PRIVATEEDIT: A Privacy-Preserving Pipeline for Face-Centric Generative Image Editing

TL;DR

PRIVATEEDIT introduces a privacy-preserving face editing pipeline that enables high-quality image modifications without exposing biometric data, ensuring user control and compatibility with existing generative models.

Contribution

It presents a novel on-device segmentation and masking approach that maintains privacy without retraining third-party models, promoting responsible AI use.

Findings

Supports high-quality face editing with privacy controls

Enforces privacy by default, no data transmission of biometric info

Compatible with various commercial generative APIs

Abstract

Recent advances in generative image editing have enabled transformative applications, from professional head shot generation to avatar stylization. However, these systems often require uploading high-fidelity facial images to third-party models, raising concerns around biometric privacy, data misuse, and user consent. We propose a privacy-preserving pipeline that supports high-quality editing while keeping users in control over their biometric data in face-centric use cases. Our approach separates identity-sensitive regions from editable image context using on-device segmentation and masking, enabling secure, user-controlled editing without modifying third-party generative models. Unlike traditional cloud-based tools, PRIVATEEDIT enforces privacy by default: biometric data is never exposed or transmitted. This design requires no access to or retraining of third-party models, making it compatible with a wide range of commercial APIs. By treating privacy as a core design constraint, our system supports responsible generative AI centered on user autonomy and trust. The pipeline includes a tunable masking mechanism that lets users control how much facial information is concealed, allowing them to balance privacy and output fidelity based on trust level or use case. We demonstrate its applicability in professional and creative workflows and provide a user interface for selective anonymization. By advocating privacy-by-design in generative AI, our work offers both technical feasibility and normative guidance for protecting digital identity. The source code is available at https://github.com/Dipeshtamboli/PrivateEdit-Privacy-Preserving-GenAI.