchases.
• RevenueCat for subscription entitlement and lifecycle processing.
• Mixpanel, AppsFlyer, and Meta for optional analytics and attribution. RevenueCat may send them subscription lifecycle and revenue events.
• AppLovin for optional rewarded ads when that feature is configured.

These providers process information under their own terms and privacy commitments. GIFSwap does not sell face photos or generated GIFs. Depending on where you live, disclosure of attribution identifiers to advertising providers may be treated as “sharing” for targeted advertising under local law.

• Face-photo inputs: kept in private temporary storage while queued and processing, then deleted after the job succeeds or fails.
• Generated GIFs: available from temporary server storage for up to 60 minutes by default so your device can download the result.
• Job metadata: processing and audit records are normally retained for up to 7 days, unless a longer period is needed for security, legal compliance, or dispute resolution.
• On-device content: saved faces, favourites, and downloaded swaps remain until you remove them or delete the app.
• Subscription and analytics records: retained according to our operational needs and the retention settings of Apple, RevenueCat, and the configured analytics providers.

Backup copies and security logs may persist for a limited additional period before deletion or de-identification.

• You decide which photo to submit and can remove locally saved faces and swaps.
• You can allow or deny notifications in iOS Settings.
• You can allow or deny Apple’s App Tracking Transparency permission. Denial limits access to the advertising identifier.
• You can manage or cancel subscriptions through your Apple ID’s subscription settings.
• Depending on where you live, you may request access, correction, deletion, portability, restriction, or an opt-out from certain processing.

Email support@gifswap.app with “Privacy request” in the subject. Because accounts are anonymous, we may need the app’s installation identifier or other information to locate a record and verify the request. Some information may be retained when required by law or needed for security and fraud prevention.

We use technical and organizational safeguards including encrypted network transport, private artifact storage, short-lived download links, access controls, encrypted push tokens, and bounded retention. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

GIFSwap and its providers may process information in the United States and other countries. Those countries may have privacy laws different from the laws where you live. Where required, appropriate transfer safeguards will be used.

GIFSwap is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has submitted personal information, contact us so we can investigate and delete it where appropriate.

We may update this policy as GIFSwap changes. We will post the revised policy here and update the effective date. If a change is material, we may also provide notice in the app or through another appropriate channel.

Questions or requests can be sent to support@gifswap.app.