Bicep Heart AI logoBicep Heart AI

Privacy Policy | Bicep Heart AI

What Bicep Heart AI collects, why, who processes it and for how long: account details, uploaded photos, rendered clips and billing records, plus how to request access or deletion.
Nov 8, 2026

Last updated: 8 November 2026.

1. Overview

Bicep Heart AI ("we") runs bicepheart-ai.video, a service that turns a photo you upload into a short bicep heart video. This policy explains how we handle personal information while you use it, and it works together with our Terms of Service.

2. What Data Is Involved

The information we process depends on what you do on the Service. It can include:

  • Account information: your name, email address and sign-in identifiers
  • The photos you upload and the clips generated from them
  • Render settings such as resolution, sound option, clothing notes and job status
  • Payment references passed back by the checkout processor; we never receive full card numbers
  • Messages you send to support
  • Technical records such as IP address, browser type and approximate times of requests
  • Cookie and analytics events, explained in section 5

3. Why We Use It

We put that information to work so we can:

  • Set up your account and keep it secure
  • Produce, save and deliver the bicep heart clip you asked for
  • Process payments, add credits, and deal with refunds and chargebacks
  • Spot misuse, enforce the Terms and run safety screening
  • Answer support questions and lawful requests
  • Understand overall site usage and fix problems
  • Keep the tax, accounting and business records the law requires

Your photos are never sold.

4. Uploaded photos and the clips generated from them

A photo you upload is used to generate the MP4 you requested. To do that, it may pass through hosting, storage, safety-screening and AI video providers. We do not turn it into a facial-recognition template and we do not use it to work out who a person is.

Upload only pictures you own or have the right to use. Photos of celebrities or other public figures, anyone under 18, content designed to impersonate or deceive, and personal data you are not entitled to share are all off limits.

5. Cookies and Analytics

We may set cookies or use similar browser storage to keep you signed in, remember your choices and see which pages are visited. Your browser lets you manage or block cookies, though blocking some of them can interfere with sign-in or checkout.

While you prepare a render, the creator can save a draft in your browser so that your photos and settings are still there after you sign in, check out or refresh the same tab. Removing a photo updates the draft, and a successful generation clears it. A draft left inactive for two hours is thrown away the next time a draft is loaded. This browser draft is separate from the files you upload and the videos we produce, whose retention is covered below. You can wipe the site's browser storage at any time in your browser settings.

6. Who Receives Your Information

Service providers act on our instructions when they handle your information. They include:

  • Cloud hosting and file storage providers
  • The payment processor you see at checkout
  • AI video and content-safety vendors needed to render or screen a job
  • Email delivery services for account and support messages
  • Professional advisers, or public authorities when the law requires disclosure

None of these vendors is permitted to use your photo for its own advertising.

7. How Long We Keep Data

Information is kept only for as long as we reasonably need it to operate the Service, keep My Creations available, protect security, settle disputes, enforce our agreements and satisfy legal, tax, accounting or regulatory obligations.

  • Account details, photos and clips can stay while your account is open or while history remains enabled.
  • Uploaded photos and generated clips may sit in your history or in the storage used to deliver them.
  • Billing records are held for as long as tax, accounting, payment, fraud-prevention and dispute rules demand.
  • Security logs and support records are kept for a limited time linked to operational and legal need.

Once we have verified a deletion or closure request, qualifying personal data is erased or de-identified within 30 calendar days. Encrypted backups can persist for up to 90 additional days before the normal backup cycle overwrites them. Certain records may be held longer where needed for legal compliance, fraud prevention, chargebacks, disputes or the defence of legal claims.

8. Rights You Can Exercise

Where you live may give you some or all of these rights:

  • To know which categories of personal data we collect, our reasons for using them and who receives them
  • To access your personal data or obtain a copy of it
  • To have inaccurate or incomplete account details corrected
  • To have qualifying personal data erased and your account closed
  • To restrict, or object to, certain kinds of processing
  • To get certain data back in a portable format that machines can read
  • To withdraw consent you gave earlier
  • To opt out of marketing email while still getting receipts and security notices
  • To lodge a complaint with the privacy regulator in your country or region

Making a request

Write to support@bicepheart-ai.video from the email address linked to your account, with Privacy Request or Account Deletion Request as the subject. Name the right you are exercising, whether that is access, correction, export, restriction, objection, closure or deletion, and point us to the account or data in question.

To avoid releasing or deleting someone else's information, we may ask for reasonable proof that the account is yours. We confirm qualifying requests and complete them within 30 calendar days of receiving them. If the law allows extra time for a complex request, we will tell you why and give you a revised date. You can also edit several profile fields yourself from the Settings page.

Closing an account does not remove billing, security, fraud and dispute records that a law obliges us to keep, or that we need to defend the Service and its users.

9. Cross-Border Processing

We and our providers may handle your information in countries other than the one you live in. When the law calls for it, those transfers rely on safeguards such as contractual clauses, recognised adequacy decisions and access controls.

10. Security Measures

Our safeguards include encryption in transit, restricted staff access, protected credentials, activity logging and abuse screening where it suits the workflow. No online service can guarantee absolute security.

11. Minors

Only adults aged 18 or over may use the Service, and we do not knowingly collect personal information from children. If you think a minor's data has been submitted, contact support and we will act appropriately.

Our pages may point to third-party websites. Those sites follow their own privacy practices, which this policy does not cover.

13. Updates to This Policy

This policy may change when the Service or the law changes. We will post the revised version on this page with a new date and give notice where the law requires it.

14. Contact