Effective date: September 1, 2026
Version: 1.0
Part of: the Muza Privacy Notice (appmuza.com/info/privacy) and the Terms of Service (appmuza.com/info/terms). This Notice also serves as our publicly available written policy on the retention and destruction of biometric-type data, as required by certain laws (including the Illinois Biometric Information Privacy Act, the Texas Capture or Use of Biometric Identifier Act and the Washington biometric privacy law).
Company details. In this document, "Company", "we", "us" and "our" refer to:
Legal name: ONCREATE LTD, a limited liability company organized under the laws of Ukraine
Registered address: 31V Serhiia Podolynskoho Street, Dnipro, 49069, Ukraine
Privacy requests: [email protected]
1. Why this Notice exists
Muza offers features that analyze or transform human faces and voices. Some laws treat information derived from a person's face or voice as "biometric identifiers" or "biometric information" and require a specific notice, written consent and a published retention schedule. This Notice explains, in one place, what we do with face and voice data, what we do not do, how long we keep it and how it is destroyed. It applies to every user, wherever you live, and it applies in addition to the Privacy Notice.
2. Features that use face or voice data
2.1 On your device only. Many editing tools detect faces and facial features (for example the position of eyes, lips and skin areas), hair and body outlines, and estimate visual attributes (for example an apparent age range or gender presentation) in order to apply retouching, makeup, hair color, background or body adjustments. This processing happens entirely on your device, produces no stored template, and no face data leaves your device unless you save the edited result. We consider that this transient, non-identifying processing does not create biometric identifiers; we describe it here for full transparency.
2.2 In the cloud, with your consent. The following features process face or voice data on our servers and through third-party AI Providers:
- AI Characters: you provide one or more face photos (and optionally full-body photos), attributes and a voice (selected from a library or recorded) to create a reusable digital character that resembles a person. The Service creates a personalized representation (for example an embedding or a small personalized model) so that new images, videos and speech can resemble that person.
- Face swap, lip sync, AI headshots, hairstyle change, portrait restoration and upscaling, "iconic locations" and similar scene features: your photo or video is transformed so that the person's appearance is preserved or adjusted.
- Voice generation and voice-based features: your recording is transcribed, cloned or used to generate speech.
For these features, the AI model estimates the location, shape and characteristics of facial features or the characteristics of a voice in order to produce a result that resembles the person. This information is used only to generate the result you requested.
3. What we do not do
- We do not use face or voice data to identify, verify or authenticate any person.
- We do not create or maintain a database of face or voice templates that could be used to recognize people across photos, accounts or services.
- We do not sell, lease, trade or otherwise profit from face or voice data, and we do not disclose it to anyone except the AI Providers and cloud infrastructure providers that process it on our behalf to deliver the feature you requested, or where required by law.
- We do not use face or voice data to train generative AI models that serve other users.
- We do not use face or voice data for advertising or for making decisions about you.
- We do not allow these features to be used with images or recordings of persons under 18.
4. Consent
4.1 Your consent. Before you use a cloud face or voice feature for the first time, the App shows a consent screen explaining what will be processed, by whom, for what purpose and for how long, and asks you to confirm by an affirmative action (which constitutes a written release by electronic signature where the law requires one). You may decline; the features will then be unavailable, while the rest of the App continues to work.
4.2 Other people. If you use these features with the face or voice of another person, you confirm that you have obtained that person's explicit, informed consent (in writing where required by applicable law) to the processing described in this Notice, and that the person is at least 18 years old. You are responsible for that consent, and we may ask you to demonstrate it. In some regions, or for some features, the App may ask the other person to confirm their consent directly (for example by a consent screen they complete themselves) before the feature can be used, and we may limit features involving other people's faces or voices where local law requires consent to be given directly to us.
4.3 Withdrawal. You can withdraw your consent at any time by deleting the relevant AI Characters or content, disabling the features in the App (Settings > Personal Data), deleting your account, or emailing [email protected]. Withdrawal does not affect processing that already took place, and results already generated remain in your account until you delete them.
5. Retention and destruction schedule
| Data | Retained until | Destruction |
| Face and voice data processed on your device (Section 2.1) | Not stored; exists only during the editing session | Discarded when the session ends |
| Inputs for one-off cloud features (face swap, lip sync, headshots, restoration, voice generation, etc.) | Completion of the request | Deleted from our cloud storage within 30 days after the request; deleted by AI Providers immediately or within their stated period (typically up to 30 days) |
| AI Character photos, attributes, voice and personalized representation | The character exists in your account | Deleted within 30 days after you delete the character or your account, and in any event no later than 3 years after your last interaction with the Service; for residents of Texas, no later than 1 year after the purpose of collection has been satisfied |
| Results (Outputs) that depict a face or voice | Until you delete them or your account | Deleted with your account within 30 days after deletion |
| Backup copies | Rolling backup cycle | Overwritten or deleted within 90 days |
| Consent records | Life of the account plus 3 years | Deleted after that period, unless needed for legal claims |
Destruction is carried out using industry-standard deletion methods for cloud storage, and AI Providers are contractually required to delete data in accordance with their published terms. Where a court order, subpoena or legal obligation requires us to keep specific data longer, we keep only what is required and destroy it when the obligation ends.
6. Security
Face and voice data is transmitted using encrypted connections and stored in encrypted cloud storage with access limited to the systems and personnel that need it to provide the feature. Our AI Providers are bound by contractual confidentiality and security obligations. We treat face and voice data with at least the same standard of care as other confidential information in our organization.
7. Contact
For questions about this Notice, to withdraw consent, or to request deletion of face or voice data, email [email protected]. If you are a person whose face or voice may have been used by another user without your consent, contact [email protected] and we will investigate and remove the relevant content where appropriate.