Before Uploading Your Face to an AI Photo App

Use this checklist to decide whether a specific photo and account are appropriate for a specific image tool. The answer can differ by plan, settings and country.

Reviewed October 15, 2026 · Published by TrendPromptLab

Five checks before you upload

Retention: Find out how long the original photo and generated result are kept, including after you delete a chat or project.
Model improvement: Check whether your account has a control for using submitted content to improve models. Read what that control covers and whether it applies to images.
Sharing: Check whether the prompt, source photo or result is private by default, and whether a share link makes it visible to other people.
Deletion and access: Locate how to remove the image, conversation or project and how to request account-data deletion. A delete button may not explain backup or legal retention.
Rights and purpose: Confirm that you have permission to upload the photo and that the provider's terms allow the output use you intend, including commercial use if relevant.

Where to look and what to write down

Start with the provider's privacy notice, image-upload help page and the data controls in the exact account you plan to use. Then check the product's sharing settings and the terms for your plan. Record the page you checked, the date, and any setting you changed. If the terms are unclear, mark the answer “unclear” instead of assuming the most favorable interpretation.

Keep a decision record: note the provider and exact plan, the privacy setting you checked, the source page and date, the retention or deletion route, and whether you have permission for the image and intended use. Mark any unanswered item “unclear.” Do not upload yet if you cannot tell who can see the image, cannot find a deletion route, or cannot confirm that you have permission to use another person's likeness.

Lower the risk of the source photo

Use the least sensitive image that can do the job. Crop out identity documents, addresses, screens, bystanders and unrelated background details. Avoid uploading government IDs, confidential client material, private workplace images or a child's face to a general-purpose tool. Removing metadata may reduce location clues, but it does not replace permission or a review of the provider's terms.

A practical example

A creator wants a stylized portrait for a video thumbnail. Before uploading, they confirm the image is theirs to use, check the data controls for their account, confirm the conversation is not shared, and locate the delete option. They also check the output-use terms before using it in a paid campaign. If any step is unclear, they can use a non-identifying generated subject with the portrait prompt builder instead of uploading a real face.

Official starting points

These pages explain the providers' own controls and notices. They are starting points, not a substitute for checking your current plan and settings:

Provider policies and controls can change. Check the linked page and your account settings on the day you use the service.

Before sharing the result

Do not use a generated image to impersonate someone, create false evidence or imply an endorsement. If viewers could mistake an AI-generated scene for a real event, label it clearly. Ask permission before uploading another person's photo, even when the tool makes a harmless-looking style transfer.

Use this checklist with related tools

This checklist is general information, not legal advice. Privacy rights, provider terms and account controls vary by country, plan and product. TrendPromptLab is independent of the providers linked above.