Friday 14 June 2019

EDIT: I have reposted this old blog post due to the popularity gained by the gender-swap/old age feature in FaceApp! It applied to that as well, of course! ;)

Lately the Faceapp.com ‘personality test’ “How would AI color my hair” has gained popularity on social media, and people are frivolously jumping on the bandwagon and giving it a go, because it’s “just a bit of harmless fun”, right?
Or is it?
This particular “personality test” shows what you’d look like with a different hair colour. We have seen similar tests before, and the app itself is nothing new. Websites like Quizzstar and Namestest are using the same app on their pages. You’ll also find the same app available for mobile, both IOS and Android. A whopping 70 million people are using this app. That must be good, right?
It’s obvious that most people using this app have no idea of what they have entered into. It’s clear and known that many do not bother with reading the terms and conditions when doing one of these “tests” because it’s simply a bit of time wasting nonsense… but you really SHOULD.
Let’s check it out on a desktop computer first. You’ll have to log in using Facebook.

Faceapp on Facebook:
Just to make it clear, this is a Russian company. It is unknown if their servers are stored in Russia, but it’s a possibility. Are you ok with sending all your Facebook photos, name and profile picture to Russia?
You can check who owns and operates a domain name on the website www.whois.com. When entering wwww.faceapp.com, all traces are hidden.
Whoisguard is a site that helps companies hide their “whois” information, so this tells us that they are actively covering up who owns the website.


The FaceApp privacy policy you are accepting when you take part in this fun test is interesting. It states that they (FaceApp and their Mother Company) are able to share all your data with outside companies, and are under no obligation to inform you who their collaborators are and how they will use your info. They can use anything from pictures, email, contacts, log files, location data. You have already agreed to this by accepting the T&C.

Here’s a fun excerpt from their T&C’s:
(I have written it in small type because there's a 99% chance you won't read it, like when you accept T&Cs anywhere, but if you want to read it, here it is.)

You grant FaceApp a perpetual, irrevocable, nonexclusive, royalty-free, worldwide, fully-paid, transferable sub-licensable license to use, reproduce, modify, adapt, publish, translate, create derivative works from, distribute, publicly perform and display your User Content and any name, username or likeness provided in connection with your User Content in all media formats and channels now known or later developed, without compensation to you. When you post or otherwise share User Content on or through our Services, you understand that your User Content and any associated information (such as your [username], location or profile photo) will be visible to the public.
You grant FaceApp consent to use the User Content, regardless of whether it includes an individual’s name, likeness, voice or persona, sufficient to indicate the individual’s identity. By using the Services, you agree that the User Content may be used for commercial purposes. You further acknowledge that FaceApp’s use of the User Content for commercial purposes will not result in any injury to you or to any person you authorised to act on its behalf.
You acknowledge that some of the Services are supported by advertising revenue and may display advertisements and promotions, and you hereby agree that FaceApp may place such advertising and promotions on the Services or on, about, or in conjunction with your User Content. The manner, mode and extent of such advertising and promotions are subject to change without specific notice to you. You acknowledge that we may not always identify paid services, sponsored content, or commercial communications as such.

You represent and warrant that: (i) you own the User Content modified by you on or through the Services or otherwise have the right to grant the rights and licenses set forth in these Terms; (ii) you agree to pay for all royalties, fees, and any other monies owed by reason of User Content you stylise on or through the Services; and (iii) you have the legal right and capacity to enter into these Terms in your jurisdiction.

Furthermore you are granting FaceApp worldwide license to reproduce and distribute your information on your behalf. You are also made liable to pay for all and any royalties, any costs and charges regarding their use of your images.
They can use your images and photos in commercial circumstances and sell them on for this purpose, meaning your face and likeness can be used in advertising worldwide without your knowledge and/or approval.
Many online sites and news facilities have reacted negatively to this app and their T&C:
Gadgetstv
Ibtimes
Abcnews.au

FaceApp on Android: I would react strongly to allowing this app permission to read, change and delete images, media and files you have stored on your smartphone.
Many people today store their entire lives on their smartphones and on Facebook. This in itself should be a great worry to you.
But there is even more to be worried about with FaceApp on your iPhone or Android.
You’re also giving them permission to receive data from the internet, gain an overview of and full access to your home network and other networks.
This app can also take pictures and video from your phone.
I’d strongly recommend that you remove the app from both your phone and from Facebook. You can do this in Settings -> Apps. On your android, select Google Play select Uninstall in Faceapp.
After reading all this you might want to get FaceApp to delete your data. You can reach FaceApp on the following email addresses:
contact@faceapp.com
support@faceapp.com
support.android@faceapp.com
act@faceapp.com


So, what can we learn from this?
▪ Read the terms and conditions of what you’re agreeing to.
▪ Read personvernpolicy på hva du deltar på.
▪ In reference to GDPR, apps are obliged to tell you where your information is going and where it’s being stored.
▪ Pay attention to what the app can access to on Facebook.
▪ Pay attention to what the app can access on your phone.


A quick refresher on what FaceApp does:
▪ Collects mail, photos, profile photo and email address(es).
▪ Collects LAN network information from your phone.
▪ By accepting, you allow them to sell your info, images and details.
▪ FaceApp could delete all your images and personal data from your phone if they wanted to.
▪ FaceApp could use your phone camera to take pictures, video or audio, and use this as they wish.

The lesson to learn here: Be more critical on the internet and regarding what you allow on your phone or computer. Yes, there is a chance nothing will ever happen to you, your information, your contacts etc, but better to be safe than sorry.. Right? If all of this seems too complicated, ask someone to look at your phone settings for you, and fix it if needed.

I hope this is a wake-up call for many out there.























No comments:

Post a Comment