Privacy Policy

1. Introduction

BicepHeartAI ("we", "us", or "our", accessible at https://bicepheartai.pro) respects your privacy and is dedicated to safeguarding your personal data and creative assets. This Privacy Policy details how we handle your information when you browse our website, upload photos, purchase video generation packs, and download your generated videos.

By accessing or using BicepHeartAI, you acknowledge that you have read and understood the practices described herein.

2. Information We Collect

1. Account Credentials — When you sign in with an email link or third-party OAuth provider (such as Google), we collect your email address, display name, profile avatar, and account identifier.
2. Local Photo Caching (IndexedDB) — When you select a photo in your browser, the image file Blob is cached client-side in your browser's native IndexedDB storage (bicep_heart_draft_db). This allows you to complete sign-in without losing your selected photo. This draft data stays on your local device until you confirm submission or clear your draft.
3. Uploaded Photos for Video Processing — When you confirm a video generation request, your selected photo is securely uploaded over HTTPS/TLS to our cloud processing infrastructure strictly for generating your video.
4. Generated Video Deliverables — We store your completed 7-second 9:16 MP4 video outputs so you can view and download them in the "My videos" dashboard.
5. Billing Records — Payments are processed by certified third-party billing providers (e.g., Creem or Stripe). We receive transaction confirmations and video package balances; we never store your payment card numbers.
6. Privacy-Preserving Analytics — We only activate Google Analytics 4 telemetry if you have accepted analytics cookies (cookie_consent=accepted). When enabled, we collect strictly allowlisted event indicators. We sanitize all URLs to remove query strings, fragments, and sensitive account identifiers.

3. How We Use Your Data

We process your data strictly for legitimate operational purposes:

• Generating AI Videos — To process your uploaded photo with Seedance 2.0 Mini (ByteDance) and render your 7-second bicep curl heart MP4 video.
• Credit Balance Accounting — To credit your account upon pack purchase, deduct 1 credit per generation task, and automatically restore credits if a system failure occurs.
• Account Dashboard Access — To present your completed videos in your private "My videos" gallery.
• Content Moderation & Security — To enforce our Acceptable Use Policy, prevent unauthorized multi-accounting, and protect the platform against fraud and abuse.
• No Foundation Model Training — We do not use your private uploaded personal photos or generated videos to train publicly accessible foundation models without your explicit consent.

4. Third-Party Service Providers

We engage trusted infrastructure and cloud compute partners to deliver our services:

• Cloud Compute & Video Rendering — Encrypted cloud nodes execute generation jobs with Seedance 2.0 Mini (ByteDance) and are bound by strict data processing and confidentiality terms.
• Payment Processors — Secure PCI-compliant gateways manage transaction checkout.
• Storage & Content Delivery — Encrypted cloud object storage delivers fast video downloads.
• We do not sell, rent, or trade your personal data or uploaded media to third-party data brokers or advertisers.

5. Data Retention & Deletion

• Account Data — Retained while your account remains active. You can request account deletion at any time.
• Uploaded Photos & Videos — Maintained in your account gallery so you can access your videos. We encourage downloading your completed MP4 files to your local storage for permanent archival.
• Local Browser Drafts — Stored in your browser's IndexedDB and cleared automatically upon successful generation or when you click remove in the uploader.

6. Security Measures

We implement comprehensive technical and organizational safeguards:

• Strict HTTPS/TLS encryption for all data in transit.
• Encrypted cloud storage for media deliverables.
• Strict role-based access control (RBAC) ensuring only you can access your generated videos in "My videos".

7. Your Privacy Rights (GDPR / CCPA)

Depending on your location, you have statutory rights regarding your personal information:

• Right to Access & Export — Download your generated videos and view your transaction history at any time.
• Right to Erasure — Request deletion of your personal account, uploaded photos, and task records.
• Right to Restrict or Withdraw Consent — Withdraw cookie consent at any time via your browser settings or our cookie preference controls.

To exercise your rights, please submit a request through our support ticket system.

8. Updates to This Policy

We may update this Privacy Policy from time to time to reflect operational or regulatory adjustments. Changes will be posted here with an updated revision date.

9. Contact Us

If you have questions or privacy inquiries, please open a support ticket at /settings/tickets or contact our team via the Help Center.