Privacy Policy

Summary

• You don't need an account to use Bicep Heart.
• Your credits are linked to a random identifier stored in a cookie in your browser.
• Your email is collected only by our payment processor (Dodo Payments) at checkout. We use it for receipts and to restore your credits.
• Photos you upload are processed by our AI service providers only to make your video. We delete uploaded photos after 7 days and generated videos after 30 days.
• We do not sell your personal data.

Who we are

Bicep Heart ("we", "us") runs this website and the AI bicep heart video generator. If you have questions about this policy, contact us using the email on the contact page.

Information we collect

1. Wallet cookie. When you buy credits or generate a video, we set a cookie with a random identifier. It links your browser to your credit balance and your videos. It does not contain your name or email.
2. Checkout information. Payments are processed by Dodo Payments, which acts as merchant of record and handles sales tax. Dodo Payments collects your email address and payment details. We receive your email, the amount paid, and a transaction reference. We never see or store your full card number.
3. Photos you upload. The image you upload to create a video, and the video we generate from it.
4. Technical data. IP address, browser type, and basic request logs, used to run the service, prevent abuse, and fix errors.
5. Analytics. If enabled, privacy-friendly aggregate analytics about page visits.

How we use your information

• To generate your video and deliver it to you.
• To track your credit balance and process refunds.
• To send payment receipts and, if you ask, a link to restore your credits on another device.
• To prevent fraud, abuse and misuse of the service.
• To comply with legal obligations.

We do not use your photos to train AI models, and we do not sell or rent your data.

AI processing and third parties

To create videos, we send your uploaded photo to our AI service providers. They process it only to produce your video and may not use it for any other purpose. Other service providers we use:

• Dodo Payments — payments, receipts and sales tax (merchant of record).
• Cloud storage and hosting providers — to store uploaded photos and generated videos temporarily and to serve the website.
• Email provider — to send restore links when you request them.

Data retention

• Uploaded photos — deleted after 7 days.
• Generated videos — deleted after 30 days. Download the ones you want to keep.
• Purchase records (email, amount, date) — kept as long as required for tax and accounting.
• Server logs — up to 30 days.

Files kept by AI providers on their side are subject to their retention policies (typically about 14 days).

Cookies

We use a small number of cookies:

• Wallet cookie — strictly necessary to remember your credits and videos.
• Preference cookies — for example, cookie-consent choices.
• Analytics cookies — only if analytics are enabled and, where required, only with your consent.

If you clear your cookies, your browser loses access to your credits. You can restore them with the email you used at checkout.

Your rights

Depending on where you live (for example, under the GDPR or CCPA), you may have the right to access, correct, delete or export your personal data, and to object to certain processing. To make a request, email us from the address you used at checkout. We will reply within 30 days.

Children

Bicep Heart is not intended for children under 13 (or the minimum age in your country). Do not upload photos of minors unless you are their parent or legal guardian.

Security

We use HTTPS everywhere, limit access to stored files, and rely on established providers for payments and storage. No system is perfectly secure, but we work to protect your data.

Changes to this policy

We may update this policy. The date at the top shows the latest version. Significant changes will be highlighted on the website.