Privacy Policy

1. Scope

This policy covers the account, order, photo, video, and usage data described below. It does not cover third-party sites or services that we do not control. If you do not agree with this policy, do not use the service.

2. Data we collect

• Account data: your email address, display name, authentication provider (magic link or Google), and account identifiers.
• Order and credit data: the credit pack purchased, amount, currency, order status, payment provider order identifier, and credit ledger entries.
• Photo and video data: the photo you upload, the generated video, and related technical metadata such as file type and size.
• Usage and technical data: pages viewed, approximate location derived from your IP address, device and browser type, referring URL, and interactions with the site.
• Communications: the content of messages you send to support@mybicepheart.com.

3. How we use data

• Provide the service and generate your video.
• Process payments, grant credits, and keep financial records.
• Maintain account security and prevent abuse.
• Respond to support, copyright, and data requests.
• Understand aggregate usage and improve the site.
• Comply with legal obligations.

4. Retention

• Photos and generated videos are retained for up to 7 days, then deleted from active storage.
• Account, order, and credit records are kept while your account is active and for as long as needed for legal, tax, and accounting purposes.
• Analytics data is retained according to our Google Analytics settings and Google's policies.
• When you delete your account, we remove your profile, uploads, videos, and unused credits, except where retention is required by law.

5. Sharing and third parties

We do not sell your personal data. We share data with service providers only to run the service:

• Cloudflare provides hosting, storage, and database infrastructure.
• Waffo Pancake processes payments and sends receipts to the email on your account.
• fal.ai and Kling process the uploaded photo and generate the video.
• Google Analytics 4 measures aggregate site usage.
• We may disclose data if required by law, to protect safety, or to enforce our Terms and Acceptable Use Policy.

6. Analytics and cookies

We use Google Analytics 4, provided by Google LLC, to understand how the site is used. Google Analytics collects page views, approximate location derived from your IP address, device and browser information, referral source, and interaction events. We do not send your photo, video, account email, or order details to Google Analytics.

Google Analytics sets first-party cookies such as _ga and _ga_* to distinguish visitors and sessions. We also use strictly necessary cookies: a session cookie for sign-in, a locale cookie that remembers English or Chinese, and a referral cookie that credits an affiliate link. We do not use advertising cookies.

You can block or delete cookies in your browser settings. You can also install the Google Analytics Opt-out Browser Add-on from https://tools.google.com/dlpage/gaoptout. Blocking analytics cookies does not prevent you from using the service. To the extent local law requires consent for analytics cookies, your browser controls let you refuse them, and you can withdraw any consent by clearing cookies and blocking them.

7. Your rights and choices

• Request access to the personal data we hold about you.
• Request correction or deletion of your data.
• Object to or restrict certain processing.
• Delete your account and its data from the Account page, or follow the Delete my data page.
• Contact support@mybicepheart.com to exercise a right. We may ask you to verify your identity before acting. If you are in the EEA, the UK, or another region with data protection law, you also have the rights that law provides.

8. Security

We use reasonable technical and organizational measures to protect your data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Children

The service is not intended for anyone under 18, or under the age of majority in their country. We do not knowingly collect data from children. If you believe a child has used the service, contact support@mybicepheart.com and we will investigate.

10. International transfers

Our service providers may process data in countries other than yours. Where required, we rely on appropriate safeguards for those transfers.

11. Changes to this policy

We may update this policy. The Last updated date at the top shows when it changed. Continued use after an update means you accept the revised policy.

12. Contact

Privacy questions or requests: email support@mybicepheart.com.