Privacy Policy

Last updated 6 September 2026

This policy is written for an AI image and video product. It reflects current privacy rules that commonly apply to generative media, including the UK GDPR, EU GDPR, and US state laws such as the CCPA and CPRA. It is a product policy, not legal advice. Have counsel review it before you launch in a new country.

1. Who we are

HeyBlinki ("we", "us") provides tools that turn text prompts into images and video. This policy explains what we collect, why we collect it, and the choices you have.

Questions: privacy@heyblinki.com.

2. What we collect

Depending on how you use HeyBlinki, we may process:

  • Account data, such as name, email, and password.
  • Prompts, settings, model choices, and other instructions you send to generate or edit media.
  • Generated images and video, plus any files you upload for reference or revision.
  • Usage data, such as feature use, device type, browser, IP address, and approximate location.
  • Support messages and safety reports.
  • Cookie and local storage values needed to run the site, such as banner dismissal.

3. Prompts and generated media are often personal data

Under the GDPR and UK GDPR, personal data is any information that relates to an identified or identifiable person. A prompt that names someone, an uploaded portrait, or an output that can be linked back to a real person can all be personal data. European regulators have also said that generative models trained on personal data are not automatically anonymous.

We treat prompts, uploads, and outputs as personal data when they can identify a person, even if the picture is synthetic.

4. Likeness and biometric-style data

If you upload a face or ask us to generate a portrait of a real person, the request may involve facial appearance or other identifiers. Some US state laws, including Illinois BIPA and similar biometric laws, treat certain face data as biometric information that needs a clear, standalone consent. GDPR treats some biometric data used to uniquely identify someone as special category data.

We use this kind of input only to run the generation you asked for, to keep the service safe, and to store the result in your account. We do not sell it. Do not upload another person's photo unless you have the right and, where the law requires it, their consent.

5. How we use data

  • Provide image and video generation, revision, and account features.
  • Operate, secure, and debug the product.
  • Moderate prompts and outputs for illegal or prohibited content.
  • Respond to support and legal requests.
  • Send service messages. Marketing email only if you opt in.
  • Meet legal duties, including child-safety reporting where required.

6. Training

We do not use your prompts, uploads, or generated media to train our own foundation models unless you give a separate, optional opt-in. Third-party model providers we call to generate media may process inputs under their own terms. We choose providers that allow us to restrict training on customer content where that control exists.

7. Legal bases

Where GDPR or UK GDPR applies, we rely on:

  • Contract, to create your account and generate the media you request.
  • Legitimate interests, to keep the service secure, prevent abuse, and understand product use in a limited way.
  • Consent, where the law requires it, including some marketing and some processing of facial or special category data.
  • Legal obligation, when we must retain or disclose information.

Where US state privacy laws apply, we process personal information to provide the service, for security, and as described in this policy. We do not sell personal information and we do not share it for cross-context behavioral advertising.

8. Who we share data with

We share data only as needed to run HeyBlinki:

  • Infrastructure and hosting providers.
  • AI model and media-processing providers that generate or store outputs for your request.
  • Payment processors if you buy a paid plan.
  • Authorities when the law requires it, including reports of child sexual abuse material.

We do not sell your prompts or generated media.

9. How long we keep data

Account data stays until you delete the account or it becomes inactive. Prompts and generated files stay in your workspace until you delete them, or until we remove them for safety or legal reasons. Security logs are kept only as long as needed to investigate abuse. Biometric-style face uploads, if used, are kept only for the generation job and any copy you save, then deleted from working storage.

10. Your rights

If you are in the UK or EEA, you can ask to access, correct, delete, or export your data, object to some processing, and restrict some processing. You can also complain to the ICO or your local supervisory authority.

If you are in California or another US state with a similar law, you can ask to know, delete, or correct personal information, and to opt out of sale or sharing. We do not sell or share personal information as those laws define those terms. We will not discriminate against you for using these rights.

Email privacy@heyblinki.com to make a request. We may need to verify it.

11. Children

HeyBlinki is not for children under 18. We do not knowingly collect data from children. Generating sexual or exploitative imagery of anyone 17 or under, including fictional or AI-generated depictions, is banned. See our Terms.

12. International transfers

We may process data in the UK, EEA, United States, or other countries where our providers operate. When we transfer personal data out of the UK or EEA, we use an approved mechanism such as the UK International Data Transfer Addendum or EU standard contractual clauses, plus extra checks where needed.

13. Cookies

We use essential cookies and local storage to keep you signed in and to remember simple preferences, such as closing the site banner. We do not use advertising cookies.

14. Security

We use reasonable technical and organizational measures to protect accounts and media. No internet service is perfectly secure. Do not put secrets, government ID scans, or other high-risk files into prompts or uploads unless the product later offers a dedicated private mode for that use.

15. Changes

We will update this page when the product or the law changes. The date at the top is the latest version. Material changes will be posted here, and we may also email you if you have an account.