Privacy policy

Last updated: November 5, 2026. Applies to the Swapstar app and swapstar.thiollywood.com, run by Thiollywood (France).

The short version. No sign-up. Your photos are only used to make the images you ask for. They're never sold, never used to train AI, never used for ads or tracking. You can delete any face, any creation or your whole account from the app, instantly.

What we process

An anonymous account: a random identifier created on first launch and a secret stored on your phone (Keychain on iPhone). No name, e-mail or phone number is required.
Photos you choose: faces you add to your Cast and photos you edit in the Studio. They are sent to our servers and to our AI provider only to create the images you request.
Your creations and posts: images made for you are stored privately; posts you publish (and their caption) are visible to others according to the audience you pick.
Optional sign-in (Apple or Google) to keep your account across phones: we only keep the provider's anonymous identifier, never your e-mail or contacts.
Purchases: handled by Apple or Google; we receive the transaction to deliver it, never your payment details.
Notifications: a push token if you allow them.
Anonymous statistics (app usage, crashes), not linked to your identity, which you can turn off in Settings.

Faces and AI

Images are created by OpenAI's image service, which acts as our processor: it receives the photos and instructions needed for each creation, under contract, and does not use them to train its models. Photos are also checked by an automated safety filter. We don't do facial recognition: we never identify who is in a photo. Only use photos of people who agree. Friends' faces appear in your Cast only if they choose to share them with you.

Where and how long

Servers: Cloudflare (worldwide edge, files in Cloudflare R2), database Neon (USA). Statistics: Thiollywood on Google Cloud (EU).
Cast faces: until you delete them or your account. Photos for Studio edits: deleted after 7 days. Creations: deleted after 60 days (your phone keeps its own copy). Posts: until you delete them.
Deleting your account (Settings › Delete my account) erases your account, faces, creations, posts, friends and stars immediately. Purchase records are kept anonymously for accounting.

Sharing

We never sell your data and there are no ads. Data is only shared with the processors that run the service (Cloudflare, Neon, OpenAI, Apple / Google for purchases and notifications) and when required by law.

Children

Swapstar is not for children under 13. Photos of minors must not be posted publicly.

Your rights

You can access, correct, export or delete your data, and object to processing, by writing to felix@thiollywood.com with the Support ID shown in Settings. You may also complain to your data protection authority (in France, the CNIL).

Changes

We'll update this page if anything changes, and tell you in the app for important changes.