Privacy Policy

Last updated: October 13, 2026

This policy explains what personal data Bad Times AI ("we", "us") collects when you use badtimesai.org, what we do with it, and the choices you have. The short version: we use your photo to make your video, we do not sell it, and we do not use it to train AI models.

The data we collect

Account data. Your email address, the name you give us, and, if you sign in with Google, your Google profile name and picture. If you use a password, we store only a secure hash of it.

Photos and videos. The photo you upload for each video, the finished video, and details of each render (template, status, time, credits used). Your photo may show your face and, by extension, information about how you look. We treat it as personal data.

Payment data. When you buy credits, Stripe collects your card and billing details. We receive only what we need to run your account: the purchase, the amount, the plan, and a Stripe customer reference. We never receive your full card number.

Usage and device data. Pages visited, the site that referred you (including campaign tags such as utm_source), browser type, approximate location derived from your IP address, and error logs. This helps us keep the site working and understand which pages people find useful.

Messages. What you send through the contact form, including your name and email.

How we use it

to create your Bad Times videos and show them to you under My videos;
to run your account, sign you in, and send verification and password-reset emails;
to process payments, add and refund credits, and prevent fraud;
to answer support requests;
to measure and improve the site, and fix errors;
to meet legal and tax obligations.

We do not sell your personal data, use your photos or videos for advertising, or use them to train our own or anyone else's AI models.

Who processes your data

We rely on a small number of service providers, each bound by their own terms and privacy commitments:

Provider	What they do
Cloudflare	Hosting, database and private file storage for photos and videos
kie.ai and/or Replicate	Running the video model (ByteDance Seedance) that renders your video from your photo
Stripe	Payments and subscriptions
Google	Sign-in with Google, if you choose it
Resend	Sending account emails
Analytics tools (when enabled)	Aggregated traffic statistics, such as Google Analytics or Plausible

Your photo is sent to the video provider through a private, unguessable link only for the time needed to render. Providers may keep inputs and outputs briefly under their own retention policies.

These providers may process data outside your country, including in the United States. Where required, transfers rely on standard contractual clauses or similar safeguards.

Legal bases (EEA and UK users)

We process your data to perform our contract with you (making videos, running your account, payments), on our legitimate interest in running a secure and useful service (analytics, fraud prevention, support), on your consent where we ask for it (for example non-essential cookies), and to comply with legal obligations.

How long we keep it

Photos and videos: until you delete your account. Deleting your account deletes all photos and videos from our storage.
Account data: for as long as your account exists.
Payment records: as long as tax and accounting law requires, typically up to 7 years.
Logs and analytics: in aggregated or short-lived form, usually no longer than 14 months.

Your rights

Depending on where you live, you can ask to access, correct, download or delete your personal data, object to or restrict certain processing, and withdraw consent. You can delete your account and everything in it yourself from Settings → Security. For anything else, write to us through the contact page. You can also complain to your local data protection authority.

California residents: we do not sell or share personal information for cross-context behavioural advertising.

Children

Bad Times AI is not intended for anyone under 18, and we do not knowingly collect data from children. Do not upload photos of minors unless you are their parent or legal guardian. If you believe a child has given us personal data, contact us and we will delete it.