HandCam
Privacy policy
Last updated 9 November 2026
- Your sets and takes stay in your own browser unless you choose to make an AI video from one.
- We keep your account (email, name, plan, videos left) so you can sign in and use what you paid for.
- We never sell your data and never show you ads.
- A few services help us run HandCam; each only gets what it needs (listed below).
Who we are
HandCam (handcam.onrender.com) is operated by Ayush Dhanraj Bhiogade, an individual based in India ("we", "us"). Contact: ayucorp1304@gmail.com.
What we collect and why
| What | Why |
|---|---|
| Account: email address, and your name if you sign in with Google | To sign you in and keep your plan, videos and purchases with you. |
| Plan and usage: your plan, videos used and left, top-ups, a history of video charges and refunds, and the AI videos you made | To provide the service, apply your plan and settle what you were charged. |
| Payments: what you bought and when, its payment id and status | To give you what you paid for. We never see or store your card number: Dodo Payments handles that. |
| Your own AI key (only if you add one) | To make AI videos on your own Higgsfield account. Stored encrypted; we show back only its last 4 characters. |
| Set descriptions you type | Sent to Anthropic (Claude) to build the grey 3D set. Not used for anything else. |
| Make video inputs: the grey reference video of your camera move, its first frame, your take's motion data and the look you describe | Only when you press Make video: sent to Higgsfield to generate the video, and kept on our server with the result so you can see, check and download it. |
| Technical data: IP address and basic request logs | To keep the service secure and working (for example, limiting how many accounts or sets one address makes per hour). Logs are kept for a short time by our host. |
What stays on your device: your sets, takes, sequences and exports are saved in your browser (IndexedDB) and are not uploaded unless you make an AI video from them. The phone's motion sensors are only used to move the virtual camera; the iPhone AR app uses the camera only to track movement, and the image is never shown, saved or sent.
Who helps us run HandCam
| Service | What it does for us | What it receives |
|---|---|---|
| Render (USA) | Hosts the website and server | Requests, logs, Make video files |
| Supabase (USA) | Sign-in and the accounts database | Email, name, account and plan data |
| "Continue with Google" sign-in (if you use it) | Your sign-in with Google, per Google's own policy | |
| Dodo Payments | Merchant of record: checkout, billing, tax, receipts | Your email, billing details and payment |
| Higgsfield (and the AI model it runs) | Generates AI videos | Make video inputs listed above |
| Anthropic | Builds sets from your description | The words you typed |
These services process data on our behalf, some outside your country. We don't share your data with anyone else, except if the law requires it.
Cookies and storage
One sign-in cookie (hc_session) keeps you signed in for up to 30 days. Supabase keeps your sign-in session in your browser's storage. We also remember small preferences (like the frame you shoot in) on your device. No advertising or tracking cookies.
How long we keep things
Your account and purchase history: while you have an account, and afterwards as long as tax and accounting rules require. AI videos and their inputs: while your account exists, or until you ask us to delete them. Takes in your browser: until you delete them or clear your browser's data.
Your choices and rights
You can ask us to show you, correct, export or delete your data, or to close your account, by emailing ayucorp1304@gmail.com. We'll answer within 30 days. Deleting your account doesn't cancel a plan on its own: cancel it first (Account → Cancel plan) so you aren't billed again. Payment records may need to be kept for tax law.
Children
HandCam isn't for children under 13 (or under 16 where the law requires). We don't knowingly collect their data.
Security
Data is sent over HTTPS. Passwords are handled by Supabase and never stored in plain text; your own AI key is encrypted. The accounts database only accepts our server's secret key. No system is perfectly secure; if something goes wrong that affects you, we'll tell you.
Changes
If we change this policy in a way that matters, we'll update the date above and tell signed-in users in the app.