Privacy policy

Last updated November 3, 2026

This policy explains what Bicep Heart AI collects when you use the site, why, who processes it and how long it is kept.

What we collect

Your account email (and name and avatar if you sign in with Google); the photos you upload and the videos made from them; your orders and credit balance (card details are handled by Stripe and never reach us); and basic technical data such as IP address, browser and pages visited, used for security, abuse limits and aggregate analytics.

Who processes it

Cloudflare hosts the site, database and files and sends sign-in emails. Stripe processes payments. Google handles Google sign-in if you choose it. Your photo is sent to our AI video provider (Yir and the model provider it routes to, such as Kuaishou Kling) only to make your video. We do not sell personal data or use your photos to train models.

How long we keep it

Uploaded photos are deleted automatically within 2 days. Finished videos stay in your account so you can download them again, until you ask us to delete them. Account, order and payment records are kept as long as your account exists and as required for tax and accounting.

Cookies

We use first-party cookies only to keep you signed in, protect forms and remember where a visit came from. Analytics, if enabled, are aggregate and do not track you across other sites.

Your choices

You can ask for a copy of your data, or for your account, videos and data to be deleted, by emailing us. The service is for people aged 18 and over; do not upload photos of anyone under 18.

Questions? Email support@bicepheart.net.