The company is headquartered in Saint-Petersburg, Russia, but it's also incorporated in the United States in Delaware, as The Washington Post reported. FaceApp said, however, that user data is not transferred to Russia in statements to The Washington Post and TechCrunch.
The company's servers are mostly based in America, according to Forbes which said it viewed hosting records. Other areas of the world where FaceApp's servers are hosted include Ireland and Singapore. But FaceApp employees in Russia still likely have access to the data although it's not hosted there, as the report also notes.
FaceApp removes most photos from its servers after 48 hours, reports from Forbes, The Washington Post, and TechCrunch indicate.