Privacy Policy — Bicep Heart AI

Last updated: November 6, 2026

1. Operator and scope

Bicep Heart AI at bicepsheartai.com is operated by an individual seller, who is the controller of the personal information described in this policy. To ask a privacy question or exercise your data-protection rights, such as access, correction, export or deletion, email support@bicepsheartai.com.

This policy covers visits, accounts, available product features, purchases and support. Bicep Heart AI is designed to animate a consenting adult's photo into a short bicep-heart pose video. Public video generation is not currently open; the disabled upload control does not send your selected photo for generation. The current notification form displays a local confirmation but does not submit that email to a server or subscribe you to a mailing list.

2. Information processed and purposes

• Visits and technical operation: our hosting infrastructure receives information needed to deliver and secure the site, such as IP address, request details, browser information and service errors. This supports site delivery, security, abuse prevention and troubleshooting.
• Accounts: when you register or sign in, we process the email address, account identifiers and authentication information needed to manage your account. If a third-party sign-in option is available and you choose it, we receive the account information shared by that provider for authentication.
• Orders and credits: when checkout is enabled, we receive the order reference, payment status, purchased entitlement and related information needed to manage credits, refunds and support. Waffo processes payment details through its hosted checkout. We do not store full payment-card numbers. Do not put payment-card information in prompts or support messages.
• Support and reports: we process information you send, such as your email, message, order or task reference and relevant evidence, to answer questions, investigate problems, handle likeness or safety reports and comply with applicable obligations.
• Enabled generation requests: accepting uploads will require processing photos, prompts, task information, generated videos and safety-check results to screen the request, perform generation, deliver results and resolve problems. A photo can identify the person depicted. Do not upload minors, public figures, sensitive records or a photo without the rights and adult consent required by our Acceptable Use Policy.

3. Automated review and service providers

For enabled generation requests, we use automated review and filtering of submitted uploads and prompts. Text prompts are sent to Waffo Prompt Screening before a generation-model request. A text safety check is not an image check and does not verify a person's age, identity, permission or ownership. Automated checks may affect whether a request proceeds. You can report an error or request review at support@bicepsheartai.com.

We use Cloudflare infrastructure to host and deliver the website and support database, file-storage and service-email functions. Account, order and service records use the configured database and storage services; no fixed geographic storage location or automatic deletion interval is promised here.

Waffo acts as merchant of record for purchases through its checkout and processes transaction data under its own Buyer Terms and Privacy Policy. Its payment and compliance processing is separate from operation of the photo-to-video service. Prompt screening involves the submitted text, rather than your full card details.

No public generation-model provider is currently active. Before accepting generation uploads, we will update this policy to identify the AI and image-review providers used and the information sent to them.

We may disclose information where reasonably necessary to comply with law, protect rights or safety, investigate abuse or resolve a payment dispute. Sharing for these purposes is limited to the information relevant to the issue. Third-party websites linked from the site have their own policies.

4. Cookies, local storage and analytics

Necessary cookies and similar storage support sign-in, security and saved preferences when those features are used. Optional analytics is not currently enabled: Google Analytics, Microsoft Clarity and PVUV are not currently used to measure visits on this site. We do not claim to run recordings, advertising tracking or third-party visit analytics that are not active.

The current site contains controls for optional-cookie choices. Where used, a choice is stored in a cookie named cookie_consent and localStorage named ga_consent. These preferences are distinct from necessary authentication and security storage. We will update this policy and the relevant choice controls before enabling optional analytics. Browser controls can also clear cookies and local storage; doing so may remove a saved choice or sign you out.

The example trend videos are currently served from this site's media URLs, not embedded social-platform players. Playing them sends the requests needed to deliver media to the hosting infrastructure. Following a source link takes you to a third-party platform governed by its own policies.

5. Storage, retention and deletion

We retain account and service information for as long as reasonably necessary to provide the available features, maintain account and credit records, handle support and safety issues and comply with legal obligations. Payment, security and dispute records may need to be kept after account closure. Backup copies may remain for their provider's retention cycle.

We do not promise automatic deletion of all records or media after a fixed number of days, permanent file storage, or immediate erasure of every backup. Before uploads open, the relevant media-storage and provider-retention information will be disclosed. Do not rely on the service as your only archive.

To request access, correction, export, deletion or account closure, email support@bicepsheartai.com, preferably from your account email. We may need enough information to verify ownership without collecting unnecessary additional data. We explain applicable retention exceptions and respond within the period required by the law that applies to your request. Do not email passwords, card details or prohibited photographs.

6. Legal bases and international processing

Where applicable data-protection law requires a legal basis, we process information as necessary to provide the requested service and manage a purchase, comply with legal obligations, or pursue legitimate interests in security, fraud prevention, troubleshooting and handling support and safety reports, subject to applicable rights. Where consent is required, we rely on that consent; it may be withdrawn without affecting the lawfulness of earlier processing. Processing needed to deliver a request is not made optional merely by rejecting analytics.

Our operator and service providers may access or process information outside your country, where data-protection rules may differ. This policy does not promise that all data remains in your country or in a particular region. Before enabling a provider or transfer that requires additional safeguards or notices, we must put the applicable arrangements in place. You can contact support@bicepsheartai.com about the recipients and safeguards relevant to your information. We do not claim an unverified certification, adequacy decision or signed transfer agreement.

7. Your rights and children

Depending on your location, you may have rights to access, correct, delete or receive a copy of your personal information, restrict or object to processing, withdraw consent where used, and complain to your local data-protection authority. These rights are subject to applicable conditions and exemptions. Contact support@bicepsheartai.com to exercise them.

Bicep Heart AI is not directed to and may not be used by anyone under 18. Photos depicting minors are not permitted, including an adult user's childhood photo. If you believe information about a child or an unauthorized photo has been submitted, contact support@bicepsheartai.com without attaching or resending the prohibited image.

8. Security and changes

No internet service can guarantee absolute security. Protect your account and do not send secrets or unnecessary sensitive information through uploads or support. We may update this policy when features, providers or applicable obligations change. The date above identifies this version; material changes will be communicated as required by law. For privacy questions, account closure and legal notices, email support@bicepsheartai.com.