Bicep Heart is an online AI video service. A photo is previewed in your browser when selected, but it is uploaded to our servers and sent to our AI provider when you choose Create Bicep Heart video. It does not remain only on your device.
Information we collect
- Account information: your name, email address, profile image, and authentication identifiers when you sign in with Google.
- Generation content: the photo you upload, the generated composite and video, generation status, permission confirmation, and related request identifiers.
- Usage and device data: IP address, browser and device information, page and product events, error logs, and security or rate-limit data.
- Purchase data: credit balance, order identifiers, products, amounts, currency, payment status, refunds, and disputes. Payment card details are collected by Dodo Payments, not by Bicep Heart.
How we use information
We use this information to authenticate you, upload and generate requested videos, provide private playback and downloads, manage credits and payments, prevent abuse, diagnose failures, measure site performance, comply with law, and improve the service. We do not sell your photos or generated videos.
AI processing and service providers
Uploaded photos and intermediate media are sent to fal.ai to perform AI image and video generation. Cloudflare provides application, database, and private object-storage infrastructure. Google provides sign-in and, when configured, Google Analytics. Dodo Payments processes checkout and payments. These providers process data under their own terms and privacy commitments and may process it in countries other than yours.
Storage, access, and deletion
Source photos and completed videos are saved in private object storage so generation can finish and the signed-in account can retrieve the result. They are not public gallery items. Bicep Heart retains this private media until operational cleanup; we do not promise browser-only processing or a fixed automatic deletion period.
Delete photo and video performs a logical deletion: it marks the generation deleted, removes it from your account, and blocks further playback or download, but does not immediately erase the private source and output objects. Those objects remain inaccessible until operational cleanup. You may request permanent deletion of account, generation, or purchase-linked personal data by emailing privacy@heartbicep.com. We may retain transaction, fraud-prevention, security, and legal records when required, and provider or backup copies may take additional time to expire.
Analytics and cookies
We use essential cookies for sign-in and security. If Google Analytics is configured, it may set or read analytics identifiers and receive page and product-event data. Browser controls and applicable consent tools can limit non-essential cookies; blocking essential cookies may prevent sign-in.
Your choices and rights
You can choose not to upload a photo, replace a local selection before generation, delete a completed generation, sign out, or request access, correction, portability, objection, restriction, or deletion where local law provides those rights. Only upload images you own or have permission to use. Do not upload sensitive images or images of children.
Security and changes
We use access controls, authenticated media routes, private storage, request validation, and provider webhook verification. No online service can guarantee absolute security. We may update this policy as the product or law changes and will revise the date above.
Contact
For privacy questions or requests, email privacy@heartbicep.com.