Privacy Policy | Bicep Heart

1. Who We Are

Bicep Heart operates bicep-heart.com. This policy explains how we handle information when you use the service. Contact support@bicep-heart.com with privacy questions or requests.

2. Information We Collect

• Account information: your email address, display name, authentication records and account preferences.
• Your content: the one photo you upload, your generation settings, task records and the resulting short vertical video with new music.
• Payment records: order, subscription, transaction and credit records needed to provide what you purchase. PayPal processes payments; Bicep Heart does not store payment-card numbers.
• Support information: messages and the task or order details you provide when asking for help.
• Technical information: request timestamps, IP addresses and other request metadata used for security and troubleshooting. Necessary cookies keep you signed in and remember preferences.

Only adults aged 18 or over may use the service. Upload only your own photo or a photo you have explicit permission to use for this purpose. Photos of minors, celebrities and other public figures are prohibited, including where someone offers permission on their behalf.

3. How We Use Your Photo and Other Information

Your photo is used only to fulfill the video-generation request you authorize, including the configured safety checks needed for that request. We send the required inputs to a third-party API provider to run Seedance 2.0 Mini, a ByteDance AI model. The service creates a new rendition of the single-arm gesture with new music; it does not use the original TikTok video's footage or audio in your generated video. Identify the output as AI-generated when sharing; do not rely on an automatic label in the player or downloaded file.

We do not use your photos to train our own models or sell your photos. Third-party processing is subject to the relevant provider's terms and privacy practices; this policy does not promise that their retention rules are identical to ours.

Other account, technical and transaction information is used to operate your account, deliver and let you download your videos, reconcile payments and credits, prevent abuse, investigate failures and answer support requests. Uploading a photo does not automatically publish it or your result in a public gallery.

4. Third Parties and Cookies

• AI API and model providers receive the inputs needed to generate your requested video. Configured safety providers process the inputs needed to check that request.
• Cloudflare provides infrastructure, including private Cloudflare R2 storage for uploaded photos and generated videos. Access to private media requires account authorization or a time-limited link.
• PayPal handles checkout and payment processing under its own terms and privacy policy. We keep payment references and entitlement records, not card numbers.
• Optional analytics: we may use Google Analytics 4 (GA4), pvuv analytics and site analytics to understand permitted page visits, referrals and interactions. Optional analytics may include generation settings and task or account identifiers, but do not include the uploaded media, passwords or payment-form contents. This policy does not claim that Google Analytics or pvuv is active.

Where the site's cookie settings require consent, optional analytics load only after you allow them. Elsewhere, configured analytics may load unless you decline them. You can change your choice using Cookie settings in the footer. Necessary account, payment, credit and security records are separate from optional analytics.

TikTok reference samples use TikTok's official embedded player. Playing or interacting with an embed involves TikTok and its own privacy practices; our analytics choice does not change TikTok's settings.

Information may also be disclosed where required by law or needed to protect users or people depicted in content. Providers may process information in other countries.

5. Storage, Retention and Deletion

Your uploaded photos and generated videos are stored in Cloudflare R2 so you can view and download them, until handled under an applicable deletion request or operational retention rule. Finishing a render does not immediately delete its upload. We do not promise a fixed automatic media-deletion period or backup-erasure schedule.

Browser photo drafts have a separate 24-hour expiry. Site browser analytics events have a 90-day retention setting. Neither period is the retention period for your R2 photos or videos, and neither is a promise about PayPal's or another provider's records.

To request deletion of photos, videos or your account, email support@bicep-heart.com or open a support ticket. Identify the account and relevant task or media. We verify account ownership and explain any transaction, credit or security records that need to remain for reconciliation, accounting, legal obligations or abuse prevention. Account deletion is not a promise that every related record or backup is immediately erased.

6. Your Choices and Rights

Depending on where you live, you may have rights to access, correct, export or request erasure of your personal information. Use the contact address above to make a request. You can also view and download completed videos through your account and change optional analytics choices in the footer.

If someone uploaded your photo without permission, or you believe a minor's photo has been uploaded, contact us. Copyright and likeness concerns can also be reported through our complaint process.

We restrict access to private media, but no storage or transmission system is perfectly secure. Keep your account credentials and private media links confidential.

7. Changes and Contact

The revision date above identifies this policy's update. Material changes will be announced in the product. For questions, contact support@bicep-heart.com.