Privacy Policy

Binge is an app for rating movies and shows and seeing what the people you follow think of them. This policy covers the Binge app for iPhone and the Binge website. It explains what we collect, who can see it, which services help us run Binge, and how to delete your data.

Binge is operated by Comercio Digital Moli, S.A.P.I. de C.V. (“Binge”, “we”, “us”), Presa Oviachic No. 24, Mexico City 11500, Mexico. You can reach us at pablocarmonaesparza@gmail.com.

How you sign in

In the iPhone app you sign in with Apple or with Google. The app has no Binge password, and we never see your Apple or Google password. On the website you can also continue with Google; it’s the same account as in the app, and we get the same information described below.

• Sign in with Apple — Apple gives us an identifier for your Apple Account and your email address. If you choose Hide My Email, we get a private relay address from Apple instead of your real one. The first time you sign in, Apple also gives us the name you choose to share.
• Sign in with Google — Google gives us your Google account identifier, your name, your email address and a link to your Google profile picture. We use your name and email. The picture link is kept with your sign-in record; Binge doesn’t show it.
• Email and password — the Binge website, and earlier test versions of the app, let you create an account with an email address and a password. We keep that email address, and we store your password only in hashed form, never in plain text. The current iPhone app doesn’t offer this way of signing in. When an account is created on the website this way, we email a link to confirm the address. The name and username typed (and the username of whoever invited you, if you came from an invite) are saved with your sign-in record — that’s how your profile is created when you open the link, on any device — and they stay there after that.

What we collect

• Your profile — your name, your username, the ID of your Binge account, and a profile photo. In the app, a photo is required to finish setting up your profile. While you set up your profile, you can take the photo with your iPhone’s camera or pick one from your photo library; later, you can change it with a photo from your library. The app opens the camera only when you tap Take photo, and iOS asks for your permission before the first time. It uses the camera only for still photos, never video or sound, and doesn’t save the photo you take to your photo library. Whichever way you add it, the app makes a smaller copy, without the details cameras store inside a photo (such as where it was taken); that copy is the only one we store, and Binge only sees the photo you take or pick. The website makes the same kind of copy. Before this version of this policy, the website stored the image file you uploaded as it was, including any details stored inside it, such as location; a photo uploaded that way stays as it is until you replace it.
• Your taste — the titles you rate during setup, your ratings (Should go, Might go or Don’t go), your top 5, and the titles you save.
• What you post — your posts and their short notes, your emoji reactions, and your lists.
• Titles you send — when you send a title to someone you follow, we store the title and its poster, your note if you add one (up to 60 characters), who sent it, who received it, when it was sent, and when they read it.
• Your connections — who you follow, who you block, and any reports you send. Who you follow and who you block are what Binge’s App Store privacy label lists as Contacts, because Apple counts the people you’re connected to in an app (your “social graph”) as contacts. Binge doesn’t read the contacts on your phone.
• Messages to us — if you email us, we keep the email and our reply.

Kept only on your phone. Some things never leave your device: the poster you choose for your profile background, the badges you’ve earned, the streaming services you pick, the list of your daily Picks, and your progress through setup. They don’t sync between devices, and deleting the app removes them. To show your Picks, the app looks up those titles through our server (see Technical data below), without your name or account.

Technical data. Movie and show information reaches the app and the website through our own server, hosted by Vercel. Those requests carry your IP address, a description of the app or browser and of your device’s system (the “user agent”), and what you ask for, such as a title you open or the words you type in a title search. Some of them also carry the region and language set on your device, so we can show what’s streaming in your country. The app also makes some of these requests on its own, to show you your ratings, lists, feed and daily Picks. Vercel logs these requests, including the words of a search, which travel in the request’s web address, and we use those logs to keep Binge running and to find and fix problems. Our server passes search words on to TMDB to find matching titles, without your IP address. Your name and account aren’t attached to these requests.

Requests to Supabase. When you’re signed in, the app and the website read and save your Binge data directly with Supabase. Those requests carry your account, your IP address and your user agent, along with what you ask for, such as the words you type when you search for people, which also travel in the request’s web address. Supabase logs these requests, and we use those logs to run and protect Binge and to find and fix problems. Its logs also record the approximate location (such as city, region and country) that its network estimates from your IP address. That helps spot abuse coming from one place; Binge doesn’t use it for anything else. Supabase also keeps the IP address and user agent of each signed-in session, to protect your account, for example by limiting repeated sign-in attempts; these session records are deleted with your account. How long request logs last is described under How long we keep your data.

What we don’t collect. We don’t ask for your location, and we don’t read your phone’s contacts or collect microphone, health or payment information, or your advertising identifier. Supabase’s request logs do record an approximate location estimated from your IP address (see Requests to Supabase above). A photo uploaded on the website before this version of this policy, though, can carry the place where it was taken, as described above. The app doesn’t include analytics or advertising code, or third-party crash-reporting tools. It uses Apple’s MetricKit to keep crash and performance diagnostics on your device; they aren’t sent to us. If you’ve turned on sharing with app developers in your iPhone’s settings, or you test Binge through TestFlight, Apple may pass us crash reports and the feedback you choose to send.

Optional product measurement

On the website you may separately allow measurement of account creation and the first title you save. No option is selected for you. Creating an account or agreeing to our Terms does not grant this permission, and declining does not restrict Binge. You can turn it off in the website's Settings → Product measurement. Once allowed on the website, the first save can happen in the website or the iPhone app under the same account.

With your permission, our Supabase server records an event identifier, event name and time, your account identifier and the version of your choice. Before delivery to our private Gravity workspace, a server-held key replaces your account identifier with a stable code unique to Binge. This is coded personal data, not anonymous data. Gravity receives the code, event identifier, name, time and permission state, along with the server-recorded profile creation time and an eligibility label for this measurement. It receives no name, email, password, title, review, list name or photograph in these events. Gravity is our marketing and measurement workspace hosted by OpenAI Sites and Cloudflare.

We use these events to understand whether people finish registration and start saving titles. This cohort covers new profiles that allow measurement before profile creation, and their first save within seven days. Internal, test and non-human accounts are excluded. Allowing measurement later does not replay your registration or first save. This version does not attach campaign or click identifiers, send events to ad platforms, or track activity across websites. Advertising permission is separate and is not requested or inferred from product-measurement permission. No analytics cookie is added to your browser.

For newly created profiles we keep a one-bit first-save marker, even without analytics permission, solely to prevent a later opt-in from replaying an earlier first save. It contains no title or save time and stays in Supabase until the profile is deleted. We stop delivering unsent events after 29 days; their records remain in Supabase until account deletion or a data-removal request. Turning measurement off suppresses queued events; it does not recall events already delivered or a request already in flight. Events already delivered remain in our private workspace until removed as part of a data request or retention review. Contact us at pablocarmonaesparza@gmail.com for access or deletion of those records. Deleting your account removes its local event queue and preferences; delivered Gravity records require separate removal.

Who can see your information

Binge is social. Anyone signed in to Binge can see:

• your name, username and profile photo;
• your ratings, your posts and their notes, and your top 5;
• who you follow and who follows you;
• the titles you rated during setup;
• any list you set to Public (and older lists marked Shared).

You don’t need to follow someone, or be followed by them, for them to see this. Your profile photo is also stored at a public web address: anyone who has that link can open the image, even without a Binge account, along with any details stored inside a photo uploaded from the website before this version of this policy.

When you share an invite from Binge, the link includes your username. When you share a title, the message includes the title’s link and, if you wrote one, your note. Anyone you send it to can open the link, even without a Binge account.

Only you can see your saved titles, lists set to Just you, the accounts you’ve blocked, and the reports you’ve sent. Your emoji reactions are visible to you and to the author of the post you reacted to.

A title you send, and its note, can be seen only by the person you sent it to. Once it’s sent, the app doesn’t show it to you again and can’t take it back. The person who got it can remove it from their notifications. If they report it, a copy of it is saved with the report: the title, your note, when you sent it, and your account ID, name and username.

Blocking someone removes any follow between the two of you, deletes the titles you’ve sent each other, and hides their posts and profile from you. While the block is on, neither of you can follow the other. Binge doesn’t tell them. Otherwise, blocking works only on your side: the person you block can still see what every Binge member can see. You can undo a block in Settings → Blocked accounts.

How we use it

• To run Binge: your profile, feed, lists, follows and recommendations.
• To recommend titles. The setup quiz runs on your phone. To find titles related to the ones you picked, the app sends those titles, and nothing that identifies you, to our server, which looks them up on TMDB.
• To keep Binge safe: filtering some objectionable words, reviewing reports, and limiting how many setup-quiz requests can come from one IP address.
• To keep Binge running and protect your account: the request logs and sign-in session records described under Technical data and Requests to Supabase help us spot abuse, limit repeated sign-in attempts, and find and fix problems.
• To answer your questions and requests.

What we don’t do

• We don’t sell or rent your data.
• The iPhone app shows no ads. The website’s Discover page can show a row of titles marked Promoted or Sponsored; everyone sees the same ones, and we don’t use your data to choose them or to target you.
• We don’t use your data for advertising.
• We don’t track you across other companies’ apps or websites.
• We don’t send push notifications or marketing email.

Services that help us run Binge

Binge relies on a few other companies. We share your personal data with two of them, which store or carry it for us. Others get no personal data from us: our server asks them for information without identifying you, or doesn’t contact them at all. And some your device connects to directly: when you sign in, when the app or the website shows a poster (the website also opens a connection to TMDB’s image server on every page), or when you play a trailer; their own privacy policies apply to what they receive that way.

Services we share your personal data with.

• Supabase — our database, sign-in and photo storage, and the service that deletes accounts. Your account data is stored with Supabase in the United States: the app and the website save your ratings, posts, lists and follows straight to it. Supabase handles that data only on our behalf and following our instructions, under a data processing agreement that is part of its terms of service: it must protect your data with appropriate technical and organizational security measures, and every company it relies on to process that data must be bound to protections no less strict than its own. That gives your data with Supabase the same protection this policy describes.
• Vercel — hosts the Binge website and the server that fetches movie and show information for the app. Vercel receives your IP address, your user agent and every request the app and the website make to our server. Some are things you ask for, such as the titles you open, the words you type in a search, the titles you pick in the setup quiz, or the genres and services you filter by. Others the app makes on its own, from your data, to show it to you: for example, the details and artwork of titles in your ratings, your lists and your feed, including the titles you rated that it uses to choose your daily Picks. Some requests also carry your device’s region and language. Your name and your Binge account aren’t attached to these requests, but each one carries the IP address of the device that makes it. Vercel also serves the website’s pages and the trailer player page that some test versions of the app open (see YouTube below), and an invite link you share includes your username, so Vercel sees that username (and the IP address of whoever opens the link) when someone opens it. Your ratings, posts, lists and follows don’t go through Vercel, even though the app asks it about the titles in them. Our server itself uses the IP address of the setup quiz’s requests to limit how many one address can make each minute; it keeps it only in its working memory, not in our database. Vercel’s data processing agreement applies only to customers on its Pro and Enterprise plans. Binge currently uses Vercel’s free Hobby plan, so that agreement doesn’t cover this data, and we can’t confirm that Vercel gives it the same protection this policy describes. Vercel’s own terms and privacy policy apply to it.

Services that get no personal data from us. When our server needs something from them, the request comes from our server, not from your device, so it doesn’t carry your IP address, your name or your Binge account. TMDB and YouTube also appear in the next list, for the connections your device makes to them itself.

• TMDB — movie and show information and artwork. Our server asks TMDB for what the app and the website need, such as a title you open, the words you type in a search, the titles you pick in the setup quiz, or the genres and services you filter by, sometimes with your device’s region and language. This product uses TMDB and the TMDB APIs but is not endorsed, certified, or otherwise approved by TMDB.
• JustWatch — streaming availability data, which reaches us through TMDB. Neither our server nor the app contacts JustWatch.
• YouTube — Binge uses YouTube API Services. Our server asks YouTube whether a trailer is still available, sending only the video’s ID.

Services your device connects to directly. These connections carry your device’s IP address, and each company’s own privacy policy applies to what it receives through them.

• Apple and Google — when you sign in, your device connects to Apple or Google, and the details described under How you sign in reach us through Supabase. We don’t send them your Binge data. Apple’s Privacy Policy applies to your Apple Account, and Google’s Privacy Policy to your Google account.
• TMDB — the app and the website load posters and other images directly from TMDB’s image servers, so TMDB receives your IP address and which images your device loads. TMDB’s Privacy Policy applies to those connections.
• YouTube — on the website, trailers play in YouTube’s standard embedded player, through YouTube API Services, when you press play. In the app, Play opens the trailer in the YouTube app or in Safari; Binge doesn’t load YouTube inside the app. Some test versions of the app, shared through TestFlight, play the trailer inside the app instead, when you press Play, in YouTube’s privacy-enhanced player (youtube-nocookie.com) on a player page from our website. Either way, your device connects to YouTube, YouTube may store its own cookies or data on your device, and Google’s Privacy Policy applies to that connection.
• Apps and sites you choose to open — when you share a title or an invite through another app, such as WhatsApp or any app you paste a copied link into, or open a link to another site from Binge, such as YouTube or JustWatch, that app or site receives what you send or open there, under its own privacy policy.

The website keeps your sign-in session in your browser’s storage. Like the app on your phone, it also keeps a few things only in that browser: the list of your daily Picks, your votes in Discover’s duels, the public watchlists you’ve joined, which reactions and new followers you’ve seen in your notifications, the last day it welcomed you back and the saved titles you said you haven’t seen (so it doesn’t ask about them again for two weeks), the poster you choose for your profile background, the badges you’ve earned, and, while you set up your account, who invited you, whether you added your photo and which of its first-time tips you’ve already closed. They don’t sync between browsers or devices, and clearing this site’s data in your browser removes them. Binge itself sets no advertising or analytics cookies. If you play a trailer on the website, YouTube may set its own cookies, as described above.

How long we keep your data

• Your account — what we store about you, as listed above, is kept for as long as your account exists, unless you change or delete it first. When you delete your account, it’s deleted from our database right away, as described below.
• Titles you send — a title you send, with its note, is kept until the person you sent it to removes it, until either of you blocks the other, or until either of your accounts is deleted. It doesn’t expire on its own. Because the app can’t take back a title you sent, you can email us to delete one.
• Backups — copies of our database, made so it can be recovered after a problem, can still contain your data after you delete your account, until those copies are deleted.
• Reports about you — reports other people sent about you, including the copy of a note they reported, stay after you delete your account so we can handle abuse. They don’t expire automatically.
• Emails — emails you send us, and our replies, stay in our email account, which is a Gmail account, so Google stores them and Google’s Privacy Policy applies to them. They don’t expire automatically; you can ask us to delete them.
• Request logs — our hosting providers, Vercel and Supabase, log the requests that reach our server and our database, such as your IP address, your user agent and what was asked for, including the words of a search; Supabase’s logs also record the approximate location estimated from your IP address. On our current plans, we can look back at no more than the most recent day of these logs. Each provider deletes them on its own schedule, which we don’t control.

Deleting your account

You can delete your account at any time in the app: in Settings → Delete account; while you’re still setting up your profile, with the ⋯ button at the top of the screen; and, if your account is suspended, with Delete account on the suspension screen. If you use an email address and a password to sign in, you can also delete it on the website, in Settings → Delete account. It takes effect right away and can’t be undone. It deletes:

• your profile, username and profile photo;
• your ratings, setup answers, top 5 and saved titles;
• your posts, the reactions on them, and the reactions you left;
• your lists;
• the titles you sent and the ones sent to you, with their notes;
• your follows in both directions, your blocks, and the reports you sent;
• your sign-in record, including what Apple or Google shared with us, and the IP address and user agent kept for each of your signed-in sessions.

On the phone you delete it from, the app also clears what it kept for that account: the things listed above under Kept only on your phone, its stored copies of your Binge data, and its cache of images. If Binge is also signed in to that account on another phone, it signs out there the next time it starts with an internet connection, and that removes its sign-in from that phone. Deleting the app there without opening it first removes what the app stored inside itself, but iOS can keep the app’s sign-in, which includes your email address, in that phone’s keychain. Reports other people sent about you are kept so we can handle abuse. Backups and our hosting providers’ request logs follow what’s described in How long we keep your data, above.

Deleting your Binge account doesn’t remove Binge from your Apple or Google account. To do that, open your iPhone’s Settings, tap your name and find Sign in with Apple; or, for Google, open your Google Account’s third-party connections. If your Binge account is linked to both Apple and Google, you can disconnect Google in Settings → Connected accounts without deleting your account.

If you can’t get into your account, email us from the address on your account, or tell us your username, and we’ll delete it for you once we’ve confirmed it’s yours.

Your choices

• In the app, you can change your profile photo. In the latest version of the app, you can also change your name and your username, in Settings → Name and username, and delete a post by tapping ⋯ on it in your Home feed. A post that doesn’t appear in your feed can’t be deleted from the app.
• You can edit or delete your lists, and unfollow or block anyone.
• You can delete your whole account in the app, as described above.
• You can email us to get a copy of your data, to correct it (for example your name or username, if your version of the app can’t change them), to delete any of your posts or a title you sent, or to object to how we use your data.

Security

Connections between the app, our server and our providers are encrypted, and database rules only let you change your own data. No system is perfectly secure, so we can’t promise that your data will never be accessed without permission.

Children

You must be 13 or older to use Binge. If we learn that someone under 13 has an account, we delete it. If you think that’s happened, please email us.

Changes

If we change this policy, we’ll update the date at the top of this page. The Privacy Policy link in the app always opens the current version.

Contact

Questions or requests: pablocarmonaesparza@gmail.com

Comercio Digital Moli, S.A.P.I. de C.V., Presa Oviachic No. 24, Mexico City 11500, Mexico.