The useful details
BicepHeart Privacy policy
How accounts, photos, videos and purchases are handled.
Last updated: 2026-11-05
Information we process
Google sign in provides your account identifier, name, email and profile picture. We store session and account records, video task status, purchased credits and order references. We also process technical request data and first party visit information to operate the service, prevent abuse and understand use. Essential cookies and browser storage support sign in, security, language and preferences.
Photos and generated videos
Video generation uses Genjutsu 1.0 (genjutsu-1.0) through NanoAPI. NanoAPI identifies its underlying model as Seedance 2.5, fine-tuned for motion transfer. This description is attributed to the provider; our direct service integration is NanoAPI.
Your uploaded photo is used to create the video you request and to run content safety checks. We use NanoAPI Genjutsu 1.0 for new video generations and APIMart for input-photo safety checks and legacy task lookups. These providers and their upstream services receive the inputs needed for that processing; their own retention and processing policies apply. NanoAPI currently serves result files through unexpiring, unlisted links and does not offer result deletion. We keep those links server-side and deliver completed copies through authenticated access to our private storage. Deleting a file here does not delete a provider copy, and we do not promise immediate deletion from upstream systems.
Our storage is private. Temporary signed links let the processing provider retrieve the input. Result downloads require your account. We do not publish your uploaded photo or result to the public gallery. Public examples are separate authorized reference material or a deliberately approved sample, not private customer files.
Retention and deletion
Uploaded files are retained for up to 7 days and results for up to 60 days. Scheduled cleanup removes expired objects. You can delete files for completed or failed tasks earlier from My videos. Processing tasks must reach a terminal state before that control is available. Third party processing copies follow their own rules.
Account, order and necessary operational records may remain to provide purchased entitlements, resolve disputes, prevent fraud and meet applicable record keeping obligations. Removing a media file does not erase an order or a legally required record.
Service providers and payments
Cloudflare hosts the website, database and private storage. Google provides sign in. Waffo scans our fixed generation prompt through Prompt Sift and processes checkout and payment details; we store order and transaction references, not full payment card details. Support email is forwarded to the operator's Google and QQ inboxes. Providers may process data in countries other than yours.
We do not sell your photos or use them to train our own model. Third party links and provider services have their own privacy terms. Optional advertising integrations are not required to use this tool.
Your choices
Only upload your own photo or that of an adult who agreed. Contact support@bicepheart.xyz for access, correction, account deletion or other privacy requests; we verify ownership and respond within two business days. Some requests are subject to applicable law and necessary record retention. Material policy changes will be reflected by the date on this page.