An AI app that turns you into a movie star has risked the privacy of millions