Privacy Policy

Effective 16 October 2026

Memecast AI is an iPhone app, with an App Clip, that puts your face into meme video clips. It is run by Malik Ghani (“we”, “us”). This policy says what the app and this website collect, why, who else handles it, how long it is kept, and what you can do about it.

1. What we collect and why

Your account

You sign in with Apple or Google to make memes. We receive an identifier for your account from that company, your email address (with Sign in with Apple this can be a private relay address if you choose Hide My Email), and your name if you share it. We use them to sign you in and to keep your memes with your account on any iPhone you sign in on.

An install id

The first time the app or the App Clip runs, our server creates a random id for that installation, kept in your phone’s Keychain. It authenticates the app’s requests, counts your daily allowance of memes, and links a Pro subscription. We record when it was created and when it was last used.

Your region

The app sends your iPhone’s region setting, a two-letter country code, with its requests so it can show scenes made for your country. We store the latest one with the install id. This is the setting in iOS, not your location: the app does not use GPS or location services.

Your face photo

When you make a meme, the photo you take or pick is checked on your phone first, using Apple’s on-device face detection, to make sure it shows one clear face. That check sends nothing anywhere. Picking a photo uses Apple’s photo picker, which gives the app only the photo you pick. After you agree on the photo screen, the photo is uploaded to our private storage and sent to Higgsfield to generate your video.

Faces you save for next time (up to 30) stay on your phone. They are excluded from iCloud backup and removed when you sign out.

Your voice

If you keep a scene’s original audio, nothing is sent to ElevenLabs. If you pick a character voice, the audio of the part of the scene you chose is sent to ElevenLabs to change the voice. If you record your own voice (3 to 15 seconds), you agree on a separate screen first; the recording is uploaded to our private storage and sent with the scene’s audio to ElevenLabs, which makes a temporary copy of your voice for that one meme. We ask ElevenLabs to delete that copy as soon as the meme is done.

Your memes

For each meme we keep a record: the scene, the part of it you trimmed, the voice option, when it was made, and how it went, along with the technical details needed to run it: the install and account it belongs to, where its photo and any voice recording were stored, the face-swap company’s job reference, and what it cost us. The finished video and a still frame from it are stored in our private storage so your gallery can show them. Memes are private to your account: nothing is published, and a meme leaves your gallery only when you share or export it yourself.

Purchases

Apple handles payment for Pro; we never see your card or bank details. RevenueCat receives your App Store purchase and subscription records, linked to the install id, and tells our server whether you have Pro.

Notifications

If you allow notifications, iOS gives the app a push token, which we store with the install id to tell you when a meme is ready. While a meme is being made, a separate token updates its Live Activity, and that one is deleted when the meme finishes. Marketing notifications are off unless you turn them on in Account; turning the switch off again stops them. Alerts about your own memes and the Live Activity are separate from that switch.

Crash reports and analytics

The app uses Firebase Crashlytics and Google Analytics for Firebase, both from Google, to find bugs and see which parts of the app are used.

• Crash reports contain the stack trace, device model, iOS version, app version and a Crashlytics installation id.
• Usage events record the screens you view and the actions you take in the app, such as choosing a scene or starting a meme, with Firebase’s app instance id. Firebase also records some events by itself, such as the first time the app opens and each session, along with the device model, iOS version, app version, language and approximate country.

Your face photos, voice recordings and meme videos are never sent to Firebase. Crash reports and usage events are on by default, and one switch turns both off: Account › Privacy › Share analytics and crash reports.

Permissions

iOS asks for each permission only when it is first needed: the camera to take a face photo, the microphone to record your voice, notifications to tell you when a meme is ready, and permission to add to your photo library when you save a meme there. You can change any of them in the iOS Settings app.

Server logs

Our server keeps technical logs, such as IP address, time, the address requested and the app version, to run the service, fix problems and protect it from abuse. Web server access logs are deleted after 14 days and application logs after 7 days.

2. What we don’t do

• We don’t sell your data or share it for advertising.
• We don’t collect the advertising identifier (IDFA), the app never shows Apple’s tracking prompt, and nothing is used to track you across other companies’ apps or websites.
• We don’t use your face, your voice or your memes to train AI models.
• We don’t use your photo to identify or recognise you.

3. Who else handles it

We share data only with the companies below, each for the purpose given, and when the law requires it. They handle it under their own terms and may be in a different country from you.

Higgsfield

Your face photo and the few seconds of the scene you chose, to generate your video. Sent only after you agree on the photo screen.

ElevenLabs

The audio of the part of the scene you chose, when you pick a character voice or your own; your voice recording, when you record one. Used to change the voice. Your recording is sent only after you agree on the voice screen.

Backblaze

Stores uploaded face photos, voice recordings, finished memes and their still frames, in a private bucket encrypted at rest and reached only through links that expire.

Hostinger

Provides the virtual private server that runs our API, our database and this website. The database holds your account, the install id, your meme records and push tokens.

Apple

Sign in with Apple, push notifications and Live Activities, and App Store payments.

Google

Google Sign-In, if you choose it. Firebase Crashlytics and Google Analytics for Firebase, unless you turn them off.

RevenueCat

Your App Store purchase and subscription records, to know whether you have Pro and to restore a purchase.

4. How long we keep it

• Face photos in our storage are hidden after 1 day and permanently deleted automatically within 3 days of upload. Faces saved in the app stay on your phone until you remove them, sign out, or delete the app.
• Finished memes (the video and its still) are deleted from our storage automatically after 30 days, or sooner when you delete the meme or your account. To keep one longer, save or share it from the app.
• Meme records. When a meme is deleted we keep a minimal record of it without the video (when it was made, the scene and the settings used), so that deleting a meme cannot reset the daily allowance.
• Voice recordings are kept in our private storage, and today nothing deletes them automatically, including deleting your account. Email us and we will delete yours. We ask ElevenLabs to delete the temporary copy of your voice as soon as the meme is done.
• Your account is kept until you delete it. Deleting it removes your account record (the sign-in identifier, email and name) and your memes.
• The install record (install id, region, subscription status and push token) has no automatic deletion date. Email us to have it removed.
• Work not linked to an account is deleted after 14 days without any activity from the iPhone that made it.
• Crash reports are kept by Firebase for 90 days, and analytics data for at most 14 months.

5. Your choices and rights

• Withdraw consent for your photo or your voice: Account › Privacy, then switch off Photo sharing or Voice sharing. Nothing new is sent after that, and the app asks again the next time you make a meme or record.
• Delete a meme: press and hold it in your gallery and choose Delete, or use the trash button while watching it.
• Remove a saved face: press and hold it in the Faces tab.
• Delete your account: Account › Delete account. Your memes are deleted with it. This does not cancel a Pro subscription; cancel that in the iOS Settings app.
• Turn off analytics and crash reports: Account › Privacy › Share analytics and crash reports.
• Marketing notifications stay off unless you turn them on in Account, and you can turn them off there any time.
• Permissions for the camera, microphone, notifications and saving to Photos are in the iOS Settings app.

To ask for a copy of your data, to correct it, to delete something the app can’t delete for you (such as a voice recording), or with any other privacy question, email hi@malikghani.com. Depending on where you live, you may have further rights over your data, and you can also complain to your local data protection authority.

6. Children

Memecast AI is rated 12+ on the App Store and is not directed at children under 13. We don’t knowingly collect data from a child under 13. If you think a child has used the app, email hi@malikghani.com and we will delete their data.

7. Security

Everything travels over encrypted connections. Uploads and memes are kept in private storage that is encrypted at rest and reached only through links that expire, and our server stores only a hash of each install’s access token, never the token itself. No system is perfectly secure.

8. This website

memecast.app sets no cookies, runs no scripts and loads nothing from other companies. Like any web server, ours keeps standard access logs (IP address, time, the page requested and your browser’s user agent) to run and secure the site.

9. Changes and contact

If this policy changes, the new version will be posted on this page with a new effective date. Questions go to Malik Ghani at hi@malikghani.com.