ZAO - a new Chinese app that lets users swap their faces with celebrities, sports stars or anyone else in a video clip - racked up millions of downloads on the weekend but swiftly drew fire over privacy issues.