Is it safe to upload your photo to an AI video tool? What to check
5 min read
Uploading a photo to an AI video tool is safe when you know four things first: how long the photo is kept, whether it can train models, which companies it is shared with, and how to delete it. The answers are in each tool's privacy policy, not on its sales page. Under the EU's GDPR, biometric data used to identify a person is a special category.
Duble AI is this site's product, and its part comes from our privacy policy. The other policies were read on their official sites on October 24, 2026, with the update date where the page gives one. This is not legal advice.
Four questions before you upload a face
- How long is the photo kept, and how do you delete it? Look for time limits and the way to request deletion.
- Can the photo train models? Look for "training", "improving the services" and whether there is an opt-out.
- Who is it shared with? Model providers, hosting, payments and advertising usually appear.
- Does the result become public? Some tools have a public feed or library. Check whether your video goes into it without your asking.
What each policy says
| Tool | Keeping and deleting | Model training | The face | Source |
|---|---|---|---|---|
| Duble AI | Deletion with 30 days to undo, then removal; uploads stay until you remove them | The list of uses does not include training models | Sent to the providers that run the models, for each generation | Policy |
| PixVerse | "No longer than necessary" | Aggregated, anonymized content can train models unless an opt-out is available | Facial data extracted temporarily and deleted when processing ends | Policy and info page |
| Hailuo | "As long as necessary" | We found no mention in the policy | Photos and facial data deleted when generation ends, in the apps | Policy, Dec 9, 2025 |
| Kling | "As long as necessary"; deleted on request unless the law requires keeping it | We found no explicit mention | Analyzes face points (eyes, nose, mouth) and contours in portrait features | Policy, Apr 21, 2026 |
| Viggle | "No longer than necessary"; assets kept 7 days on the free plan, permanently on paid plans | We found no mention | Extracts features and patterns from uploads to generate | Policy and pricing |
"We found no mention" means the policy we read does not address the point in those words. It does not mean the company trains or does not train. If it matters to you, ask support in writing.
Two clauses stand out. PixVerse says the license you grant over your content is free, worldwide, perpetual and sublicensable, for aggregated and anonymized use. Hailuo's subscription terms give the company a non-exclusive, worldwide license to use generated content to operate, improve and promote the service.
What Duble AI's policy says, in detail
What is kept. Your login email, what you create (your double's choices, the generated images and videos), the photos and videos you upload, and attempts that fail or are refused, in a private record. Card and Pix details stay with Stripe, never with Duble AI.
What it is used for. Making and delivering your videos, charging and returning credits, limiting abuse, measuring ads, investigating failures, and sending login codes and receipts. Training models is not on the list. Records are not published automatically in the trends library. Only for people who tick an extra option are prompts and private media references kept for up to 90 days for analysis.
Who it is shared with. The providers that run the image and video models receive the text and images of each generation, including the photos and videos you uploaded. Hosting and safety review (Cloudflare), payments (Stripe) and ad and usage measurement tools also appear. No photos or videos go to Meta, TikTok or Google. Duble AI does not sell your data.
How to delete. Archiving a double, video or photo keeps the files. Asking to delete opens 30 days in which you can undo it, then the files are removed for good. The file you uploaded stays in your uploads until you remove it. Deleting the account in Account suspends access and cancels the plan at once, and after 30 days removes doubles, videos, credits and history. Payment records stay with Stripe as long as the law requires, and technical analytics history can remain in archives until maintenance, without prompts or photos.
Your rights. Access, correction, portability and deletion, through the contact email in the policy.
If you would rather not upload your own face, you can create an invented influencer, described in your own words or built part by part, and no photo of yours goes in. See what an AI influencer is.
What the law says
In the EU and Portugal. The GDPR treats biometric data used to uniquely identify a person as a special category (Article 9) and gives a right to erasure (Article 17). In Portugal the supervisory authority is the CNPD.
In Brazil. The LGPD classes genetic or biometric data linked to a natural person as sensitive (Article 5, II), and Article 18 gives rights of access, correction, portability and deletion.
Elsewhere, rules vary by country and state, so check the law where you live. Someone else's photo is theirs: ask before uploading and before posting. On likeness rights, see is an AI influencer legal?, and on trusting Duble AI itself, is Duble AI legit?.
Quick checklist
- I read the privacy policy, not just the sales page.
- I know how long the photo is kept and how to request deletion.
- I know whether content can train models, and whether there is an opt-out.
- The photo is mine, or I have permission from the person in it.
- I know whether the result becomes public on the tool.
- I noted the date I read the policy, because policies change.
To create an AI influencer without uploading your face, start here.
Frequently asked questions
- Is it safe to upload my photo to an AI video tool?
- It depends on what the tool's privacy policy says and on whether you can delete it later. Before uploading, check four things: how long the photo is kept, whether it can train models, which companies it is shared with, and whether the result becomes public. Biometric data used to identify someone gets extra protection under GDPR.
- Do AI video tools use my photo to train models?
- Each one says something different. PixVerse's policy allows using content, aggregated and anonymized, to improve the service, including model training, unless an opt-out is available. The list of uses in Duble AI's policy does not include training models. Read each tool's data-use section.
- How do I delete my photos from Duble AI?
- Asking to delete a double, video or photo opens a 30-day window in which you can undo it. After that the files are removed for good. The file you uploaded stays in your uploads until you remove it. Deleting the account removes doubles, videos, credits and history after 30 days; payment records stay as the law requires.
- Does Duble AI publish my videos?
- Not automatically. The policy says usage and failure records are not published automatically in the trends library. Your video stays in your account, and you are the one who downloads and posts it. Photos and videos are not sent to Meta, TikTok or Google for ad measurement.
- Can I upload someone else's photo?
- Only with their permission. A photo is personal data of the person in it, and data protection laws such as GDPR give them rights of access and erasure. Publishing someone's likeness without consent can also break image or publicity rights, even if the tool lets you upload it.
